Page 1 of 1
Disable download of server-locked profile
Posted: Sat Aug 27, 2011 12:26 pm
by bashtux
I am trying to disable server-locked profile access for users in the Web UI in OpenVPN AS 1.8.3 but cannot seem to get any info.
Can anybody perhaps point me in the correct direction?
Re: Disable download of server-locked profile
Posted: Sun Aug 28, 2011 1:07 pm
by cdharmer
I've been trying to do the same, no luck with the documentation.
The release notes contains a hint that
cs.generic_all_users has been set to true by default to enable the server-locked profile for all users.
The ./confdba -cs
showed stuff like
....
"cs.cws_proto_v2": "true",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
.....
So I tried my luck with the following command in the script directory
./sacli --key cs.generic_all_users --value false ConfigPut
./confdba -cs
now includes stuff like
...
"cs.generic_all_users": "false",
"cs.https.ip_address": "eth0",
"cs.https.port": "943",
"cs.prof_sign_web": "true",
....
But even after
./sacli start (and even openvpnas restart)
the server-locked profile are still available.
Any ideas?