We can definitely add a checkbox for the interactive service. However, I
would make it opt-out to reduce the impact on support. Only a handful of
people know that in order to run OpenVPN-GUI without admin privileges
requires OpenVPNServiceInteractive to be running, and trying to educate
users is probably a lost cause :).
Samuli
it is almost the same choice like whether to include "run as admin"
manifest or leave it to user.
from security point of view, it makes sense that running anything with
admin privileges might be security issue and user should agree on that.
but I vote for starting interactive service from installer with no
question asked ))
2016-06-29 15:07 GMT+05:00 Samuli Seppänen <sam...@openvpn.net
<mailto:sam...@openvpn.net>>:
"Enable and start interactive service during installation" is on my
todo. I think we can safely enable it, because it will not
automatically go out starting any VPNs.
Samuli
I had a look at installers (as we enroll our own installer).
I've got more questions regarding installers
for example, interactive service is installed, but not started.
So, user
without admin rights cannot just start it.
it would be better to either start it from installer or add checkbox
there "start service"
2016-06-29 14:11 GMT+05:00 Samuli Seppänen <sam...@openvpn.net
<mailto:sam...@openvpn.net>
<mailto:sam...@openvpn.net <mailto:sam...@openvpn.net>>>:
Hi,
On Wed, Jun 29, 2016 at 01:57:14PM +0500, ????????
?????????????? wrote:
ok, if so, we need to modify installer to detect that.
Right, "master" installers should refuse cooperation on XP.
Samuli, you're listening? ;-)
gert
Yes. Do we still want to bloat "master" installers with
tap-windows?
Afaics that would only be useful _if_ somebody is having
problems
with tap-windows6 and needs to revert to tap-windows.
However, in
that case we'd need checkbox, not automatic tap-driver selection
based on the OS.
Samuli
--
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc
irc freenode net: mattock
