Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I just managed to cut my OpenVPN connection to some 20 servers tonight. I was experimenting with the client-connect scripts, and at some point one of the scripts returned a non zero response. This non zero response triggered an AUTH: Received AUTH_FAILED control message in the syslog which eventually resulted in a SIGTERM[soft,auth-failure] received, process exiting exit from the OpenVPN client. Is there a way to protect myself from this? Any configuration on the server or client side?

share|improve this question
    
Any help is appreciated... anyone? –  rmarimon Jun 29 '11 at 2:23
    
This is like typing something in google and getting 0 pages found. –  rmarimon Jun 29 '11 at 16:33
add comment

1 Answer 1

up vote 1 down vote accepted

The easiest way to protect yourself from this is to wrap the openvpn client in a while loop that restarts it. Looking at the openvpn discussion list it appears this was a design decision made because auth failures likely require manual intervention and having the client retry repeatedly would in many cases lock out the user (according to SOX/PCI compatible security precautions). It isn't clear what your OS config is, in OS X the launchd would take care of respawning this.

share|improve this answer
    
Will do this and see how it works. I'm thinking this as a protection mechanism against misconfigurations on my side that would result in a disconnected openvpn client. As for the clientes they are linux so I'll cron my way through it. –  rmarimon Aug 16 '11 at 16:41
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.