OpenVPN Support Forum

Code: Select all

from pyovpn.plugin import *
from packaging.version import parse  # Import version parsing utility

def post_auth(authcred, attributes, authret, info):

    # get user's property list, or create it if absent
    proplist = authret.setdefault('proplist', {})

    # get ASCLI version, default to 0.0.0 if missing
    uv_ascli_ver = proplist.get('UV_ASCLI_VER', '0.0.0')

    # Compare UV_ASCLI_VER with 3.7.0
    if parse(uv_ascli_ver) > parse(3.7.0):
        authret['status'] = SUCCEED
    else:
        authret['status'] = FAIL  # Fail authentication
        authret['reason'] = 'ASCLI version too low'
        authret['client_reason'] = 'Client version is too old. Need to have greater than 3.7.0.  You have ${uv_ascli_ver}'
    return authret

Code: Select all

from pyovpn.plugin import *
from packaging.version import parse  # Import version parsing utilitya


def post_auth(authcred, attributes, authret, info):

        # define minimum version
        min_client_ver='3.8.0'

        # Get user's property list, or create it if absent
        proplist = authret.setdefault('proplist', {})

        # Only apply version check for VPN authentication
        if attributes.get('vpn_auth'):
            # Get ASCLI version, default to 0.0.0 if missing
            uv_ascli_ver = attributes.get('client_info', {}).get('UV_ASCLI_VER', '0.0.0')

            # Compare UV_ASCLI_VER with min_client_ver
            if parse(uv_ascli_ver) > parse(min_client_ver):
                authret['status'] = SUCCEED
            else:
                authret['status'] = FAIL  # Fail authentication
                authret['reason'] = 'ASCLI version too low'
                authret['client_reason'] = f'Your client is too old.  Minimum client version is {min_client_ver} and you have {uv_ascli_ver}'
    
        return authret