ITADN

Update documentation about relationship between reneg-sec and auth-gen-token

#735Openkkalev 创建于 2026-01-30
✨ enhancement
K
kkalevcommented
### Problem Statement The wiki [page](https://github.com/jkroepke/openvpn-auth-oauth2/wiki/Non-interactive-session-refresh) about `Non interactive session refresh` explains a lot about how [auth-gen-token](https://openvpn.net/community-docs/community-articles/openvpn-2-6-manual.html#server-options-177179) works but not much about its relationship with `reneg-sec` Based on the OpenVPN documentation and the fact that the auth token expires either after `lifetime` or if it is not renewed for more than `2 * renewal-time` seconds (and that `renewal-time` defaults to the value of `reneg-sec`) the best practice would be to set `reneg-sec` to a reasonably low value (like 1 hour) and `lifetime` to a reasonably large value (like one day) ### Proposed Solution Update the wiki page with a section on the relationship between `reneg-sec` and `auth-gen-token` ### Additional information _No response_ ### Acceptance Criteria _No response_ ### Preflight Checklist - [x] I could not find a solution in the [documentation](https://github.com/jkroepke/openvpn-auth-oauth2/wiki), the [FAQ](https://github.com/jkroepke/openvpn-auth-oauth2/wiki/FAQ), the existing issues or discussions.
1 条评论