openvpn gui and vista

dflahaut

hello,
really, I spend a lot of time to find a solution ... but nothing !

At home, we (6 children, my wife and I) have a small network : - a firewall (IPFire 2.11 (i586) - core65), - a NAS Synology and some computers : 2x ubuntu 12, 2x mac OSX 10.8.2 and 5x vista (pro and family).

I setup openvpn server on ipfire without difficulties. Ipfire gives for each client two files : xxx.ovpn and xxx.pkcs12

The setups for the 2 PCs working on Ubuntu and the 2 Macs (tunnelblick) are fine : we must validate the first time the password. Next time, we can connect again without typing password.

On vista, we are obliged to type every time the password. I didn't find the way ! I found on the net some ideas :
- check off the uac on vista : ok
- put on xxx.ovpn a line with "auth-user-pass pass.txt" for example

I found a topic that ask a "special" setup on the server ...

But my question is : openvpn works great with ubuntu and with macosx ... but not with windows vista

Any idea ? I know that is M$ !!

thanks
Denis

maikcat

hi there,

The setups for the 2 PCs working on Ubuntu and the 2 Macs (tunnelblick) are fine : we must validate the first time the password. Next time, we can connect again without typing password

which password?
did you setup your openvpn server with pam plugin?
can you post your configs used?

Michael.

dflahaut

Hi,

here are the conf

#OpenVPN Server conf

daemon openvpnserver
writepid /var/run/openvpn.pid
#DAN prepare OpenVPN for listening on blue and orange
;local ##############
dev tun
proto udp
port 1194
script-security 3 system
ifconfig-pool-persist /var/ipfire/ovpn/ovpn-leases.db 3600
client-config-dir /var/ipfire/ovpn/ccd
tls-server
ca /var/ipfire/ovpn/ca/cacert.pem
cert /var/ipfire/ovpn/certs/servercert.pem
key /var/ipfire/ovpn/certs/serverkey.pem
dh /var/ipfire/ovpn/ca/dh1024.pem
server 10.237.123.0 255.255.255.0
tun-mtu 1500
status-version 1
status /var/log/ovpnserver.log 30
cipher CAST5-CBC
comp-lzo
max-clients 100
tls-verify /var/ipfire/ovpn/verify
crl-verify /var/ipfire/ovpn/crls/cacrl.pem
user nobody
group nobody
persist-key
persist-tun
verb 3

#

Ipfire Firewall gives a client's pack with

- a client's config.ovpn

#OpenVPN Client conf
tls-client
client
nobind
dev tun
proto udp
tun-mtu 1500
remote xxxxxx.dtdns.net 1194
pkcs12 ParentsPcFixe.p12
cipher CAST5-CBC
comp-lzo
verb 3
ns-cert-type server
tls-remote xxxx.dtdns.net

- a client's key.pkcs12

When I setup the client on linux and macos, I use this two files. At the first connection, I have to give the password for the key.pkcs12 ... and I never more need to give password again.

But with openvpn on vista (2.3 rc2), I'm alvays obliged to give password ... even if I tried to add in the client's config "auth-user-pass" ...

Am I precise enough ?

Denis