[SOLVED] How to install for multipler users on 1 PC

edited February 2018 in Linux VPN Setup
I've installed PIA V. 75 on my Mint 17.1/64-bit/XFCE computer. As per instructions, I installed PIA using my user id. Works great!

Now I want to ensure another user id on that same computer can use PIA also.  (This second user id would not be in simultaneous use with my own user id, but rather would be using the computer alone at a different time.)

How do I set this up?

Thank you.

Comments

  • Sadly, this is not supported at the moment as the app running for one user would conflict with the other and require major changes to support.

    You should be able to use the NetworkManager setup however, as the NM applet should share the VPN state between all users of the system.
  • if you have some experience with setGID vs setUID and perhaps also the use of /etc/sudoers , you will likely be able to make the existing pieces work for your particular situation
  • Ok, I figured out one way to install PIA and make it usable by two different users (at different times).

    1- install PIA as per usual instructions using your usual User ID.
    2- Verify PIA works ok.
    3- Ensure the 2nd User ID you want to run PIA from has linux ADMIN authority
    4- Install PIA as per usual instructions using the 2nd User ID. You MUST install it into a different target directory so that this install is completely separate from your first install. For example, if your 1st install was into the /opt directory, make this install into directory /opt2.
    5- Now either User ID can use PIA at one time.
    6- To switch between the 2 User IDs, do NOT use "Logoff/Login" or "Switch User". You MUST fully SHUTDOWN and RESTART Linux to switch between User IDs and have PIA work.


  • instead of a full system reboot, it might be enough to stop the openvpn service (or does PIA create a 'pia' service?) before handing the system over to the second user.  tailoring setGID allows indirect admin capability among all members of a GroupID (see /etc/group )
  • Thanks for the good advice, martouf. I appreciate your feedback.

    I should add -- I installed PIA Version 75 for one User ID, and Version 76 for the other. I don't know whether this is important or not for this solution to work.
  • benali said:
    Thanks for the good advice, martouf. I appreciate your feedback.

    I should add -- I installed PIA Version 75 for one User ID, and Version 76 for the other. I don't know whether this is important or not for this solution to work.
    That's likely the reason why it works at all in the first place. v75 installs to your home directory and runs from there, while v76 moved to /opt/pia by default.

    Technically with v76 I think both users could just run /opt/pia/run.sh and have a working PIA installation, as long as both users don't run it at the same time of course. v76 also got rid of some junk it used to put in /tmp which is also no longer needed, so I'd imagine the ownership problems that occured before are also gone.

    As long as it works!
  • After several tests, I haven't been able to get two linux User IDs working on one computer with one version of PIA. Even when installed into different directories. I've only been able to get two linux User IDs working on one computer with two different PIA versions.

    This doesn't seem sustainable to me as a reliable way to use the product.

    Also, the Help Desk did not help me solve this problem. Instead, they told me I need to buy a second account if I intend to use a second Username (even if the two Usernames are on 1 computer and are never used concurrently). I think perhaps they're confusing a linux User ID with a PIA Username. But I'm not interested in spending time discussing this with them.

    So, I've decided to abandon this attempt.

    Thank you, Max-P and martouf, for your advice and feedback.


  • here's what you might do: create a third UID for your two users. install PIA as that third user. grant setUID (see 'sudo') permission(s) so that either of your two users can assume the UID of the third user to control the PIA software. bring VPN up, tear VPN down, and switch which account is used at the PIA end .. just don't fight over the keyboard and mouse.  :-P
  • Did something similar on a Mint 18.3 desktop last night.  I have two user accounts on the machine and it was running an old version (v68 I believe) and needed an upgrade.  Things started to get wonky when I switched between users to upgrade both accounts.  I eventually ran across this thread and installed v77 on one and v75 on the other and things worked normally.

    While I understand The desire of PIA to sell multiple accounts, the advice given above when Support was contacted was misleading in 2 ways IMO:

    1.  PIA's terms indicate "5 devices simultaneously" can be used.  To me, at least, this means that my machine should be able to support both user accounts with one PIA account as long as they are not being used simultaneously.

    2.  Because the app now installs in a common location, it doesn't seem possible for multiple users to use PIA on the same Linux device regardless of how many PIA accounts are used.
  • one multiuser device is still one device.  once the VPN is up, all the non-local traffic uses the VPN (unless you configure for 'VPN only', of course).

    Neither Windows nor Linux are single-user OSes. System-level software should not be designed contrary to that fact.
  • crypto69 said:
    While I understand The desire of PIA to sell multiple accounts
    Having two separate PIA accounts wouldn't even help in this situation. If we wanted to sell accounts that badly, I don't think we would help people set up routers to put their whole house or business behind PIA ;) The problem is pretty much just that the app is not designed to be running twice on the same computer.

    It actually works on multiple accounts on Windows and macOS with minor tweaks, so I think the situation on Linux is more of a security/permission issue due to the need of a suid binary to avoid prompting for the root password.

    I'm travelling for other company stuff so I don't have my virtual machines and tools to work on this, but I'm pretty sure there's a way to make it work that I probably could convince the devs to support.


    Until then, I still heavily recommend the NetworkManager version since it does handle multi-user (even at the same time) just fine.
Sign In or Register to comment.