Skip to content
GitLab
    • GitLab: the DevOps platform
    • Explore GitLab
    • Install GitLab
    • How GitLab compares
    • Get started
    • GitLab docs
    • GitLab Learn
  • Pricing
  • Talk to an expert
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
    • Switch to GitLab Next
    Projects Groups Topics Snippets
  • Register
  • Sign in
  • ocserv ocserv
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
    • Locked files
  • Issues 80
    • Issues 80
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 11
    • Merge requests 11
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Artifacts
    • Schedules
    • Test cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • OpenConnect VPN projectsOpenConnect VPN projects
  • ocservocserv
  • Issues
  • #223
Closed
Open
Issue created Oct 06, 2019 by Andrei Popa@andrei.popa

max-same-clients = 1 refuses the re-connection of an already connected user

We use ocserv-0.12.4 with static IP allocation per user (same IP on every connect for firewall/audit purposes) and as we want to block two concurrent client connections (because the second one won't work) we've set "max-same-clients = 1".

Only cone connection is possible but this setting won't allow client reconnection based on cookies, roaming. If a client connection is interrupted it will always ask the password. To resolve this issue we are forced to make "max-same-clients = 2". Now client reconnection based on cookies and roaming works but this also permits two concurrent client connections and the last one won't work (because there will be two connection with the same IP and only the first one will work).

The issue is when a user connects from a home computer and forgets the VPN connection active. When he goes to work and tries to connect from the work computer, the VPN connection is established but nothing works. We manually have to disconnect the old session for the new one to work.

I think an option in ocserv to disconnect the active sessions when a new one is established will fix this issue.

Edited Nov 17, 2019 by Nikos Mavrogiannopoulos
Assignee
Assign to
Time tracking