Re: [Openvpn-devel] how to migrate users to "no compression" config

2019-06-27 Thread Gert Doering
Hi, On Wed, Jun 26, 2019 at 11:14:34PM +0200, Arne Schwabe wrote: > My patch that enables asymmetrical compression by default adds a bit of > documentation in that regard iirc. Where did that get stuck? Still in limbo between David and you? gert -- "If was one thing all people took for granted

Re: [Openvpn-devel] Patch for pam recent module

2019-06-27 Thread Gert Doering
Hi, On Wed, Jun 26, 2019 at 03:37:56PM +0200, Paolo wrote: > i make a pull reuqest ofr this patch some times ago over github, this > patch implements the right peace of software for passing ip and hostname > to pam modules, to use for example in firewall or modules like > pam_recent, this patch is

[Openvpn-devel] [PATCH] Insert client connection data into PAM environment

2019-06-27 Thread Paolo Cerrito
From: paolo Signed-off-by: Paolo Cerrito --- src/plugins/auth-pam/auth-pam.c | 19 --- 1 file changed, 16 insertions(+), 3 deletions(-) diff --git a/src/plugins/auth-pam/auth-pam.c b/src/plugins/auth-pam/auth-pam.c index 88b53204..9d8dfb95 100644 --- a/src/plugins/auth-pam/auth

Re: [Openvpn-devel] [PATCH] Insert client connection data into PAM environment

2019-06-27 Thread Antonio Quartulli
Hi, On 27/06/2019 10:26, Paolo Cerrito wrote: > From: paolo > > Signed-off-by: Paolo Cerrito Why do we need this change? What benefit does it give us? How can it be used? IMHO it would be nice to add these pieces of information to the commit message (right now it feels .. "empty" ;-) ) Regar

Re: [Openvpn-devel] [PATCH] Insert client connection data into PAM environment

2019-06-27 Thread Paolo
Hi, this change is needed to pass remote ip address to pam environment. I try to explain by an example, so this is the case for us. I would use pam_recent module to make dynamic ip firewalling. User can try to login some times, after for example 3 times, pam_recent could block ip using iptables d

Re: [Openvpn-devel] [PATCH] Insert client connection data into PAM environment

2019-06-27 Thread Paolo
Hi, another example (and the simplest case) is: support to set remote client data into PAM environment, in turn correctly allow PAM logging the client address to syslog Paolo Cerrito Il 27/06/19 11:07, Antonio Quartulli ha scritto: > Hi, > > On 27/06/2019 10:26, Paolo Cerrito wrote: >> From: pa

Re: [Openvpn-devel] [PATCH v2] openvpnserv: enable interactive service to open tun

2019-06-27 Thread Lev Stipakov
Hi, This only handles dev-node is unspecified. We need the same for > the case where dev-node specified above this. > I never used that, so this has slipped from my attention. Will do. > We service multiple OpenVPN processes, so a global variable is no good. > > Some alternatives: > (i) Use Get

Re: [Openvpn-devel] how to migrate users to "no compression" config

2019-06-27 Thread Arne Schwabe
Am 27.06.19 um 09:39 schrieb Gert Doering: > Hi, > > On Wed, Jun 26, 2019 at 11:14:34PM +0200, Arne Schwabe wrote: >> My patch that enables asymmetrical compression by default adds a bit of >> documentation in that regard iirc. > > Where did that get stuck? Still in limbo between David and you?

[Openvpn-devel] [PATCH v3] openvpnserv: enable interactive service to open tun

2019-06-27 Thread Lev Stipakov
From: Lev Stipakov This patch enables interactive service to open tun device. This is mostly needed by Wintun, which could be opened only by privileged process. When interactive service is used, instead of calling CreateFile() directly by openvpn process we pass tun device path into service proc