Feature: Ocserv

Goal

Obtain information about the logged-in users in the Openconnect VPN server.

User stories:

• An IT administrator manages a Fedora server system with openconnect VPN server running as entry point for the company network. He needs to be able to see the logged-in users at any point in time, and when needed to read their VPN settings to assist with any networking issue they have.

Design

Implementation

• Need to be able to list server status (done)
• Need to be able to list users (done)
• Need to be able to obtain detailed per user information
• Need to be able to add/remove users as they login
• Currently ocserv doesn't provide a subsystem for that; making an IPC dbus front-end may help.

Feedback

• How will an admin initially setup ocserv?
  • Does it work out of the box with systemctl enable?
  • Or is there a configuration file that needs to be edited?
• What are the various actions that the admin should be able to perform on the list of users?
  • Kill connection?
  • Block user?
• Should we provide a link to documentation on how to configure various clients to connect to this VPN server? Perhaps a simple summary connection settings could be inline in Cockpit?