#222 closed Bug / Defect (wontfix)
hang in auth-user-pass-verify script causes hang in openvpn
| Reported by: | Owned by: | ||
|---|---|---|---|
| Priority: | major | Milestone: | |
| Component: | plug-ins / plug-in API | Version: | OpenVPN 2.1.4 (Community Ed) |
| Severity: | Not set (select this one, unless your'e a OpenVPN developer) | Keywords: | |
| Cc: |
Description
Hello, when the auth-user-pass-verify script hangs for any reason, it causes the whole openvpn instance to hang, meaning all client traffic stops being passed, and clients timeout disconnect.
Thanks for an otherwise excellent product.
Geoff
Change History (2)
comment:1 Changed 9 years ago by
| Resolution: | → wontfix |
|---|---|
| Status: | new → closed |
comment:2 Changed 3 years ago by
Found this in a discussion on the openvpn-users list today, which actually refers back to this bug...
... so, this is a plugin, which calls an external script, and does so asynchronously.
Note: See
TracTickets for help on using
tickets.
This is a known issue. OpenVPN is single threaded, which means it is not easy to solve this for the script hooks. However, this can be solved by using 'deferred authentication' which is possible via the plug-in API.
An example plug-in for deferred authentication can be found in the source tree, in sample/sample-plugins/defer/simple.c :
http://openvpn.git.sourceforge.net/git/gitweb.cgi?p=openvpn/openvpn.git;a=blob;f=sample/sample-plugins/defer/simple.c;h=65398657d10fd954e09e4ec2f113763c2d6e3407;hb=HEAD