Disable download of server-locked profile

Business solution to host your own OpenVPN server with web management interface and bundled clients.
Post Reply
bashtux
OpenVpn Newbie
Posts: 2
Joined: Sat Aug 27, 2011 12:15 pm

Disable download of server-locked profile

Post by bashtux » Sat Aug 27, 2011 12:26 pm

I am trying to disable server-locked profile access for users in the Web UI in OpenVPN AS 1.8.3 but cannot seem to get any info.

Can anybody perhaps point me in the correct direction?

cdharmer
OpenVpn Newbie
Posts: 1
Joined: Sun Aug 28, 2011 12:52 pm

Re: Disable download of server-locked profile

Post by cdharmer » Sun Aug 28, 2011 1:07 pm

I've been trying to do the same, no luck with the documentation.
The release notes contains a hint that
cs.generic_all_users has been set to true by default to enable the server-locked profile for all users.
The ./confdba -cs
showed stuff like
....
"cs.cws_proto_v2": "true",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
.....
So I tried my luck with the following command in the script directory
./sacli --key cs.generic_all_users --value false ConfigPut

./confdba -cs
now includes stuff like
...
"cs.generic_all_users": "false",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
....
But even after
./sacli start (and even openvpnas restart)

the server-locked profile are still available.

Any ideas?

Post Reply