Re: Issues with multiuser macOS (Sven Grunewaldt)

Re: Issues with multiuser macOS (Sven Grunewaldt)

[Vick Lee]

[-- Attachment #1.1: Type: text/plain, Size: 1242 bytes --]

>
> Hi,
>
> I'm testing the official macOS application for Wireguard and seem to
> have a problem in my setup. Is it to be expected to loose configured
> tunnels when logging out? I have two users on my MacBook, one for work
> and one for private use and always log out when switching users because
> some programs (e.g. LittleSnitch) get confused when two users are logged
> in at the same time. When I do log in back to my private account, all
> configured profiles are gone.
>
> Another thing, that is probably more of a feature request than an issue,
> is that I'd love to create system-wide tunnels. Logging out and
> switching to another user always disconnects the tunnel, but I actually
> do have a tunnel that is used in both profiles. I can duplicate the
> config, but then I'm not sure what would happen if I may end up being
> logged in to both profiles. I assume it makes more sense to solves this
> particular problem with a custom launchd process and wg-quick, instead
> of using the UI.
>
> Kind regards,
> Sven Grunewaldt
>
>
Can confirm that account switching will clear all saved tunnel
configurations for all users. Hope this is not intended by design.
Currently, I have to re-import each time account switching on macOS.

[-- Attachment #1.2: Type: text/html, Size: 1528 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Issues with multiuser macOS (Sven Grunewaldt)

[Jason A. Donenfeld]

Thanks, I've added this to our list, and we'll look into it:

https://docs.google.com/document/d/1BnzImOF8CkungFnuRlWhnEpY2OmEHSckat62aZ6LYGY

I assume it has something to do with keychain profiles being per-user
while tunnels are per-system. Currently we employ some logic for
detecting when these are out of sync and remove partial data. We might
have to be a bit smarter about that and consider the multi-user
scenario.

If you come up with a patch before Roopesh or I do, don't hesitate to
mail it to this thread.

Jason
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard