I have search all openvpn forums, but i not found what i'm searching. I can't start my openvpn, below is the output: [root@server ~]# [b]openvpn /etc/openvpn/server143.conf[/b] Thu Nov 29 12:14:15 2012 OpenVPN 2.2.2 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL ] [PKCS11] [eurephia] built on Apr 5 2012 Thu Nov 29 12:14:15 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or hig her to call user-defined scripts or executables Thu Nov 29 12:14:15 2012 PLUGIN_INIT: POST /usr/share/openvpn/plugin/lib/openvpn -auth-pam.so '[/usr/share/openvpn/plugin/lib/openvpn-auth-pam.so] [/etc/pam.d/lo gin]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY Thu Nov 29 12:14:15 2012 Diffie-Hellman initialized with 1024 bit key Thu Nov 29 12:14:15 2012 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not -required may accept clients which do not present a certificate Thu Nov 29 12:14:15 2012 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0 ] Thu Nov 29 12:14:15 2012 Socket Buffers: R=[87380->131072] S=[16384->131072] Thu Nov 29 12:14:15 2012 ROUTE: default_gateway=UNDEF [b]Thu Nov 29 12:14:15 2012 Note: Cannot open TUN/TAP dev /dev/net/tun: Permission denied (errno=13)[/b] Thu Nov 29 12:14:15 2012 /sbin/ip link set dev up mtu 1500 Usage: ip link set DEVICE { up | down | arp { on | off } | dynamic { on | off } | multicast { on | off } | allmulticast { on | off } | promisc { on | off } | trailers { on | off } | txqueuelen PACKETS | name NEWNAME | address LLADDR | broadcast LLADDR | mtu MTU } ip link show [ DEVICE ] Thu Nov 29 12:14:15 2012 Linux ip link set failed: external program exited with error status: 255 Thu Nov 29 12:14:15 2012 Exiting [b]Output from cat /dev/net/tun:[/b] cat: /dev/net/tun: File descriptor in bad state Config file: port 143 proto tcp dev tun ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/server.crt key /etc/openvpn/keys/server.key dh /etc/openvpn/keys/dh1024.pem plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login client-cert-not-required username-as-common-name server 10.9.8.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "redirect-gateway def1" push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" keepalive 5 30 comp-lzo persist-key persist-tun status server-tcp.log verb 3 Additional information maybe help: Virtualization: OpenVZ Ram: 1GB Burst: 1,5GB OS: CentOS 5 CPU Core: 2 Thank you.. Any help will be appreciated..

[quote="maikcat"]hi there, although i am not very familiar with openvz containers can you post the output of sestatus? are you running openvpn as root? Michael.[/quote] Yes, i running openvpn as root.. below is the output.. [root@server ~]# sestatus SELinux status: disabled [root@server ~]#

Cannot open TUN/TAP dev /dev/net/tun: Permission denied

netrix

I have search all openvpn forums, but i not found what i'm searching.

I can't start my openvpn, below is the output:

[root@server ~]# openvpn /etc/openvpn/server143.conf
Thu Nov 29 12:14:15 2012 OpenVPN 2.2.2 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL
] [PKCS11] [eurephia] built on Apr 5 2012
Thu Nov 29 12:14:15 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or hig
her to call user-defined scripts or executables
Thu Nov 29 12:14:15 2012 PLUGIN_INIT: POST /usr/share/openvpn/plugin/lib/openvpn
-auth-pam.so '[/usr/share/openvpn/plugin/lib/openvpn-auth-pam.so] [/etc/pam.d/lo
gin]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Thu Nov 29 12:14:15 2012 Diffie-Hellman initialized with 1024 bit key
Thu Nov 29 12:14:15 2012 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not
-required may accept clients which do not present a certificate
Thu Nov 29 12:14:15 2012 TLS-Auth MTU parms [ L:1544 D:140 EF:40 EB:0 ET:0 EL:0
]
Thu Nov 29 12:14:15 2012 Socket Buffers: R=[87380->131072] S=[16384->131072]
Thu Nov 29 12:14:15 2012 ROUTE: default_gateway=UNDEF
Thu Nov 29 12:14:15 2012 Note: Cannot open TUN/TAP dev /dev/net/tun: Permission
denied (errno=13)
Thu Nov 29 12:14:15 2012 /sbin/ip link set dev up mtu 1500
Usage: ip link set DEVICE { up | down |
arp { on | off } |
dynamic { on | off } |
multicast { on | off } |
allmulticast { on | off } |
promisc { on | off } |
trailers { on | off } |
txqueuelen PACKETS |
name NEWNAME |
address LLADDR | broadcast LLADDR |
mtu MTU }
ip link show [ DEVICE ]
Thu Nov 29 12:14:15 2012 Linux ip link set failed: external program exited with
error status: 255
Thu Nov 29 12:14:15 2012 Exiting

Output from cat /dev/net/tun:

cat: /dev/net/tun: File descriptor in bad state

Config file:

port 143
proto tcp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.9.8.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status server-tcp.log
verb 3

Additional information maybe help:

Virtualization: OpenVZ
Ram: 1GB
Burst: 1,5GB
OS: CentOS 5
CPU Core: 2

Thank you.. Any help will be appreciated..

maikcat

hi there,

although i am not very familiar with openvz containers
can you post the output of sestatus?

are you running openvpn as root?

Michael.

netrix

maikcat wrotehi there,

although i am not very familiar with openvz containers
can you post the output of sestatus?

are you running openvpn as root?

Michael.

Yes, i running openvpn as root.. below is the output..

[root@server ~]# sestatus
SELinux status: disabled
[root@server ~]#