GNOME Bugzilla – Bug 564196
OpenVpn Missing options result in VPN disconnections
Last modified: 2009-02-24 00:18:07 UTC
The default value used by OpenVPN for "reneg-sec" is 3600 seconds. Currently there is no way to change this value in the OpenVPN plugin for NetworkManager. Also, the option "auth-retry" should be possible to be set to "interact". These 2 settings are needed in case of OpenVPN used with an RSA token, for proper renewal of authentication. With these 2 options missing, the result is that the openvpn daemon tries to renegotiate authentication after 3600 seconds without prompting the user for new credentials, which fails and ends in the VPN being disconnected. Setting "reneg-sec" to a much higher value would also avoid re-entering the credentials too often (a sane default would be 43200)
Duping to 484315 *** This bug has been marked as a duplicate of 484315 ***