Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-24 Thread David Woodhouse
On Mon, 2014-04-14 at 09:19 +0200, Jan Just Keijser wrote: > I do like the idea of not needing root access to run openvpn - esp > windows users could benefit from this, as they're not always allowed to > install the tap-win adapter. Then again, it goes against the UNIX/Linux > philosophy that ea

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-14 Thread Kevin Cernekee
On Mon, Apr 14, 2014 at 12:19 AM, Jan Just Keijser wrote: > I'd vote against enabling TARGET_ANDROID by default This would not be my first choice either, but it would allow non-root processes to set up a fully functional VPN connection on Linux hosts without a special build. If I'm going to have

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-14 Thread Jan Just Keijser
Hi Kevin Cernekee wrote: On Sun, Apr 13, 2014 at 8:19 AM, Arne Schwabe wrote: You could look at the TARGET_ANDROID. That uses the management interface and fds over unix socket to achieve something similar. Do you think it would be feasible to enable TARGET_ANDROID by default in the L

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Arne Schwabe
On 13.04.2014 18:31, Kevin Cernekee wrote: On Sun, Apr 13, 2014 at 8:19 AM, Arne Schwabe wrote: You could look at the TARGET_ANDROID. That uses the management interface and fds over unix socket to achieve something similar. Do you think it would be feasible to enable TARGET_ANDROID by default

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Kevin Cernekee
On Sun, Apr 13, 2014 at 8:19 AM, Arne Schwabe wrote: > You could look at the TARGET_ANDROID. That uses the management interface and > fds over unix socket to achieve something similar. Do you think it would be feasible to enable TARGET_ANDROID by default in the Linux OpenVPN builds, and change th

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Arne Schwabe
On 13.04.2014 16:39, Kevin Cernekee wrote: On Sun, Apr 13, 2014 at 3:47 AM, Gert Doering wrote: I think the goal can in most cases be achieved using SSH port forwarding - or OpenConnect, or a myriad of other "tunnel this file descriptor for me" tools. OpenVPN will do tun/tap, and do that well.

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Kevin Cernekee
On Sun, Apr 13, 2014 at 3:47 AM, Gert Doering wrote: > I think the goal can in most cases be achieved using SSH port forwarding - > or OpenConnect, or a myriad of other "tunnel this file descriptor for me" > tools. OpenVPN will do tun/tap, and do that well. The problem with all of these alternat

Re: [Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Gert Doering
Hi, On Sat, Apr 12, 2014 at 10:16:53PM -0700, Kevin Cernekee wrote: > Sometimes it is desirable to establish VPN connections without setting > up a kernel tun/tap device. Possible use cases include: > > - Routing traffic from different applications through different VPNs. > > - Connecting to

[Openvpn-devel] [PATCH 0/3] Support non-root operation using ocproxy

2014-04-13 Thread Kevin Cernekee
Sometimes it is desirable to establish VPN connections without setting up a kernel tun/tap device. Possible use cases include: - Routing traffic from different applications through different VPNs. - Connecting to multiple VPNs (clients, sites, ...) that have overlapping IP ranges. - Conne