plaisthos has uploaded this change for review. ( 
http://gerrit.openvpn.net/c/openvpn/+/1919?usp=email )


Change subject: Document notify as auth pending method
......................................................................

Document notify as auth pending method

This allows a server to signal a pending authentication that does
not require any action from the user or client but can still take
a while to completely and enter the auth pending state.

Change-Id: I6217c0541bff81eefa63a987db8904b2feda2546
Signed-off-by: Arne Schwabe <[email protected]>
---
M doc/management-notes.txt
1 file changed, 27 insertions(+), 0 deletions(-)



  git pull ssh://gerrit.openvpn.net:29418/openvpn refs/changes/19/1919/1

diff --git a/doc/management-notes.txt b/doc/management-notes.txt
index 1126468..6cec49e 100644
--- a/doc/management-notes.txt
+++ b/doc/management-notes.txt
@@ -794,6 +794,33 @@
 The client should return the response to the crtext challenge
 using the cr-response command.

+notify
+======
+This is notification that there is some out-of-band authentication is
+happen that is outside the control of the client. This might just a
+server side check that takes longer or another out-of-band authentication
+like requiring to have to authorise the connection on a mobile phone app.
+
+    NOTIFY:<flags>:<notify_message>
+
+For the user this is
+
+<flags>: a series of optional, comma-separated flags. So far no flags have
+been defined yet.
+
+<notify_message>: The message to show the user to inform them about the
+ongoing authentication
+
+An example message for a message for a server that does some checks against
+well known list of blacklists could be
+
+    NOTIFY::Please wait while your IP is checked against multiple online abuse 
databases.
+
+to inform the user that there is a delay in the connection attempt.
+
+Since the notify pending auth is not requiring any action on the client side,
+this message is not negotiated but can just be sent as a gratuitous message.
+
 COMMAND -- client-deny  (OpenVPN 2.1 or higher)
 -----------------------------------------------


--
To view, visit http://gerrit.openvpn.net/c/openvpn/+/1919?usp=email
To unsubscribe, or for help writing mail filters, visit 
http://gerrit.openvpn.net/settings?usp=email

Gerrit-MessageType: newchange
Gerrit-Project: openvpn
Gerrit-Branch: master
Gerrit-Change-Id: I6217c0541bff81eefa63a987db8904b2feda2546
Gerrit-Change-Number: 1919
Gerrit-PatchSet: 1
Gerrit-Owner: plaisthos <[email protected]>
Gerrit-CC: openvpn-devel <[email protected]>
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to