Enum PasswordNotification 

pub enum PasswordNotification {
    NeedAuth {
        auth_type: AuthType,
    },
    NeedPassword {
        auth_type: AuthType,
    },
    VerificationFailed {
        auth_type: AuthType,
    },
    StaticChallenge {
        echo: bool,
        response_concat: bool,
        challenge: String,
    },
    AuthToken {
        token: Redacted,
    },
    DynamicChallenge {
        flags: String,
        state_id: String,
        username_b64: String,
        challenge: String,
    },
}

Sub-types of >PASSWORD: notifications. The password notification has several distinct forms with completely different structures.

Variants

NeedAuth

>PASSWORD:Need 'Auth' username/password

Fields

auth_type: AuthType

The credential set being requested.

NeedPassword

>PASSWORD:Need 'Private Key' password

Fields

auth_type: AuthType

The credential set being requested.

VerificationFailed

>PASSWORD:Verification Failed: 'Auth'

Fields

auth_type: AuthType

The credential set that failed verification.

StaticChallenge

Static challenge: >PASSWORD:Need 'Auth' username/password SC:{flag},{challenge} The flag is a multi-bit integer: bit 0 = ECHO, bit 1 = FORMAT.

Fields

echo: bool

Whether to echo the user’s response (bit 0 of the SC flag).

response_concat: bool

Whether the response should be concatenated with the password as plain text (bit 1 of the SC flag). When false, the response and password are base64-encoded per the SCRV1 format.

challenge: String

The challenge text presented to the user.

AuthToken

>PASSWORD:Auth-Token:{token}

Pushed by the server when --auth-token is active. The client should store this token and use it in place of the original password on subsequent re-authentications.

Source: OpenVPN manage.c — management_auth_token().

Fields

token: Redacted

The opaque auth-token string (redacted in debug output).

DynamicChallenge

Dynamic challenge (CRV1): >PASSWORD:Verification Failed: 'Auth' ['CRV1:{flags}:{state_id}:{username_b64}:{challenge}']

Fields

flags: String

Comma-separated CRV1 flags.

state_id: String

Opaque state identifier for the auth backend.

username_b64: String

Base64-encoded username. Note: visible in Debug output — callers handling PII should avoid logging this variant without filtering.

challenge: String

The challenge text presented to the user.

Trait Implementations

impl Clone for PasswordNotification

fn clone(&self) -> PasswordNotification

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PasswordNotification

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for PasswordNotification

fn eq(&self, other: &PasswordNotification) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for PasswordNotification

impl StructuralPartialEq for PasswordNotification