Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 7 subscribers
  • Views 2195 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

manually disconect a openvpn user

Duff11

Hello,

Disconnecting a vpn user via command line does not work for me.

I tried the following:

Get connection details of user schweiger:

   /usr/local/bin/openvpn_connections.sh|grep schweiger

I used the external and internal ip address. Both with no effect.

chroot /var/sec/chroot-openvpn /usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.6

I don't receive any error message but the user's connection is still established (verfied with the openvpn_connection.sh command).

Thanks.

Best regards,

Duff11



This thread was automatically locked due to age.
Parents
  • 0

    Hallo Duff,

    The second command should be just:

         /usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.6

    Does that not work anymore?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Thanks for your answer.

    But I already tried this as described above.

    I don't receive any error message but the connection is still alive :(

  • 0 in reply to Duff11

    Did you trie that as root user?

  • 0 in reply to Duff11

    try that one:

    login to FW

    sudo -i
     /usr/local/bin/openvpn_connections.sh   # List all connections
     chroot /var/sec/chroot-openvpn
     /usr/bin/ras_update.plx ssl disconnect username schweiger SSL-VPN-IP

  • 0 in reply to RemoHehlert

    my output of all connections:

    sg115:/root # openvpn_connections.sh
    OpenVPN CLIENT LIST
    Updated,Sun Apr 11 13:43:50 2021
    Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
    ddr,2a03:567:1::11,44472,61351,Sun Apr 11 13:34:01 2021
    ROUTING TABLE
    Virtual Address,Common Name,Real Address,Last Ref
    fd22:5c88:8e98:2::1000,schweiger,2a03:567:1::11,Sun Apr 11 13:37:10 2021
    10.242.2.2,schweiger,2a03:567:1::11,Sun Apr 11 13:42:32 2021

    I tried this one without success:

    sg115:/root # id
    uid=0(root) gid=0(root) groups=0(root),890(xorp)
    sg115:/root # /var/chroot-openvpn/usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.2

  • 0 in reply to Duff11

    Not sure why you persist in starting the last command with /var/chroot-openvpn.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    This was without chroot. I had to use the full path to the script:

    sg115:/root # /var/chroot-openvpn/usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.2

    But it doesn't work :(

  • 0 in reply to Duff11

    You're right, Duff - this doesn't work anymore.  I just logged in from my iPhone via LTE and hen got the following result at the command line:

         secure:/root # chroot /var/sec/chroot-openvpn
         secure:/ # /usr/bin/ras_update.plx ssl disconnect username BAlfson 10.242.2.2
         perl: warning: Setting locale failed.
         perl: warning: Please check that your locale settings:
                     LANGUAGE = (unset),
                     LC_ALL = (unset),
                     LANG = "en_US.UTF-8"
               are supported and installed on your system.
         perl: warning: Falling back to the standard locale ("C").

    iPhone still connected.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to Duff11

    You're right, Duff - this doesn't work anymore.  I just logged in from my iPhone via LTE and hen got the following result at the command line:

         secure:/root # chroot /var/sec/chroot-openvpn
         secure:/ # /usr/bin/ras_update.plx ssl disconnect username BAlfson 10.242.2.2
         perl: warning: Setting locale failed.
         perl: warning: Please check that your locale settings:
                     LANGUAGE = (unset),
                     LC_ALL = (unset),
                     LANG = "en_US.UTF-8"
               are supported and installed on your system.
         perl: warning: Falling back to the standard locale ("C").

    iPhone still connected.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML