I am trying to disable server-locked profile access for users in the Web UI in OpenVPN AS 1.8.3 but cannot seem to get any info.
Can anybody perhaps point me in the correct direction?
Disable download of server-locked profile
-
- OpenVpn Newbie
- Posts: 2
- Joined: Sat Aug 27, 2011 12:15 pm
-
- OpenVpn Newbie
- Posts: 1
- Joined: Sun Aug 28, 2011 12:52 pm
Re: Disable download of server-locked profile
I've been trying to do the same, no luck with the documentation.
The release notes contains a hint that
cs.generic_all_users has been set to true by default to enable the server-locked profile for all users.
The ./confdba -cs
showed stuff like
....
"cs.cws_proto_v2": "true",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
.....
So I tried my luck with the following command in the script directory
./sacli --key cs.generic_all_users --value false ConfigPut
./confdba -cs
now includes stuff like
...
"cs.generic_all_users": "false",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
....
But even after
./sacli start (and even openvpnas restart)
the server-locked profile are still available.
Any ideas?
The release notes contains a hint that
cs.generic_all_users has been set to true by default to enable the server-locked profile for all users.
The ./confdba -cs
showed stuff like
....
"cs.cws_proto_v2": "true",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
.....
So I tried my luck with the following command in the script directory
./sacli --key cs.generic_all_users --value false ConfigPut
./confdba -cs
now includes stuff like
...
"cs.generic_all_users": "false",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
....
But even after
./sacli start (and even openvpnas restart)
the server-locked profile are still available.
Any ideas?