Unable to keep 2 devices connected with same username

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
realtebo
OpenVpn Newbie
Posts: 6
Joined: Wed Jul 25, 2018 9:14 pm

Unable to keep 2 devices connected with same username

Post by realtebo » Wed Aug 29, 2018 1:41 pm

I setup Openvpn AS to accept multiple connection from same user.
  • "Multiple Sessions per User" is ON
  • Server config directives box contains duplicate-cn and do not contain nothing other
  • Client config directives box contains duplicate-cn and do not contain nothing other
  • Applied config, restart openvpn server, and also restart the server itself

I do first vpn login with my ipad. OK

The I do login on my android phone.

OpenVpn let me access, but kill iPad connection. On Ipad, I see the messsage

> There was an error attempting to connect to the selected server

And this in the logs

Code: Select all

[-] OVPN 4 OUT: "Wed Aug 29 13:28:36 2018 SENT CONTROL [realtebo]: 'HALT,disconnected due to new connection by same user' (status=1)"
[OMIClientAuth,0,] AUTH SUCCESS {'status': 0, 'reason': 'AuthTrue: autologin certificate auth succeeded', 'serial_list': [], 'user': u'realtebo', 'proplist': {u'prop_autologin': u'true', u'pvt_password_digest': '[redacted]', u'type': u'user_compile', u'prop_autogenerate': u'true'}, 'common_name': u'realtebo_AUTOLOGIN', 'serial': '5'} cli=u'android'/u'3.2'
[-] OVPN 5 OUT: "Wed Aug 29 13:28:36 2018 MANAGEMENT: CMD 'client-auth 1 0'"
[-] OVPN 5 OUT: 'Wed Aug 29 13:28:37 2018 realtebo_AUTOLOGIN/192.168.1.1:39835 OPTIONS IMPORT: compression parms modified'
[-] OVPN 5 OUT: 'Wed Aug 29 13:28:37 2018 realtebo_AUTOLOGIN/192.168.1.1:39835 MULTI: Learn: 172.27.234.2 -> realtebo_AUTOLOGIN/192.168.1.1:39835'
[-] OVPN 5 OUT: 'Wed Aug 29 13:28:37 2018 realtebo_AUTOLOGIN/192.168.1.1:39835 MULTI: primary virtual IP for realtebo_AUTOLOGIN/192.168.1.1:39835: 172.27.234.2'
[-] OVPN 5 OUT: "Wed Aug 29 13:28:39 2018 realtebo_AUTOLOGIN/192.168.1.1:39835 SENT CONTROL [realtebo_AUTOLOGIN]: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 12,ping-restart 50,comp-lzo yes,redirect-private def1,redirect-private bypass-dhcp,redirect-private autolocal,route-gateway 172.27.234.1,route 192.168.1.0 255.255.255.0,route 172.27.224.0 255.255.240.0,dhcp-option DNS 192.168.1.228,dhcp-option ADAPTER_DOMAIN_SUFFIX homenet.telecomitalia.it,register-dns,block-ipv6,ifconfig 172.27.234.2 255.255.254.0,peer-id 0,cipher AES-256-GCM' (status=1)"
[-] OVPN 5 OUT: "Wed Aug 29 13:28:39 2018 realtebo_AUTOLOGIN/192.168.1.1:39835 Data Channel: using negotiated cipher 'AES-256-GCM'"
[-] OVPN 5 OUT: "Wed Aug 29 13:28:39 2018 realtebo_AUTOLOGIN/192.168.1.1:39835 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key"
[-] OVPN 5 OUT: "Wed Aug 29 13:28:39 2018 realtebo_AUTOLOGIN/192.168.1.1:39835 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key"
[-] OVPN 4 OUT: 'Wed Aug 29 13:28:41 2018 realtebo/192.168.1.1:50035 SIGTERM[soft,delayed-exit] received, client-instance exiting'
Last edited by realtebo on Wed Aug 29, 2018 10:39 pm, edited 1 time in total.

User avatar
novaflash
OpenVPN Inc.
Posts: 1073
Joined: Fri Apr 13, 2012 8:43 pm

Re: Unalbe to keep 2 devices connected with same username

Post by novaflash » Wed Aug 29, 2018 9:53 pm

Just make a user that has _nothing_ configured on it, except maybe a password. Use that to connect.
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.

realtebo
OpenVpn Newbie
Posts: 6
Joined: Wed Jul 25, 2018 9:14 pm

Re: Unalbe to keep 2 devices connected with same username

Post by realtebo » Wed Aug 29, 2018 10:38 pm

Thanks for replying.

Tomorrow I will try

Could you explain me why? Is it a test or something in my config are obviously wrong?

User avatar
novaflash
OpenVPN Inc.
Posts: 1073
Joined: Fri Apr 13, 2012 8:43 pm

Re: Unable to keep 2 devices connected with same username

Post by novaflash » Wed Aug 29, 2018 11:45 pm

The error on the server will probably say something like "concurrent session denied due to user-specific properties" or something, which comes down to having user-specific configuration in the user account you want to connect multiple users under and that's not possible.
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.

Post Reply