Re: [Radiusplugin-users] TLS keys are out of sync with useauthcontrolfile=true

[R.H.Hoek]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi William,

Ralf has solved this problem in Version 2.1 Beta 6.
It works for me in our test environment.

Ralf wrote:
> The problem was that the acf file changes during reauthentication, but
> the plugin still used the old one. Now it should work.
>

In our production environment we don't use this option jet.


- --

sincerely,


Roel Hoek
ICT Service Centre
University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands
Telephone +31 53 489 4598, Fax +31 53 489 2383
address@hidden; http://www.utwente.nl/icts





William Cooley schreef op 2010-02-23 05:23:
> Was this problem resolved?
> Was any one else able to reproduce this?
> In general is it recommended to use the new 2.1 beta plugin over the old
> 2.0c?
> 
> R.H.Hoek wrote:
> Hi all,
> 
> Recently I installed RadiusPlugin Version 2.1 Beta 5 together with
> OpenVPN 2.1.1.
> Before that we used Openvpn 2.1_rc15 with radiusplugin_v2.0c.
> 
> When I enable useauthcontrolfile=true users experience connectionloss
> after about 1 hour for 4-5 min. First the server log shows:
> 
> TLS Error: local/remote TLS keys are out of sync:
> 
> After this error the vpn-connection times out and after some minutes the
>  client automatically re-establish the connection.
> 
> When I disable useauthcontrolfile (=false) this problem thus not occur.
> 
> I want to use useauthcontrolfile=true because the authentication is then
> done the background which should be an advantage.
> 
> Is this problem solvable?
> 
>>
>>
_______________________________________________
Radiusplugin-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/radiusplugin-users

> _______________________________________________
> Radiusplugin-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/radiusplugin-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkuDshIACgkQJwlRSGnYBcYBMgCfTI0INnhktgvl5I2BrPpmE5X/
mkEAnAjY4BKV92VHx4cgiOWgA+OIEGRe
=rpQC
-----END PGP SIGNATURE-----