Hi,

With openvpn 2.4.5, we are using deferred mode for user verification through 
plugin library.  Noticed there are a lot of auth_control_files are left around 
and wondering if we need to do our own clean up of these files outside of 
openvpn.

The scenario involves two factor authentication where end user has to approve 
through their smartphone app which may take some time.

The left-over files mostly contains "0" which indicates a failure due to 
timeout.

If the second factor authentication is done within a minute, then 
auth_control_file is deleted right away if the auth result is failure.  The 
auth result is success, then the file is deleted when the connection is closed.

Any suggestion is appreciated.

Thanks.
-chang
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to