Project

General

Profile

Actions
Copy link

Bug #11104

closed
MS VG

OpenVPN does not start with several authentication sources selected

Bug #11104: OpenVPN does not start with several authentication sources selected

Added by Moritz Schwarz almost 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Very Low
Assignee:
Viktor Gurov
Category:
OpenVPN
Target version:
2.5.1
Start date:
11/25/2020
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.4.5-p1
Affected Architecture:

Description

When I add several LDAP servers to an OpenVPN server it won't start anymore because the limit of more than 256 characters in one line is exceeded

Error code:

Options error: In /var/etc/openvpn/server4.conf:26: Maximum option line length (256) exceeded, line starts with plugin /usr/local/lib/openvpn/plugins/openvpn-plugin-auth-script.so /usr/local/sbin/ovpn_auth_verify_async user QklPVF9MREFQLFVOTlVfTERBUCxST0VSX0xEQVAsQlJHUl9MREFQLFNQTlVfTERBUCxNVU1FX0xEQVAsUkFSRV9MREFQLFRSVUxfTERBUCxMb2NhbCBEYXRhYmFzZQ==
 false server4 1

Is there a maximum number of LDAP servers for one VPN Server?

Related issues 1 (0 open — 1 closed)

Related to Bug #11559: OpenVPN does not start with a long list of Data Encryption AlgorithmsClosedViktor Gurov02/27/2021

Actions

JP Updated by Jim Pingle almost 6 years ago Actions
Copy link
 #1

  • Subject changed from OpenVPN won´t start after addding multiple LDAP´s to OpenVPN won't start after addding many authentication sources
  • Priority changed from High to Very Low
  • Target version set to CE-Next

There is no limit we are aware of specifically, the only way to find out would be to test it with one, two, three, etc.

It would likely vary based on the name since that blob there is a base64 encoded string of all the selected auth sources.

I see in your error output above you added 8 servers. I doubt that would work practically anyhow, since it would take so long to fail through all of them, the authentication would timeout in the meantime.

While we could handle this more gracefully, the underlying issue is a limitation in OpenVPN config file line lengths and not something we can solve per se.

JP Updated by Jim Pingle almost 6 years ago Actions
Copy link
 #2

  • Description updated (diff)

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
 #3

  • Related to Bug #11559: OpenVPN does not start with a long list of Data Encryption Algorithms added

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #4

  • Subject changed from OpenVPN won't start after addding many authentication sources to OpenVPN won't start with several authentication sources selected

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
 #5

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #6

  • Status changed from New to Pull Request Review

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #7

  • Target version changed from CE-Next to 2.5.1

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
 #8

  • Status changed from Pull Request Review to Waiting on Merge
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
 #9

  • Status changed from Waiting on Merge to Feedback

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
 #10

Cherry-picked to RELENG_2_5_1

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #11

  • Subject changed from OpenVPN won't start with several authentication sources selected to OpenVPN does not start with several authentication sources selected

Updating subject for release notes.

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #12

  • Status changed from Feedback to Closed
Actions
Copy link

Also available in: Atom