I can log in to Openvpn using ANY user's credentials

[jasbur]

I can seem to log in to my Openvpn server using any valid user credentials. For instance if I have the tokens for user1 but use user2's username and password I can successfully log into the server.

I am using ClearOS and their implementation of Openvpn. I am, however, not afraid to get my hands dirty with configuration files. What can I change to make a user have to use their own credentials?

[janjust]

without config files it's hard to tell what you mean by user credentials.
There is no pre-defined mapping between a client certificate/key and a client's username/password; such a mapping can be enforced using an 'auth-user-verify-pass' script on the server side , but you'd need to script this yourself.

Post the server config file so that we can see what you mean by 'user credentials'.

[maikcat]

hi there,

just to remind you that these appliances (untangle,zeroshell,zentyal)
tend to overwrite configs file,so if you want one change permanent you
must figure out how to do it via their interface..


Michael.