I am trying to set up a VPN with multiple users which ideally would all have a unique username/password combo that is set up solely in the tomato GUI.
I've tried what has been suggested in this thread
http://www.linksysinfo.org/index.php?threads/openvpn-username-password-authentication.32559/ and this one
http://www.linksysinfo.org/index.php?threads/tomatovpn-and-auth-passwd.32480/ . Both fail to connect and are rejected. Here is the relevant information.
Log File
WRWWRWRRWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWWWWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRWRRRRRRRWWRWRWRWRWRWRWRWWWWRRRRRWWWRRWed Jun 13 14:17:08 2012 us=629000 Current Parameter Settings:
Wed Jun 13 14:17:08 2012 us=629000 config = 'client.ovpn'
Wed Jun 13 14:17:08 2012 us=629000 mode = 0
Wed Jun 13 14:17:08 2012 us=629000 show_ciphers = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 show_digests = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 show_engines = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 genkey = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 key_pass_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 show_tls_ciphers = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 Connection profiles [default]:
Wed Jun 13 14:17:08 2012 us=629000 proto = tcp-client
Wed Jun 13 14:17:08 2012 us=629000 local = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 local_port = 0
Wed Jun 13 14:17:08 2012 us=629000 remote = 'XXX.XXX.XXX.XXX'
Wed Jun 13 14:17:08 2012 us=629000 remote_port = 1194
Wed Jun 13 14:17:08 2012 us=629000 remote_float = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 bind_defined = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 bind_local = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 connect_retry_seconds = 5
Wed Jun 13 14:17:08 2012 us=629000 connect_timeout = 10
Wed Jun 13 14:17:08 2012 us=629000 connect_retry_max = 0
Wed Jun 13 14:17:08 2012 us=629000 socks_proxy_server = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 socks_proxy_port = 0
Wed Jun 13 14:17:08 2012 us=629000 socks_proxy_retry = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 Connection profiles END
Wed Jun 13 14:17:08 2012 us=629000 remote_random = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 ipchange = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 dev = 'tun'
Wed Jun 13 14:17:08 2012 us=629000 dev_type = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 dev_node = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 lladdr = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 topology = 1
Wed Jun 13 14:17:08 2012 us=629000 tun_ipv6 = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 ifconfig_local = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 ifconfig_remote_netmask = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 ifconfig_noexec = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 ifconfig_nowarn = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 shaper = 0
Wed Jun 13 14:17:08 2012 us=629000 tun_mtu = 1400
Wed Jun 13 14:17:08 2012 us=629000 tun_mtu_defined = ENABLED
Wed Jun 13 14:17:08 2012 us=629000 link_mtu = 1500
Wed Jun 13 14:17:08 2012 us=629000 link_mtu_defined = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 tun_mtu_extra = 0
Wed Jun 13 14:17:08 2012 us=629000 tun_mtu_extra_defined = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 fragment = 0
Wed Jun 13 14:17:08 2012 us=629000 mtu_discover_type = -1
Wed Jun 13 14:17:08 2012 us=629000 mtu_test = 0
Wed Jun 13 14:17:08 2012 us=629000 mlock = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 keepalive_ping = 0
Wed Jun 13 14:17:08 2012 us=629000 keepalive_timeout = 0
Wed Jun 13 14:17:08 2012 us=629000 inactivity_timeout = 0
Wed Jun 13 14:17:08 2012 us=629000 ping_send_timeout = 0
Wed Jun 13 14:17:08 2012 us=629000 ping_rec_timeout = 0
