Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 2519 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

manually disconect a openvpn user

Duff11

Hello,

Disconnecting a vpn user via command line does not work for me.

I tried the following:

Get connection details of user schweiger:

   /usr/local/bin/openvpn_connections.sh|grep schweiger

I used the external and internal ip address. Both with no effect.

chroot /var/sec/chroot-openvpn /usr/bin/ras_update.plx ssl disconnect username schweiger 10.242.2.6

I don't receive any error message but the user's connection is still established (verfied with the openvpn_connection.sh command).

Thanks.

Best regards,

Duff11



This thread was automatically locked due to age.
  • 0 in reply to fish123

    However, the SSL VPN client will automatically connect again a minute or so after the user is re-enabled.

    If one needs to disable user schweiger at the command line:

         cc change_object REF_AaaUseSchweiger status 0

    To later enable:

         cc change_object REF_AaaUseSchweiger status 1

    Note that you must use /usr/local/bin/confd-client.plx instead of cc in a cronjob.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    THanks for this cc command. But how can I determine the REF object for a specific user?

    confd-client.plx get_objects ...

  • 0 in reply to Duff11

    cc get_user_by_name 'Duff11' |grep \'ref

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Sorry, but doesn‘t work. What is the correct name or how do I get a list of all users? 

    thanks a lot in advance...

  • 0 in reply to Duff11

    cc get_objects aaa user|grep \'name

    If you're still having a problem, please copy the line here that failed.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML