Hi,

On Fri, Jan 27, 2017 at 12:02:21AM +0100, David Sommerseth wrote:
> On 26/01/17 19:45, Gert Doering wrote:
> > On Thu, Jan 26, 2017 at 07:36:32PM +0100, David Sommerseth wrote:
> >> Anyhow ... quick-fix/workaround: Don't use --auth-nocache
> > 
> > What happens if you have --auth-nocache, the server sends a token, and
> > the token expires?  Will the client get something back that it can
> > understand as "oh, I need to ask for a new password!"?
> > 
> > (Sorry, I know I *should* have tested this long ago... :-) )
> 
> The when --auth-nocache is in use, the contents of password field in
> struct user_pass is wiped and later ignored, regardless if the server
> sent an --auth-token or not.

Uh.  My question did not make sense.  Trying again:

What happens if you do NOT have --auth-nocache, the server sends a token, 
and the token expires?  Will the client get something back that it can
understand as "oh, I need to ask for a new password!"?

gert


-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: signature.asc
Description: PGP signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to