Error starting OpenVPN Service

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
Harmanogo
OpenVpn Newbie
Posts: 8
Joined: Thu Jul 06, 2023 9:12 pm

Error starting OpenVPN Service

Post by Harmanogo » Thu Jul 06, 2023 9:28 pm

Hi All,
I would appreciate some assistance. I am installing OpenVPN 2.5.9 on Oracle Linux 9.2. My server.conf is below. When I remove the plugin line for google auth, the service starts. That line seems to be the problem. The line reads: plugin /usr/lib64/security/pam_google_authenticator.so openvpn
I am not getting anything concrete when I run
# journalctl -xeu openvpn-server@server.service Not sure how to figure out why this is happening. Could anyone assist please?

local 192.168.0.69
port 1194
proto udp4
dev tun
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server.crt
key /etc/openvpn/easy-rsa/pki/private/server.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/pki/dh.pem
tls-crypt /etc/openvpn/easy-rsa/pki/tls_crypt.key
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push <my-options>
keepalive 10 120
cipher AES-256-GCM
data-ciphers AES-256-GCM
tls-ciphersuites TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
tls-version-min 1.2
max-clients 20
user openvpn
group openvpn
persist-key
persist-tun
status /var/log/openvpn-status.log
log-append /var/log/openvpn.log
verb 3
# CRL Settings
crl-verify /etc/openvpn/easy-rsa/pki/crl.pem

# Enable Google Authenticator
plugin /usr/lib64/security/pam_google_authenticator.so openvpn
auth SHA512
reneg-sec 28800

Harmanogo
OpenVpn Newbie
Posts: 8
Joined: Thu Jul 06, 2023 9:12 pm

Re: Error starting OpenVPN Service [Solved]

Post by Harmanogo » Mon Jul 10, 2023 4:40 pm

I eventually found some info on this. Someone else reported on this. I changed the line to the line below and the service started.
plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn

Post Reply