Wed Jun 13 14:17:08 2012 us=629000 ping_rec_timeout_action = 0
Wed Jun 13 14:17:08 2012 us=629000 ping_timer_remote = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 remap_sigusr1 = 0
Wed Jun 13 14:17:08 2012 us=629000 explicit_exit_notification = 0
Wed Jun 13 14:17:08 2012 us=629000 persist_tun = ENABLED
Wed Jun 13 14:17:08 2012 us=629000 persist_local_ip = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 persist_remote_ip = DISABLED
Wed Jun 13 14:17:08 2012 us=629000 persist_key = ENABLED
Wed Jun 13 14:17:08 2012 us=629000 mssfix = 1450
Wed Jun 13 14:17:08 2012 us=629000 resolve_retry_seconds = 1000000000
Wed Jun 13 14:17:08 2012 us=629000 username = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 groupname = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 chroot_dir = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 cd_dir = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=629000 writepid = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=847000 up_script = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=847000 down_script = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=847000 down_pre = DISABLED
Wed Jun 13 14:17:08 2012 us=847000 up_restart = DISABLED
Wed Jun 13 14:17:08 2012 us=847000 up_delay = DISABLED
Wed Jun 13 14:17:08 2012 us=847000 daemon = DISABLED
Wed Jun 13 14:17:08 2012 us=847000 inetd = 0
Wed Jun 13 14:17:08 2012 us=847000 log = DISABLED
Wed Jun 13 14:17:08 2012 us=847000 suppress_timestamps = DISABLED
Wed Jun 13 14:17:08 2012 us=847000 nice = 0
Wed Jun 13 14:17:08 2012 us=847000 verbosity = 5
Wed Jun 13 14:17:08 2012 us=847000 mute = 0
Wed Jun 13 14:17:08 2012 us=847000 gremlin = 0
Wed Jun 13 14:17:08 2012 us=847000 status_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=847000 status_file_version = 1
Wed Jun 13 14:17:08 2012 us=847000 status_file_update_freq = 60
Wed Jun 13 14:17:08 2012 us=878000 occ = ENABLED
Wed Jun 13 14:17:08 2012 us=878000 rcvbuf = 0
Wed Jun 13 14:17:08 2012 us=878000 sndbuf = 0
Wed Jun 13 14:17:08 2012 us=878000 sockflags = 0
Wed Jun 13 14:17:08 2012 us=878000 fast_io = DISABLED
Wed Jun 13 14:17:08 2012 us=878000 lzo = 0
Wed Jun 13 14:17:08 2012 us=878000 route_script = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=878000 route_default_gateway = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=878000 route_default_metric = 0
Wed Jun 13 14:17:08 2012 us=878000 route_noexec = DISABLED
Wed Jun 13 14:17:08 2012 us=878000 route_delay = 5
Wed Jun 13 14:17:08 2012 us=878000 route_delay_window = 30
Wed Jun 13 14:17:08 2012 us=878000 route_delay_defined = ENABLED
Wed Jun 13 14:17:08 2012 us=878000 route_nopull = DISABLED
Wed Jun 13 14:17:08 2012 us=878000 route_gateway_via_dhcp = DISABLED
Wed Jun 13 14:17:08 2012 us=878000 max_routes = 100
Wed Jun 13 14:17:08 2012 us=878000 allow_pull_fqdn = DISABLED
Wed Jun 13 14:17:08 2012 us=894000 management_addr = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=894000 management_port = 0
Wed Jun 13 14:17:08 2012 us=894000 management_user_pass = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=894000 management_log_history_cache = 250
Wed Jun 13 14:17:08 2012 us=894000 management_echo_buffer_size = 100
Wed Jun 13 14:17:08 2012 us=894000 management_write_peer_info_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=894000 management_client_user = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=894000 management_client_group = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=894000 management_flags = 0
Wed Jun 13 14:17:08 2012 us=894000 shared_secret_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=894000 key_direction = 0
Wed Jun 13 14:17:08 2012 us=894000 ciphername_defined = ENABLED
Wed Jun 13 14:17:08 2012 us=894000 ciphername = 'BF-CBC'
Wed Jun 13 14:17:08 2012 us=894000 authname_defined = ENABLED
Wed Jun 13 14:17:08 2012 us=894000 authname = 'SHA1'
