Project

General

Profile

Actions

Feature #14729

open

OpenVPN Client Export - Support PLAP on Windows

Added by Pablo Bendersky 9 months ago. Updated 7 months ago.

Status:
New
Priority:
Normal
Assignee:
Category:
OpenVPN Client Export
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:

Description

OpenVPN 2.6 for Windows introduced support for PLAP (Pre-Logon Access Provider). With this support, users get a new icon on the login windows that they can use to enter their credentials and interactively connect to the VPN before logging in to Windows.
This helps greatly with road-warrior users, as they need to get to the domain controller before authenticating.

In order for OpenVPN to support PLAP, there are some requirements:

1. PLAP needs to be enabled in the OpenVPN installer.
2. The OpenVPN configuration needs to be stored in a different folder (config-auto instead of config)
3. The configuration needs to set a management port.

Steps 1 and 2 require changes to the generated installer. Step 3 can now be achieved by adding some Additional Configuration Options such as:

management 127.0.0.1 11456
management-query-passwords

Ideally, I'd love the client export to provide a checkbox that solves all these 3 issues at once, and once installed enables PLAP on Windows clients.

More info on OpenVPN PLAP: https://github.com/OpenVPN/openvpn-gui#interactively-starting-connections-before-logon

Actions

Also available in: Atom PDF