cdharmer
I've been trying to do the same, no luck with the documentation.
The release notes contains a hint that
cs.generic_all_users has been set to true by default to enable the server-locked profile for all users.
The ./confdba -cs
showed stuff like
....
"cs.cws_proto_v2": "true",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
.....
So I tried my luck with the following command in the script directory
./sacli --key cs.generic_all_users --value false ConfigPut
./confdba -cs
now includes stuff like
...
"cs.generic_all_users": "false",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
....
But even after
./sacli start (and even openvpnas restart)
the server-locked profile are still available.
Any ideas?