Hi, On Sun, Aug 7, 2016 at 8:55 AM, Илья Шипицин <chipits...@gmail.com> wrote:
> I also noticed, that "openvpn administrators" membership is required. > > Should we modify installer to make it adf current user to that group? > With multiple users on a system, the installer will have to choose which users are to be added etc. Also for newly created users the membership will not be automatic. For simple setups with one or two users who have access to the admin password, I think, the current setup where the GUI provides a way to add themselves to the group looks good enough. In a vast majority of cases where users are also administrators everything is automatic: UAC will ensure that the GUI runs with limited rights and thus use the interactive service, and the service will permit config from any location because of user's membership in the "Administrators" group. For more complex setups, I suppose the sysadm would want to fine-tune membership in the "OpenVPN Administrtaors" group as needed. Selva
