Multiple users on VPN

fk4rp6
Posts: 6
Joined: Tue Dec 09, 2008 9:21 am

Multiple users on VPN

Postby fk4rp6 » Wed Dec 10, 2008 10:09 am

I've ran into a problem when wanting to connect multiple users on the default VPN setup. The problem seems to be that when you setup your client machine using the information provided in the Wiki every client connects using the same client certificate. I assume then when you connect to the VPN it see's each client as the same machine then issuing them each the same IP address, obviously this is a problem. I believe that the user name and password authentication is happening via Samba, but the authentication with the OpenVPN server is happening using the certificate thus the VPN server itself thinks that the same user is connecting.

My quick fix for this has been stopping the OpenVPN service then starting it with the switch --client-cert-not-required. After doing so each client that connects is then giving a unique IP address instead of the same. Obviously you may see where not requiring a certificate to connect is a security problem.

So my question is, has anybody else had this trouble? If so what was your solution? Or do you know how to go about generating separate client certificates?

nmead
Posts: 11
Joined: Thu Dec 11, 2008 10:25 am

Re: Multiple users on VPN

Postby nmead » Tue Dec 16, 2008 8:56 am


nmead
Posts: 11
Joined: Thu Dec 11, 2008 10:25 am

Re: Multiple users on VPN

Postby nmead » Tue Dec 16, 2008 6:51 pm

Just add the following line to your amahi.conf file located in /etc/openvpn/


duplicate-cn

I did mine right after the keepalive entry, although I don't think it matters much.

ipdemons
Posts: 25
Joined: Wed Apr 08, 2009 1:19 pm

Re: Multiple users on VPN

Postby ipdemons » Wed May 13, 2009 11:09 am

This worked like a charm for me. Though I'm finding that very large files drop the transfer after a while. Not sure if it's related to this or not.

ipdemons
Posts: 25
Joined: Wed Apr 08, 2009 1:19 pm

Re: Multiple users on VPN

Postby ipdemons » Sun May 17, 2009 11:17 am

CPG, I noticed that my duplicate--cn line keeps disappearing. Is it getting purged when Amahi updates? Since it works so well, can we just make it a standard? I found that the issues I was having were related to other network issues (ip conflict). Also, if it's an auto-update deal, is there a way I can remove myself from that list and just manually update as desired? I'm just worried in case something goes wrong, and my HDA loses stability when I need it most.

User avatar
cpg
Administrator
Posts: 2604
Joined: Wed Dec 03, 2008 7:40 am
Contact:

Re: Multiple users on VPN

Postby cpg » Sun May 17, 2009 12:14 pm

good catch. this was caused by updates, yes ... however, that was a work-around for a bug we had a bit ago.

we just fixed that. can you try this rpm? 32bits or 64bits

rpm -Uvh ......

this rpm does two things:

- makes the duplicate-cn the default
- still performs updates on the amahi.conf file but does not restart the openvpn server

this rpm requires that users do service openvpn restart to get this going. not you in particular, since you already have duplicate-cn.

--

as for disabling updates, i usually discourage it, however, if you really want to, though, you can by moving /etc/cron.hourly/hda-update out of that directory.

reliability ("being there when needed") is a major major area for amahi. we simply do not want stability issues and we're extremely careful about anything that could disrupt things even minimally.

the reason we discourage it is because, from experience, it can lead to more support issues later down the road and time wasted. also, it would prevent the ability to make updates on major vulnerabilities (rare, but it happened once with a DNS issue!).
My HDA: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz on MSI board, 8GB RAM, 1TBx2+3TBx1

nordge1
Posts: 10
Joined: Fri Aug 14, 2009 11:56 am

Re: Multiple users on VPN

Postby nordge1 » Wed Jan 13, 2010 12:40 pm

I appear to still be having this issue, with the "duplicate-cn" disappearing on update. Was this ever incorporated into an update or is it perhaps broken again?

wgandhi
Posts: 6
Joined: Wed Mar 03, 2010 8:15 am

Re: Multiple users on VPN

Postby wgandhi » Wed Mar 10, 2010 10:45 am

I have the same issue with openvpn/amahi.conf updates disappearing. There was an update on Friday that wiped out my changes.

sckang
Posts: 15
Joined: Thu Dec 02, 2010 2:26 am

Re: Multiple users on VPN

Postby sckang » Wed Dec 08, 2010 7:56 pm

I also have the same problem when multiple users connect with VPN.

So i just add 'duplicate-cn' to '/etc/openvpn/amahi.conf'

it seems work fine.

Is it solved?

Who is online

Users browsing this forum: No registered users and 1 guest