session-manage --cleanup doesn't always clean up?

[adolson]

session-manage --cleanup doesn't always clean up?

[dsommers]

Just a quick comment .... the openvpn3-indicator is probably the best alternative. That uses the proper D-Bus interfaces. The openvpn3-applet is just a shell script doing lots of openvpn3 calls - that is prune to fail easily.

I've also attached a little tool which we will introduce in a future release. That does nothing fancy in regards to session management, but it gives you a desktop pop-up notification whenever the status of VPN sessions changes.
session-watcher.tar.gz

To use it, install it using sudo make install. Then as the currently logged in user, you can activate this like this:

  $ systemctl --user enable --now openvpn3-desktop-session-watcher.service

If you see a VPN session requiring re-authentication, you may try to check out the openvpn3 session-auth command.

[dsommers]

The session-mange --cleanup will only clean up sessions it cannot reach (like if the VPN backend died/crashed unexpectedly). If you can reach the session via openvpn3 session-manage --disconnect --config CONFIG_NAME, it is still available - and that is the way to properly shutdown the connection.

I'm deep into the GH issue 171, which does a complete rework of the D-Bus implementation. The session manager will also be migrated. I will have this issue in mind when I start looking at the session manager (client is backend is basically done, working on the netcfg service now).

If you can document how you can reproduce this issue consistently, I will try to test this issue more carefully. Also good to know what kind of server you connect against.

[adolson]

Thanks for your quick reply!

To reproduce it, I just leave my work VPN connected and don't reboot my PC (running Debian). I'm not sure what our server is, exactly, I was just given the ovpn profile and told to use openvpn3 now.

Just as a bit of background, I'm using another github project for a tray applet (https://github.com/nesto-software/openvpn3-applet) on XFce to indicate when I'm connected or not, and noticed it's buggy because of the failed auth sessions sticking around. It's a rather simplistic script and just meant as a stop-gap until there's better integration into NetworkManager or similar. I just thought the --cleanup was malfunctioning because it worked to clear the sessions the first time I ran it. I found another similar tray applet (https://github.com/grzegorz-gutowski/openvpn3-indicator) that I will try, as it sounds like it maybe handles multiple sessions better.

[adolson]

I guess I will close this, as it appears to be working as designed