This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

manually disconect a openvpn user

Duff11 over 3 years ago

Hello,

Disconnecting a vpn user via command line does not work for me.

I tried the following:

Get connection details of user schweiger:

/usr/local/bin/openvpn_connections.sh|grep schweiger

I used the external and internal ip address. Both with no effect.

chroot /var/sec/chroot-openvpn /usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.6

I don't receive any error message but the user's connection is still established (verfied with the openvpn_connection.sh command).

Thanks.

Best regards,

Duff11

This thread was automatically locked due to age.

Top Replies

fish123 over 3 years ago +1 verified

Does this need to be done from the command line? Would temporarily disabling the account through the webadmin be an option?

Parents

+1 fish123 over 3 years ago

Does this need to be done from the command line? Would temporarily disabling the account through the webadmin be an option?
Cancel
Vote Up +1 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to fish123

However, the SSL VPN client will automatically connect again a minute or so after the user is re-enabled.

If one needs to disable user schweiger at the command line:

cc change_object REF_AaaUseSchweiger status 0

To later enable:

cc change_object REF_AaaUseSchweiger status 1

Note that you must use /usr/local/bin/confd-client.plx instead of cc in a cronjob.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Duff11 over 3 years ago in reply to BAlfson

THanks for this cc command. But how can I determine the REF object for a specific user?

confd-client.plx get_objects ...
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Duff11

cc get_user_by_name 'Duff11' |grep \'ref

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Duff11 over 3 years ago in reply to BAlfson

Sorry, but doesn‘t work. What is the correct name or how do I get a list of all users?

thanks a lot in advance...
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to Duff11

cc get_objects aaa user|grep \'name

If you're still having a problem, please copy the line here that failed.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 3 years ago in reply to Duff11

cc get_objects aaa user|grep \'name

If you're still having a problem, please copy the line here that failed.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data