On Thu, Jul 9, 2015 at 6:02 PM, Jan Just Keijser <janj...@nikhef.nl> wrote:
> Hi,
>
>
> On 09/07/15 22:28, Matthew Karas wrote:
>>
>> I'm trying to log in with a certain username then log out and then log
>> back in with a new username.
>>
>>
>> -----------------------------------------------------------------------------------------------------------------
>> Jul 09 16:11:00 blah.com openvpn[4230]: Attempt: AUTH 'baz' 'password'
>> Jul 09 16:11:00 blah.com openvpn[4230]: Thu Jul  9 16:11:00 2015
>> xxxxxxx/````````` TLS Auth Error: username attempted to change from
>> 'foo' to 'baz' -- tunnel disabled
>> Jul 09 16:11:00 blah.com openvpn[4230]: Thu Jul  9 16:11:00 2015
>> xxxxxxx/````````` TLS Auth Error: Auth Username/Password verification
>> failed for peer
>>
>> ------------------------------------------------------------------------------------------------------------------
>>
>> I'm getting the following error and I was wondering if there was a
>> configuration workaround I could use so that I don't get a TLS Auth
>> Error.
>>
> if your setup is UDP based, try adding
>   explicit-exit-notify 3
> to the client configuration (or use "push" from the server config).
> Most likely the second login attempt occurs before the server knows that the
> first client is gone. It then refuses access. The "explicit-exit-notify"
> explicitly tells the server that you're logging out.
>
> HTH,
>
> JJK
>

I believe I do use that option on the client.  I'm resetting the
connection using signal SIGHUP on the management socket.  It doesn't
seem to be actually disconnecting when I do that.  It does work when I
wait long enough for a timeout.  It seems like explicit-exit-notify
isn't actually working.

Am I configuring it incorrectly?  Am I terminating the connection incorrectly?

I'm connected then I use

forget-passwords
SUCCESS: Passwords were forgotten
signal SIGHUP
SUCCESS: signal SIGHUP thrown
>ECHO:1436480286,on
>HOLD:Waiting for hold release
hold release

------------------------------------------------------------------------------
Don't Limit Your Business. Reach for the Cloud.
GigeNET's Cloud Solutions provide you with the tools and support that
you need to offload your IT needs and focus on growing your business.
Configured For All Businesses. Start Your Cloud Today.
https://www.gigenetcloud.com/
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to