Wed Jun 13 14:17:08 2012 us=894000 prng_hash = 'SHA1'
Wed Jun 13 14:17:08 2012 us=910000 prng_nonce_secret_len = 16
Wed Jun 13 14:17:08 2012 us=910000 keysize = 0
Wed Jun 13 14:17:08 2012 us=910000 engine = DISABLED
Wed Jun 13 14:17:08 2012 us=910000 replay = ENABLED
Wed Jun 13 14:17:08 2012 us=910000 mute_replay_warnings = DISABLED
Wed Jun 13 14:17:08 2012 us=910000 replay_window = 64
Wed Jun 13 14:17:08 2012 us=910000 replay_time = 15
Wed Jun 13 14:17:08 2012 us=910000 packet_id_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=910000 use_iv = ENABLED
Wed Jun 13 14:17:08 2012 us=910000 test_crypto = DISABLED
Wed Jun 13 14:17:08 2012 us=910000 tls_server = DISABLED
Wed Jun 13 14:17:08 2012 us=910000 tls_client = ENABLED
Wed Jun 13 14:17:08 2012 us=910000 key_method = 2
Wed Jun 13 14:17:08 2012 us=910000 ca_file = 'ca.crt'
Wed Jun 13 14:17:08 2012 us=910000 ca_path = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=910000 dh_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=910000 cert_file = 'client1.crt'
Wed Jun 13 14:17:08 2012 us=925000 priv_key_file = 'client1.key'
Wed Jun 13 14:17:08 2012 us=925000 pkcs12_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=925000 cryptoapi_cert = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=925000 cipher_list = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=925000 tls_verify = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=925000 tls_remote = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=925000 crl_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=925000 ns_cert_type = 64
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=925000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku[i] = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku[i] = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku[i] = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku[i] = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku[i] = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_ku[i] = 0
Wed Jun 13 14:17:08 2012 us=941000 remote_cert_eku = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=941000 tls_timeout = 2
Wed Jun 13 14:17:08 2012 us=941000 renegotiate_bytes = 0
Wed Jun 13 14:17:08 2012 us=941000 renegotiate_packets = 0
Wed Jun 13 14:17:08 2012 us=941000 renegotiate_seconds = 3600
Wed Jun 13 14:17:08 2012 us=941000 handshake_window = 60
Wed Jun 13 14:17:08 2012 us=941000 transition_window = 3600
Wed Jun 13 14:17:08 2012 us=941000 single_session = DISABLED
Wed Jun 13 14:17:08 2012 us=941000 push_peer_info = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 tls_exit = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 tls_auth_file = '[UNDEF]'
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=956000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_protected_authentication = DISABLED
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:08 2012 us=972000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_private_mode = 00000000
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=3000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_cert_private = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_pin_cache_period = -1
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_id = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=19000 pkcs11_id_management = DISABLED
Wed Jun 13 14:17:09 2012 us=19000 server_network = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=19000 server_netmask = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=19000 server_bridge_ip = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=34000 server_bridge_netmask = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=34000 server_bridge_pool_start = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=34000 server_bridge_pool_end = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=34000 ifconfig_pool_defined = DISABLED
