Revoking users

[sonicdoe]

Users can be configured using the openvpn_use_pam_users list. In tasks/authentication/pam.yml, this list is used with the htpasswd module to create a password file at {{ openvpn_etcdir }}/users. However, contrary to openvpn_clients and openvpn_clients_revoke, there’s no possibility to revoke users. Removing a user from the openvpn_use_pam_users list does not suffice; they will remain because removing an entry from the password file would require passing state=absent to the htpasswd module.