Re: logs entries not as openvpn user

Gert Doering <[email protected]> Tue, 9 Sep 2025 07:32:36 +0200

Newsgroups	gmane.network.openvpn.user
Message-ID	<[email protected]>

Hi,

On Mon, Sep 08, 2025 at 05:28:38PM -0400, Dan Langille wrote:
> >> Sep  8 18:32:02 gw01 foo[38754]: pro06.int.example.org connected with IP 10.0.0.10
[..]
> That's the script which produces the foo entry. I see no reason for it to run as foo.

According to "man logger", this is what is running under...

     -t tag  Mark every line in the log with the specified tag rather than the
             default of current login name.  Use -t tag[N] to insert specific
             decimal process id instead of id of logger.

... but it could be a double uid in /etc/passwd - so if you have set
openvpn trun as "user bar", and foo+bar share the same uid, the reverse
mapping done by logger ("what user am I running under?") might end up
showing "foo".

I'd add a call

  logger "my id: `id -a`"

to see what it has to say...

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

signature.asc (application/pgp-signature, 630 B)