Wed Jun 13 14:17:09 2012 us=34000 ifconfig_pool_start = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=34000 ifconfig_pool_end = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=34000 ifconfig_pool_netmask = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=34000 ifconfig_pool_persist_filename = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=34000 ifconfig_pool_persist_refresh_freq = 600
Wed Jun 13 14:17:09 2012 us=34000 n_bcast_buf = 256
Wed Jun 13 14:17:09 2012 us=34000 tcp_queue_limit = 64
Wed Jun 13 14:17:09 2012 us=34000 real_hash_size = 256
Wed Jun 13 14:17:09 2012 us=34000 virtual_hash_size = 256
Wed Jun 13 14:17:09 2012 us=34000 client_connect_script = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=34000 learn_address_script = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=50000 client_disconnect_script = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=50000 client_config_dir = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=50000 ccd_exclusive = DISABLED
Wed Jun 13 14:17:09 2012 us=50000 tmp_dir = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=50000 push_ifconfig_defined = DISABLED
Wed Jun 13 14:17:09 2012 us=50000 push_ifconfig_local = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=50000 push_ifconfig_remote_netmask = 0.0.0.0
Wed Jun 13 14:17:09 2012 us=50000 enable_c2c = DISABLED
Wed Jun 13 14:17:09 2012 us=50000 duplicate_cn = DISABLED
Wed Jun 13 14:17:09 2012 us=50000 cf_max = 0
Wed Jun 13 14:17:09 2012 us=50000 cf_per = 0
Wed Jun 13 14:17:09 2012 us=50000 max_clients = 1024
Wed Jun 13 14:17:09 2012 us=50000 max_routes_per_client = 256
Wed Jun 13 14:17:09 2012 us=50000 auth_user_pass_verify_script = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=50000 auth_user_pass_verify_script_via_file = DISABLED
Wed Jun 13 14:17:09 2012 us=66000 ssl_flags = 0
Wed Jun 13 14:17:09 2012 us=66000 client = ENABLED
Wed Jun 13 14:17:09 2012 us=66000 pull = ENABLED
Wed Jun 13 14:17:09 2012 us=66000 auth_user_pass_file = 'stdin'
Wed Jun 13 14:17:09 2012 us=66000 show_net_up = DISABLED
Wed Jun 13 14:17:09 2012 us=66000 route_method = 0
Wed Jun 13 14:17:09 2012 us=66000 ip_win32_defined = DISABLED
Wed Jun 13 14:17:09 2012 us=66000 ip_win32_type = 3
Wed Jun 13 14:17:09 2012 us=66000 dhcp_masq_offset = 0
Wed Jun 13 14:17:09 2012 us=66000 dhcp_lease_time = 31536000
Wed Jun 13 14:17:09 2012 us=66000 tap_sleep = 0
Wed Jun 13 14:17:09 2012 us=66000 dhcp_options = DISABLED
Wed Jun 13 14:17:09 2012 us=66000 dhcp_renew = DISABLED
Wed Jun 13 14:17:09 2012 us=66000 dhcp_pre_release = DISABLED
Wed Jun 13 14:17:09 2012 us=66000 dhcp_release = DISABLED
Wed Jun 13 14:17:09 2012 us=66000 domain = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=81000 netbios_scope = '[UNDEF]'
Wed Jun 13 14:17:09 2012 us=81000 netbios_node_type = 0
Wed Jun 13 14:17:09 2012 us=81000 disable_nbt = DISABLED
Wed Jun 13 14:17:09 2012 us=81000 OpenVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov 8 2010
Wed Jun 13 14:17:25 2012 us=664000 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jun 13 14:17:25 2012 us=804000 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1400)
Wed Jun 13 14:17:25 2012 us=804000 Control Channel MTU parms [ L:1443 D:140 EF:40 EB:0 ET:0 EL:0 ]
Wed Jun 13 14:17:25 2012 us=804000 Socket Buffers: R=[8192->8192] S=[8192->8192]
Wed Jun 13 14:17:25 2012 us=804000 Data Channel MTU parms [ L:1443 D:1443 EF:43 EB:4 ET:0 EL:0 ]
Wed Jun 13 14:17:25 2012 us=804000 Local Options String: 'V4,dev-type tun,link-mtu 1443,tun-mtu 1400,proto TCPv4_CLIENT,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Wed Jun 13 14:17:25 2012 us=804000 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1443,tun-mtu 1400,proto TCPv4_SERVER,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Wed Jun 13 14:17:25 2012 us=804000 Local Options hash (VER=V4): '7e8b97b9'
