On 30/06/16 18:11, Selva Nair wrote: > On Thu, Jun 30, 2016 at 4:25 AM, David Sommerseth < > [email protected]> wrote: > >> On 28/06/16 16:11, debbie10t wrote: >>> Hi, >>> >>> Looking at this forum thread: >>> https://forums.openvpn.net/viewtopic.php?f=4&t=22003 >>> >>> I was looking @src for 'timeout' etc for --auth-user-pass >>> but I could not find anything related to timeout .. >>> >>> I setup a quick test client (debian8) and while running >>> the test got this message: >>> Password entry required for 'Enter Auth Username:' (PID 3513). >>> Please enter password with the systemd-tty-ask-password-agent tool! >>> (Also, I determined that a 30 second time out was in effect) >>> >>> googled:systemd-tty-ask-password-agent >>> Found: >>> >> http://man7.org/linux/man-pages/man1/systemd-tty-ask-password-agent.1.html >>> At this point I concluded that openvpn /probably/ does not >>> dictate a timeout for this action. Would that be correct ? >> Yes, that is correct. OpenVPN is willing to wait forever for a user to >> respond. But systemd-ask-password have it's own timeout mechanism which >> might kick in. >> >> I'll admit though that we might not handle these timeouts from >> systemd-ask-password gracefully enough. >> > Yes, currently there is no good way for the UI to abort a password dialog. > OpenVPN triggers a FATAL error if anything but a password (for private key) > or username/password (for user-auth) string is provided at this stage. This > is a problem not just with timeout, but generally for cancelling the > dialog. The GUI/UI has to do hacks like return a fake password if user > cancel the dialog so that the connection can fail and restart instead of > die. > > It would be useful to have a way of gracefully ending password dialogs with > a SIGUSR1/SIGHUP restart. That would also make it easy to handle things > like systemd timeout. >
Thanks David, thanks Selva, having done quite a bit of inconclusive testing, I decided that this is a bit of a "can of worms" .. eg things like: --keepalive 20 3600 --hand-windows 1800 --reneg-sec 300 Clearly, especially with connectionless UDP tunnel, there is a lot more going on than the simple "user/pass timeout" I first asked about. Also, I cannot replicate my first attempt, which provided the message regarding systemd-tty-ask-password-agent .. I built a new git.master which appears to behave differently >:-$ I don't think it is worth wasting any more time on this one off request but many thanks for your guidance. I will see if I can extract any more useful details from the forum thread and update here if anything emerges .. you never know. Top regards R ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
