Not connecting - Enter Management Password

[jepehoude]

Hi all,

I'm having this problem with a few users, more specifically users with Windows 8 Microsoft Surface. When a user is executing OpenVPN GUI (which has been set to Run as Administrator) and then Connect, the OpenVPN Connection window appear, as it should. However, it is empty and the OpenVPN - User Authentication window (to enter the Username/Password) does not appear.

Looking at the log while connecting, I see the following:
----------------------
Tue Jan 19 10:58:42 2016 OpenVPN 2.3.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Aug 4 2015
Tue Jan 19 10:58:42 2016 library versions: OpenSSL 1.0.1p 9 Jul 2015, LZO 2.08
Enter Management Password:
----------------------

I should also mention that the system tray icon becomes yellow and stay yellow even if I close the OpenVPN Connection window. I have to go to the Task Manager and end the openvpn.exe process. Finally, I can confirm that the VPN is working for the majority of users.

Below are some info about our setup.

Our server is pfSense 2.2.4
The client is OpenVPN 2.3.8-I601

Here's the server configuration:
----------------------
dev ovpns1
verb 1
dev-type tun
tun-ipv6
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
auth SHA1
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local x.x.x.x
tls-server
server 10.x.x.x 255.255.255.128
client-config-dir /var/etc/openvpn-csc
username-as-common-name
auth-user-pass-verify "/usr/local/sbin/ovpn_auth_verify user 'xxxxxx (SSL)' false server1" via-env
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'xxxxxxxxxxxxx' 1 "
lport 1194
management /var/etc/openvpn/server1.sock unix
max-clients 120
push "route 10.x.x.x 255.255.0.0"
push "route 10.y.x.x 255.255.0.0"
push "route 10.z.x.x 255.192.0.0"
push "route 192.168.x.x 255.255.255.0"
push "route 192.168.y.x 255.255.255.0"
push "route 172.x.x.x 255.255.255.0"
push "dhcp-option DOMAIN xxxxxxx.xxxx"
push "dhcp-option DNS 10.x.x.x"
push "dhcp-option NTP 10.x.x.x"
client-to-client
duplicate-cn
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.1024
crl-verify /var/etc/openvpn/server1.crl-verify
tls-auth /var/etc/openvpn/server1.tls-auth 0
comp-lzo adaptive
persist-remote-ip
float
----------------------


Here's the client configuration:
----------------------
dev tun
persist-tun
persist-key
cipher AES-128-CBC
auth SHA1
tls-client
client
resolv-retry infinite
remote xxxx.xxxxxxxxx.com 1194 udp
lport 0
verify-x509-name "xxxxx" name
auth-user-pass
pkcs12 xxxxxxxxxxxx.p12
tls-auth xxxxxxxxxxx-tls.key 1
ns-cert-type server
comp-lzo adaptive
----------------------


Some help would be appreciated as I didn't find a definitive solution while looking on the web. Please let me know if you need more information about our setup.

Thanks,
JP

[jepehoude]

Hi all,

I will try a bump on this as I haven't got any reply. Does anyone have an idea? At the same time, I can correct the OS, it seems to be more on Windows 8.1.

Thanks!

JP

[Traffic]

There has been some development in the management console recently due to W81/10 changes ..
The best I can offer is that you try the newer version of openvpn 2.3.10.

[jepehoude]

Anything at this point would worth a try! Let me check if it is better with 2.3.10.

Thanks

[casinnova]

Was the issue resolved with 2.3.10?

I am having this issue on 2.3.8 on a surface tablet, 64 bit install.

[amobile]

Hello !

I've got the same issue on my Windows 8.1 HyperV VM
I'm using

Windows 8.1 64bits
OpenVPN 2.3.11 x86_64-w64-mingw32
tap-windows-9.21.2

Issue still happens with all my OpenVPN customer VPN config.

Logs report the following message :
Mon Jan 30 11:04:38 2017 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Mon Jan 30 11:04:38 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Jan 30 11:04:38 2017 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09
Enter Management Password:

The only workaround i found is to disable/enable the TAP Adapter, or rebooting the computer.

It's a really annoying bug...

[openwhat]

Also running into this bug. Hope it will be fixed.
It's annoying.

Code: Select all

Tue Aug 22 15:54:41 2017 OpenVPN 2.4.3 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jul 14 2017
Tue Aug 22 15:54:41 2017 Windows version 6.2 (Windows 8 or greater) 64bit
Tue Aug 22 15:54:41 2017 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:

I have no idea what triggered it.
Reboot or disable/enable TAP adapter doesn't help.

[openwhat]

If anyone finds this thread using Google.

I was able to fix it with the following command:

Code: Select all

openssl rsa -in client.key -out client.key

It will ask for the password and then overwrites the client.key file without the annoying password.

-----------------------------------------------------------------------------------------------------------------------------

Remove the password from an OpenVPN key

The user's client.key generated by `openvpn --genkey` is an OpenSSL RSA key. You can use `openssl` commands on the key. This will overwrite the existing user.key file:
openssl rsa -in client.key -out client.key