Hi

On Thu, Jun 28, 2018 at 4:28 PM, Jonathan K. Bullard
<jkbull...@gmail.com> wrote:

>>> 2. In Dynamic CR, what is the purpose of _not_ requiring a response?
>>> Is it to display a message without a text input box and have the user
>>> only able to click "OK" or "Cancel" (and disconnect if the user clicks
>>> "Cancel")? Or should I display a text input box but allow the user to
>>> leave it empty (and send an empty "response" to the server?)
>>
>> I do not know.
>>
>> I suspect this feature is not used by any server-side implementations
>> in use. IIRC, the console prompting just ignores this flag and prompts
>> for a response in all cases.
>>
>> In OpenVPN-GUI I decided to handle this slightly differently: we ignore the
>> dynamic CR request if no response is required. So, any subsequent auth
>> request will get treated like a normal username/pasword prompt which,
>> I think, is the intended behaviour. However, instead of silently ignoring it,
>> popping up a notification that displays the "challenge text" could be
>> considered.
>
> I'm going to have Tunnelblick display the message. It could be used to
> make an announcement (for example, "The VPN will be down for
> maintenance…") that doesn't really need to be acknowledged before
> allowing the connection to proceed.

That "messsage" comes with AUTH_FAILED so the server will prompt
for username/password again. So its not like a usual "announcement".

Anyway, showing it to the user sounds good.

Selva

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to