Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 2517 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

manually disconect a openvpn user

Duff11

Hello,

Disconnecting a vpn user via command line does not work for me.

I tried the following:

Get connection details of user schweiger:

   /usr/local/bin/openvpn_connections.sh|grep schweiger

I used the external and internal ip address. Both with no effect.

chroot /var/sec/chroot-openvpn /usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.6

I don't receive any error message but the user's connection is still established (verfied with the openvpn_connection.sh command).

Thanks.

Best regards,

Duff11



This thread was automatically locked due to age.
Parents
  • +1

    Does this need to be done from the command line?  Would temporarily disabling the account through the webadmin be an option?

  • 0 in reply to fish123

    However, the SSL VPN client will automatically connect again a minute or so after the user is re-enabled.

    If one needs to disable user schweiger at the command line:

         cc change_object REF_AaaUseSchweiger status 0

    To later enable:

         cc change_object REF_AaaUseSchweiger status 1

    Note that you must use /usr/local/bin/confd-client.plx instead of cc in a cronjob.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to fish123

    However, the SSL VPN client will automatically connect again a minute or so after the user is re-enabled.

    If one needs to disable user schweiger at the command line:

         cc change_object REF_AaaUseSchweiger status 0

    To later enable:

         cc change_object REF_AaaUseSchweiger status 1

    Note that you must use /usr/local/bin/confd-client.plx instead of cc in a cronjob.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
Unfiltered HTML