OpenVPN GUI (SBL/PLAP) setting doesn't work with Dynamic Challenge about openvpn-gui HOT 6 CLOSED

It looks like the most (all?) issues users have with PLAP is due to (lack of) documentation. I just found this one but was wondering if we should put it in community wiki or some repo (openvpn-gui? openvpn-build?).

from openvpn-gui.

Looks like your config file is not setup properly for dynamic challenge. OpenVPN is exiting on receiving the dynamic challenge query likely because you do not have auth-retry interact in the config file. This is required for dynamic challenge to work.

Note that for instances started by the GUI it sets this option by default, but when started at boot as in PLAP, it has to be in the config file.

from openvpn-gui.

I normally use OpenVPN Connect v3 (OpenVPN3) so I don't need to add that line "auth-retry interact" on the Client Profile. That's the reason I didn't have that in my Client Profile when using OpenVPN GUI (OpenVPN2), but it looks like this is needed for Dynamic Challenge on OpenVPN2

I tested with the line "auth-retry interact" and worked

Thanks

from openvpn-gui.

The default in OpenVPN 2 is "auth-retry none" -- I've no idea why. We change that to "interact" when started by OpenVPN-GUI as its clearly an interactive session. For PLAP, I wanted to allow the user to decide how these pre-started sessions should behave.

Based on your report, now I feel it may be useful to automatically set auth-retry to interact when we attach from PLAP screen or at least when interactive authentication is in use.

from openvpn-gui.

Let's close the ticket, but think what would be the best place to put documentation on PLAP feature. @flichtenheld

from openvpn-gui.

It is a openvpn-gui feature so the primary documentation ideally should be there. Then we could include it in the installer or link to it from the Wiki anyway.

from openvpn-gui.