Users can be configured using the openvpn_use_pam_users list. In tasks/authentication/pam.yml, this list is used with the htpasswd module to create a password file at {{ openvpn_etcdir }}/users. However, contrary to openvpn_clients and openvpn_clients_revoke, there’s no possibility to revoke users. Removing a user from the openvpn_use_pam_users list does not suffice; they will remain because removing an entry from the password file would require passing state=absent to the htpasswd module.
Users can be configured using the
openvpn_use_pam_userslist. Intasks/authentication/pam.yml, this list is used with the htpasswd module to create a password file at{{ openvpn_etcdir }}/users. However, contrary toopenvpn_clientsandopenvpn_clients_revoke, there’s no possibility to revoke users. Removing a user from theopenvpn_use_pam_userslist does not suffice; they will remain because removing an entry from the password file would require passingstate=absentto the htpasswd module.