Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Илья Шипицин
I saw few cases when openvpn.exe remains running even after openvpn-gui told it to stop (and it was awful). is iservice magic of start/stop openvpn.exe the same as for openvpn-gui ? if yes, I would say that it is ok to switch to iservice by default. 2016-02-08 12:42 GMT+05:00 Gert Doering : > H

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Gert Doering
Hi, On Mon, Feb 08, 2016 at 08:35:54AM +0500, ?? wrote: > I have one question regarding that. > when we deployed openvpn, we used to supply our users a config file without > "nobind" keyword. > > it worked for most of our users, however, those who needed 2 or more vpn > conne

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Gert Doering
Hi, On Mon, Feb 08, 2016 at 08:27:13AM +0500, ?? wrote: > but how does it look from user point of view ? why do we show that to user > ? how do you we want user to interact with that ? Installer installs iservice, GUI uses it, done. If someone wants expert mode and clicks on

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Selva Nair
Hi, On Sun, Feb 7, 2016 at 10:35 PM, Илья Шипицин wrote: > what about that PR. there might be cases when > > 1) interactive service installed > 2) user is administrator > It will just work in all cases that worked before (as Gert said, 1, 2 and 1&&2). The pull request only does three things: 1

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Илья Шипицин
I saw that PR. I have one question regarding that. when we deployed openvpn, we used to supply our users a config file without "nobind" keyword. it worked for most of our users, however, those who needed 2 or more vpn connections complained that "port already bind". so, we added "nobind" to clien

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Илья Шипицин
2016-02-08 2:55 GMT+05:00 Gert Doering : > Hi, > > On Mon, Feb 08, 2016 at 01:12:37AM +0500, ?? wrote: > > there's still "Start OpenVPN directly" > > > > https://github.com/OpenVPN/openvpn-gui/blob/master/openvpn.c#L724 > > > > in such case admin rights are still required for

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Gert Doering
Hi, On Sun, Feb 07, 2016 at 03:25:51PM -0500, Selva Nair wrote: > So the idea is to keep the current manifest in the GUI distributed with > 2.3 and remove the HigestAvailable from that to be distributed with 2.4. > This change is also required to let admin users (with UAC) use interactive > servi

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Gert Doering
Hi, On Mon, Feb 08, 2016 at 01:12:37AM +0500, ?? wrote: > there's still "Start OpenVPN directly" > > https://github.com/OpenVPN/openvpn-gui/blob/master/openvpn.c#L724 > > in such case admin rights are still required for routes manipulation. In this case, it would just not w

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Илья Шипицин
as far as I understand it is up to user whether to install openvpn as a service or not. if openvpn is not installed as a service, highest priv is required, right? 2016-02-08 1:29 GMT+05:00 Selva Nair : > Hi, > > On Sun, Feb 7, 2016 at 3:12 PM, Илья Шипицин wrote: > >> there's still "Start OpenVP

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Selva Nair
Hi, On Sun, Feb 7, 2016 at 3:12 PM, Илья Шипицин wrote: > there's still "Start OpenVPN directly" > > https://github.com/OpenVPN/openvpn-gui/b, lob/master/openvpn.c#L724 > > > in such case admin rights are still required for rout

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Selva Nair
Hi, On Sun, Feb 7, 2016 at 11:00 AM, Илья Шипицин wrote: > if you mean interactive service, keep in mind that people sometimes start > openvpn as a child of openvpn-gui, not as a service Requiring HighestAvailable was an interim solution until interactive service becomes available. Users who

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Илья Шипицин
there's still "Start OpenVPN directly" https://github.com/OpenVPN/openvpn-gui/blob/master/openvpn.c#L724 in such case admin rights are still required for routes manipulation. maybe we should release two installers (or make a checkbox in installer?) 1) regular mode (with highest priv manifest)

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Gert Doering
Hi, On Sun, Feb 07, 2016 at 09:00:28PM +0500, ?? wrote: > if you mean interactive service, keep in mind that people sometimes start > openvpn as a child of openvpn-gui, not as a service Interactive Service is running openvpn.exe under control of openvpn-gui, and you won't not

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Илья Шипицин
if you mean interactive service, keep in mind that people sometimes start openvpn as a child of openvpn-gui, not as a service воскресенье, 7 февраля 2016 г. пользователь Selva Nair написал: > Hi, > > We can now remove the HighestAvailable privilege request in GUI, but have > to keep it in the 2.3

[Openvpn-devel] GUI repo

2016-02-07 Thread Selva Nair
Hi, We can now remove the HighestAvailable privilege request in GUI, but have to keep it in the 2.3.x windows installer which doesn't have iservice. So it may be useful to make a release branch in the GUI repo. Thanks, Selva