i just changed my account password and then i noticed that i was still able to connect through old vpn profile i downloaded , after changing password i downloaded new client.ovpn profile and compare it with old one its same ?? so i wonder how can be reset the autologin profile so that it not work once password is change.
+ one another Question what is meant by user locked profile i see this term in user panel when i was downloading auto-login profile .
thanks
Openvpn how to reset auto-login profile
-
- OpenVpn Newbie
- Posts: 14
- Joined: Tue Sep 04, 2018 6:52 pm
- novaflash
- OpenVPN Inc.
- Posts: 1073
- Joined: Fri Apr 13, 2012 8:43 pm
Re: Openvpn how to reset auto-login profile
Autologin profiles bypass username and password authentication. Because otherwise it cannot autologin.
Therefore changes to the password mean nothing to the autologin profile.
If you want to ensure people have to get a new autologin profile after a password change, you will have to include in your process the act of going to Revoke Certificates on the Access Server and revoke the autologin certificate for this user.
The next time he/she logs in with the new password to obtain a new profile, he/she will get a new autologin profile with unique certificates.
Therefore changes to the password mean nothing to the autologin profile.
If you want to ensure people have to get a new autologin profile after a password change, you will have to include in your process the act of going to Revoke Certificates on the Access Server and revoke the autologin certificate for this user.
The next time he/she logs in with the new password to obtain a new profile, he/she will get a new autologin profile with unique certificates.
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.
- novaflash
- OpenVPN Inc.
- Posts: 1073
- Joined: Fri Apr 13, 2012 8:43 pm
Re: Openvpn how to reset auto-login profile
Oh and user-locked is a profile that requires you to provide both the connection profile of user-locked type, and the credentials (username+password) to connect. It is user-locked because the profile for your account works only for your account, and for none other.
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.