Wed Jun 13 14:17:25 2012 us=804000 Expected Remote Options hash (VER=V4): 'f0f90397'
Wed Jun 13 14:17:25 2012 us=804000 Attempting to establish TCP connection with XXX.XXX.XXX.XXX :1194
Wed Jun 13 14:17:25 2012 us=836000 TCP connection established with XXX.XXX.XXX.XXX :1194
Wed Jun 13 14:17:25 2012 us=836000 TCPv4_CLIENT link local: [undef]
Wed Jun 13 14:17:25 2012 us=836000 TCPv4_CLIENT link remote: XXX.XXX.XXX.XXX :1194
Wed Jun 13 14:17:25 2012 us=851000 TLS: Initial packet from XXX.XXX.XXX.XXX :1194, sid=1ebc5b42 0492f722
Wed Jun 13 14:17:25 2012 us=851000 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jun 13 14:17:26 2012 us=304000 VERIFY OK: depth=1, XXX.XXX.XXX.XXX
Wed Jun 13 14:17:26 2012 us=304000 VERIFY OK: nsCertType=SERVER
Wed Jun 13 14:17:26 2012 us=304000 VERIFY OK: depth=0, XXX.XXX.XXX.XXX
Wed Jun 13 14:17:27 2012 us=146000 NOTE: Options consistency check may be skewed by version differences
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'version' is used inconsistently, local='version V4', remote='version V0 UNDEF'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'dev-type' is present in local config but missing in remote config, local='dev-type tun'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'link-mtu' is present in local config but missing in remote config, local='link-mtu 1443'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'tun-mtu' is present in local config but missing in remote config, local='tun-mtu 1400'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'proto' is present in local config but missing in remote config, local='proto TCPv4_SERVER'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'cipher' is present in local config but missing in remote config, local='cipher BF-CBC'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'auth' is present in local config but missing in remote config, local='auth SHA1'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'keysize' is present in local config but missing in remote config, local='keysize 128'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'key-method' is present in local config but missing in remote config, local='key-method 2'
Wed Jun 13 14:17:27 2012 us=146000 WARNING: 'tls-server' is present in local config but missing in remote config, local='tls-server'
Wed Jun 13 14:17:27 2012 us=146000 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jun 13 14:17:27 2012 us=146000 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 13 14:17:27 2012 us=146000 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Wed Jun 13 14:17:27 2012 us=146000 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jun 13 14:17:27 2012 us=146000 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Wed Jun 13 14:17:27 2012 us=146000 [server] Peer Connection Initiated with XXX.XXX.XXX.XXX:1194
Wed Jun 13 14:17:29 2012 us=268000 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Jun 13 14:17:29 2012 us=470000 AUTH: Received AUTH_FAILED control message
Wed Jun 13 14:17:29 2012 us=470000 TCP/UDP: Closing socket
Wed Jun 13 14:17:29 2012 us=470000 SIGTERM[soft,auth-failure] received, process exiting
Script/init file
echo '#!/bin/sh
pass=`awk "\\\$1 == \"${username}\" { print substr(\\\$0,length(\\\$1)+2) }" /tmp/openvpn-auth`
test -n "$pass" && test "$pass" == "${password}" && exit 0
exit 1' > /tmp/quickAuth.sh
chmod 755 /tmp/quickAuth.sh
echo '
user1 pass1
user2 pass2
user3 pass3
user4 pass4
<etc>
' > /tmp/openvpn-auth
Server Custom Configuration
script-security 3
auth-user-pass-verify /tmp/openvpn-auth via-env
Client Configuration
client
dev tun
tun-mtu 1400
proto tcp-client
remote XXX.XXX.XXX.XXX 1194
auth-user-pass
script-security 3
resolv-retry infinite
nobind
persist-key
persist-tun
cipher BF-CBC
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
verb 5
Tomato is version 1.28. Any help at all would be greatly appreciated.
