Re: [Openvpn-users] Odd problem with 2.2.0, "SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)"

[Ralf H. <Ral...@ch...>]

* David Sommerseth <ope...@to...>:

> > That's a client log. Diggign a bit deeper on the server I found that
> > the PAM setting for that user were b0rked. I fixed that and now I'm
> > waiting for him to retry
> 
> Interesting ... if you can elaborate more about the PAM setup,

I'm using pam_per_user to branch out the authorisation against:
kerberos
ldap
and pam_imap

In my case the user had pam_imap (for the old mailserver), but his
accdount had been migrated to exchange (kerberos), so I saw quite a
lot of errors in the server log.

USUALLY I expected to see a simple AUTH FAILED.

> what was wrong with the PAM account, which PAM module you use and such,
> maybe we can get the PAM module to send AUTH_FAILED.  That should just
> tell the client to disconnect instantly instead of this extra
> PUSH_REQUEST stuff

I still have to wait what happens after my little fix.

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ral...@ch... | http://www.charite.de