The VPN DomU is located at (also

Authentication to connect to the vpn is controlled via certificates and username/password authentication.

The vpn domU uses /etc/openvpn/savannah/ for processing of authentication. checks the contents of /etc/openvpn/savannah/passwd for username/password validation.

The 'passwd' file is generated from "/etc/openvpn/savannah/user-list", which contains a list of users permitted to login.

The '/home/svsync/sync-passwords' script runs as user "svsync" and gets the "password file" from colonialone (Savannah) as user "vpn" on colonialone, which is only permitted to run /home/vpn/

(It's worth noting the strong focus not to use the "root" user here.)