From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: OpenVPN no more --client-(dis)connect scripts can be executed
Date: Wed, 07 Oct 2020 13:38:16 +0100
Message-ID: <96DC2BEC-C59D-4C97-847A-4853FAD09F34@ipfire.org>
In-Reply-To: <690912f452ec388ca4052f4a34a00d81c34921ea.camel@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0145883253355394821=="
List-Id: <development.lists.ipfire.org>

--===============0145883253355394821==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello,

That reads awful.

Can we please create individual tickets for the individual problems and assig=
n someone to work on those (I assume that would be you Erik :D).

We need to coordinate this and future-proof OpenVPN as best as we can, but it=
 looks like we will break client configuration - again.

If we have to do that and there is no way to avoid it, we need to make our us=
ers aware of that of course and give the enough time to prepare for this.

I cannot even say how annoying this is - again. But we must try our best.

-Michael

> On 7 Oct 2020, at 11:37, ummeegge <ummeegge(a)ipfire.org> wrote:
>=20
> Am Mittwoch, den 07.10.2020, 10:22 +0100 schrieb Michael Tremer:
>> Hi,
>>=20
>>> On 7 Oct 2020, at 10:21, ummeegge <ummeegge(a)ipfire.org> wrote:
>>>=20
>>> Hi Michael,
>>>=20
>>> Am Mittwoch, den 07.10.2020, 09:20 +0100 schrieb Michael Tremer:
>>>> Hi,
>>>>=20
>>>> Oh so this is a custom thing?
>>>>=20
>>>> Obviously most users won=E2=80=99t use this. If you care much about your
>>>> custom script, you can write a script that searches a directory
>>>> and
>>>> calls all scripts in it (like /etc/init.d/networking/red.up/ and
>>>> /etc/init.d/networking/red.down/).
>>>=20
>>> OK, will give it a try.
>>>=20
>>>>=20
>>>> Another great example how OpenVPN breaks running installations.
>>>=20
>>> Yes, and there are comming some exiting new examples with the
>>> upcoming
>>> releases 8-| ...
>>=20
>> Like what?
> e.g. this=20
> https://community.ipfire.org/t/openvpn-2-5-development-version/2173/2
> or=20
> https://community.ipfire.org/t/openvpn-2-5-development-version/2173/8
>=20
> checkout the deprecated options :-\
>>=20
>> -Michael
>>=20
>>>=20
>>>>=20
>>>> -Michael
>>>>=20
>>>>> On 6 Oct 2020, at 14:26, ummeegge <ummeegge(a)ipfire.org> wrote:
>>>>>=20
>>>>> Am Dienstag, den 06.10.2020, 12:58 +0100 schrieb Michael
>>>>> Tremer:
>>>>>> Why do you have more than one client-connnect/disconnect
>>>>>> script
>>>>>> in
>>>>>> your configuration?
>>>>>=20
>>>>> In this case it is a email which will be fired if someone is
>>>>> (dis)connected but there are plenty of potential possibilities.
>>>>> This
>>>>> one is not specified for my use case but may for the OpenVPN
>>>>> scripting
>>>>> architecture in IPFire in general.
>>>>>=20
>>>>> Best,
>>>>>=20
>>>>> Erik
>>>>>=20
>>>>>>=20
>>>>>> -Michael
>>>>>>=20
>>>>>>> On 5 Oct 2020, at 16:59, ummeegge <ummeegge(a)ipfire.org>
>>>>>>> wrote:
>>>>>>>=20
>>>>>>> Hi all,
>>>>>>> am currently in testing scenario with the new OpenVPN-
>>>>>>> 2.5_rc2
>>>>>>> and a
>>>>>>> additional --client-connect/--client-disconnect script.
>>>>>>> Since
>>>>>>> the
>>>>>>> release of OpenVPN metrics -->
>>>>>>>=20
>>>>>>>=20
>>>>>=20
>>>>>=20
>>>=20
>>>=20
> https://git.ipfire.org/?p=3Dipfire-2.x.git;a=3Dcommit;h=3D708f2b7368cc8fbd5=
4a06ca66337ebdcc26b58b4
>>>>>>> the new OpenVPN version lined out that only one script will
>>>>>>> be
>>>>>>> executed.
>>>>>>>=20
>>>>>>> openvpnserver[15373]: Multiple --client-connect scripts
>>>>>>> defined.  The
>>>>>>> previously configured script is overridden.
>>>>>>> openvpnserver[15373]: Multiple --client-disconnect scripts
>>>>>>> defined.  The previously configured script is overridden.
>>>>>>>=20
>>>>>>> so a question arises (beneath a lot=C2=B4s others which are here
>>>>>>> OT),
>>>>>>> should
>>>>>>> we make it possible to execute more then one --(dis)connect
>>>>>>> script
>>>>>>> ? If
>>>>>>> so, are there may some ideas for this ?
>>>>>>>=20
>>>>>>> Best,
>>>>>>>=20
>>>>>>>=20
>>>>>>> Erik
>>>>>>>=20
>>>>>>=20
>>>>>>=20
>>>>=20
>>>>=20
>>=20
>>=20
>=20


--===============0145883253355394821==--