Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Илья Шипицин
I saw few cases when openvpn.exe remains running even after openvpn-gui told it to stop (and it was awful). is iservice magic of start/stop openvpn.exe the same as for openvpn-gui ? if yes, I would say that it is ok to switch to iservice by default. 2016-02-08 12:42 GMT+05:00 Gert Doering : > H

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Gert Doering
Hi, On Mon, Feb 08, 2016 at 08:35:54AM +0500, ?? wrote: > I have one question regarding that. > when we deployed openvpn, we used to supply our users a config file without > "nobind" keyword. > > it worked for most of our users, however, those who needed 2 or more vpn > conne

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Gert Doering
Hi, On Mon, Feb 08, 2016 at 08:27:13AM +0500, ?? wrote: > but how does it look from user point of view ? why do we show that to user > ? how do you we want user to interact with that ? Installer installs iservice, GUI uses it, done. If someone wants expert mode and clicks on

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Selva Nair
Hi, On Sun, Feb 7, 2016 at 10:35 PM, Илья Шипицин wrote: > what about that PR. there might be cases when > > 1) interactive service installed > 2) user is administrator > It will just work in all cases that worked before (as Gert said, 1, 2 and 1&&2). The pull request only does three things: 1

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Илья Шипицин
I saw that PR. I have one question regarding that. when we deployed openvpn, we used to supply our users a config file without "nobind" keyword. it worked for most of our users, however, those who needed 2 or more vpn connections complained that "port already bind". so, we added "nobind" to clien

Re: [Openvpn-devel] GUI repo

2016-02-08 Thread Илья Шипицин
2016-02-08 2:55 GMT+05:00 Gert Doering : > Hi, > > On Mon, Feb 08, 2016 at 01:12:37AM +0500, ?? wrote: > > there's still "Start OpenVPN directly" > > > > https://github.com/OpenVPN/openvpn-gui/blob/master/openvpn.c#L724 > > > > in such case admin rights are still required for

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Gert Doering
Hi, On Sun, Feb 07, 2016 at 03:25:51PM -0500, Selva Nair wrote: > So the idea is to keep the current manifest in the GUI distributed with > 2.3 and remove the HigestAvailable from that to be distributed with 2.4. > This change is also required to let admin users (with UAC) use interactive > servi

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Gert Doering
Hi, On Mon, Feb 08, 2016 at 01:12:37AM +0500, ?? wrote: > there's still "Start OpenVPN directly" > > https://github.com/OpenVPN/openvpn-gui/blob/master/openvpn.c#L724 > > in such case admin rights are still required for routes manipulation. In this case, it would just not w

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Илья Шипицин
as far as I understand it is up to user whether to install openvpn as a service or not. if openvpn is not installed as a service, highest priv is required, right? 2016-02-08 1:29 GMT+05:00 Selva Nair : > Hi, > > On Sun, Feb 7, 2016 at 3:12 PM, Илья Шипицин wrote: > >> there's still "Start OpenVP

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Selva Nair
Hi, On Sun, Feb 7, 2016 at 3:12 PM, Илья Шипицин wrote: > there's still "Start OpenVPN directly" > > https://github.com/OpenVPN/openvpn-gui/b, lob/master/openvpn.c#L724 > > > in such case admin rights are still required for rout

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Selva Nair
Hi, On Sun, Feb 7, 2016 at 11:00 AM, Илья Шипицин wrote: > if you mean interactive service, keep in mind that people sometimes start > openvpn as a child of openvpn-gui, not as a service Requiring HighestAvailable was an interim solution until interactive service becomes available. Users who

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Илья Шипицин
there's still "Start OpenVPN directly" https://github.com/OpenVPN/openvpn-gui/blob/master/openvpn.c#L724 in such case admin rights are still required for routes manipulation. maybe we should release two installers (or make a checkbox in installer?) 1) regular mode (with highest priv manifest)

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Gert Doering
Hi, On Sun, Feb 07, 2016 at 09:00:28PM +0500, ?? wrote: > if you mean interactive service, keep in mind that people sometimes start > openvpn as a child of openvpn-gui, not as a service Interactive Service is running openvpn.exe under control of openvpn-gui, and you won't not

Re: [Openvpn-devel] GUI repo

2016-02-07 Thread Илья Шипицин
if you mean interactive service, keep in mind that people sometimes start openvpn as a child of openvpn-gui, not as a service воскресенье, 7 февраля 2016 г. пользователь Selva Nair написал: > Hi, > > We can now remove the HighestAvailable privilege request in GUI, but have > to keep it in the 2.3