Feedback about the AUTH_FAILED

[Clodo]

I think the AUTH_FAILED is a too much generic message for users. Look how many non-specific results have google about "OpenVPN AUTH_FAILED".

Especially when admin use the "client-connect" directive, for example for a script that throw the AUTH_FAILED for different kind of reasons, most of them typical on VPN services; for example: account expiration, quota expiration, time expiration, already connected to another server, temporary or permanent ban, server reserved to specific class of members, server active because of staff testing but under maintenance for normal users, unknown or invalid user.

I hope if developers think about how an admin can send a feedback for the reason of a AUTH_FAILED.
Maybe settings an environment variable in "client-connect" script, string that OpenVPN can send to client for a more precise log output.
-

[den_kondor]

Absolutely agree. It's definitely necessary.