On 11/16/08, Jochen Wierum <joc...@jowisoftware.de> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > Hi Alon, > > > > You should not do this. > > You should only use the management interface for all tasks. > > I know... but this brings new problems: if the configuration is invalid, > OpenVPN prints a warning to stderr, but not to the management interface. > That makes it hard do debug errors. >
Please separate between debug and normal operation. This will allow you to run the daemon as a service while the user will not require special privilege. Also, you can let the user to write his own configuration while you just manage the connect/disconnect/authentication phases. I think this would be best for advance users. Alon.
