Hi, On Wed, Oct 26, 2022 at 11:54:57AM -0400, Selva Nair wrote: > > I'm not sure I understand what the intended use of > > --management-forget-disconnect *is* - if it's "disconnected by a button > > press", the GUI can send "forget-passwords", and we do not need this > > option in the first place. > > > > If it's "disconnected by a network hickup", why would one want to > > flush the token here, which is intended to seamlessly reconnect > > after the hickup? > > Here "disconnect" does not mean disconnect from the server, but disconnect > the management client from the daemon. I like to refer to it as "detach" > from the management interface. When the client detaches it allows another > "client" (may be an interactive telnet session) to connect.
Ah! I was misunderstanding this option. Yes, in that case, "forget everything, including tokens" seems reasonable. > Still not convincing? Now it is, thanks :-) - wrong "disconnect". gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel