manually disconect a openvpn user

Question

Hello, 
 
 Disconnecting a vpn user via command line does not work for me. 
 
 I tried the following: 
 Get connection details of user schweiger: 
 /usr/local/bin/openvpn_connections.sh|grep schweiger 
 
 I used the external and internal ip address. Both with no effect. 
 chroot /var/sec/chroot-openvpn /usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.6 
 
 I don't receive any error message but the user's connection is still established (verfied with the openvpn_connection.sh command). 
 
 Thanks. 
 
 Best regards, 
 Duff11

fish123 · Accepted Answer

Does this need to be done from the command line? Would temporarily disabling the account through the webadmin be an option?

BAlfson · Answer

However, the SSL VPN client will automatically connect again a minute or so after the user is re-enabled. 
 If one needs to disable user schweiger at the command line: 
 cc change_object REF_AaaUseSchweiger status 0 
 To later enable: 
 cc change_object REF_AaaUseSchweiger status 1 
 Note that you must use /usr/local/bin/confd-client.plx instead of cc in a cronjob. 
 Cheers - Bob

manually disconect a openvpn user

Top Replies