Re: Two questions about key generation for clients
Bo Berglund <[email protected]>
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <[email protected]> |
On Sat, 20 Jan 2024 18:41:17 +0100, Gert Doering <[email protected]> wrote: >> Is it possible to notify the previous user via email or SMS when another >> user connects to the server with the same key? > >Anything can be done via --client-connect / --client-disconnect scripts. Very interesting, I did not know about this.... It makes it possible to actually create a separate logfile for client activity without the overhead of the regular logs. And it seems like a client reject could also be put into the --client-connect script since it gets the client's Common Name as a parameter. So having a list of disallowed clients read by the --client-connect script makes it as simple as matching the provided CN value to the list and exit non-zero if a match is found would disconnect the connecting client, right? And one could do so much more with this type of script! -- Bo Berglund Developer in Sweden