On Thu, Jun 30, 2016 at 4:25 AM, David Sommerseth <
[email protected]> wrote:
> On 28/06/16 16:11, debbie10t wrote:
> > Hi,
> >
> > Looking at this forum thread:
> > https://forums.openvpn.net/viewtopic.php?f=4&t=22003
> >
> > I was looking @src for 'timeout' etc for --auth-user-pass
> > but I could not find anything related to timeout ..
> >
> > I setup a quick test client (debian8) and while running
> > the test got this message:
> > Password entry required for 'Enter Auth Username:' (PID 3513).
> > Please enter password with the systemd-tty-ask-password-agent tool!
> > (Also, I determined that a 30 second time out was in effect)
> >
> > googled:systemd-tty-ask-password-agent
> > Found:
> >
> http://man7.org/linux/man-pages/man1/systemd-tty-ask-password-agent.1.html
> >
> > At this point I concluded that openvpn /probably/ does not
> > dictate a timeout for this action. Would that be correct ?
>
> Yes, that is correct. OpenVPN is willing to wait forever for a user to
> respond. But systemd-ask-password have it's own timeout mechanism which
> might kick in.
>
> I'll admit though that we might not handle these timeouts from
> systemd-ask-password gracefully enough.
>
Yes, currently there is no good way for the UI to abort a password dialog.
OpenVPN triggers a FATAL error if anything but a password (for private key)
or username/password (for user-auth) string is provided at this stage. This
is a problem not just with timeout, but generally for cancelling the
dialog. The GUI/UI has to do hacks like return a fake password if user
cancel the dialog so that the connection can fail and restart instead of
die.
It would be useful to have a way of gracefully ending password dialogs with
a SIGUSR1/SIGHUP restart. That would also make it easy to handle things
like systemd timeout.
Selva
------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
