openvpn3 Auto logon not working about openvpn3-linux HOT 6 CLOSED

OpenVPN 3 Linux does not support --auth-user-pass with saved credentials like OpenVPN 2.x. I have not yet decided if we should support it in this way, or use a different approach for it. Storing user credentials is generally not recommended.

You should be able to achieve what you want using the openvpn3-autoload utility which will be able to handle this scenario. This approach saves the credentials only for the session startup in the OpenVPN 3 backend services. You need to save the OpenVPN configuration profile in it's own directory (for example: client.conf) and have a autoload configuration file in the same directory (client.autoload). The contents of this additonal file is documented in the openvpn3-autload(8) man page. You need to set "autostart": true for this to work. With this configured, you can start the configuration using openvpn3-autoload --directory /path/to/openvpn/profile.

from openvpn3-linux.

We have just released a workaround document on this feature: https://openvpn.net/openvpn-3-linux-and-auth-user-pass/

from openvpn3-linux.

Good to know . thank you

from openvpn3-linux.

Thanks

from openvpn3-linux.

Sadly but couldn't find any documentation on configuring the autoload with ovpn file which has static-challenge in it for MFA. Anything we can do with this @dsommers ?

from openvpn3-linux.

@bipinmdr07 Nope. That' defeats the purpose of a the static-challenge. That is typically used with OTP tokens, so that value is not static thus not much useful to put into a configuration.

That said, it is possible to write your own script doing this magic for you. The OpenVPN 3 Linux project ships with a Python module which is used by openvpn2, openvpn3-autoload and openvpn3-systemd. But built-in support for automated OTP codes is not something we consider for inclusion into this project. Hosts requiring automatic connection without user interaction should normally use certificate-only authentication, which is already a very strong authentication method.

from openvpn3-linux.