rosol
Hey,
I have problem with connection when I add auth-user-pass-verify and plugin to server.conf. below my config and log.
Thankful for help
server:
local 192.168.2.5
port 5050
proto tcp
dev tun
script-security 3
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
plugin /usr/lib/openvpn/openvpn-auth-pam.so common-auth
auth-user-pass-verify /etc/openvpn/vpncheckCN-user.sh via-env
dh /etc/openvpn/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.2.0 255.255.255.0"
push "route 10.8.0.0 255.255.255.0"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status /var/log/openvpn-status.log
log-append /var/log/openvpn.log
verb 6
inactive 3600
client:
client
dev tun
proto tcp
remote xxx.xxx.xxx.xxx 5050
resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 4
keepalive 10 120
tls-client
auth-user-pass
Log:
934 Thu May 9 15:58:21 2013 us=977970 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=36 DATA len=100
935 Thu May 9 15:58:21 2013 us=978013 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=37 DATA len=100
936 Thu May 9 15:58:21 2013 us=978037 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=38 DATA len=100
937 Thu May 9 15:58:22 2013 us=36046 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 35 ]
938 Thu May 9 15:58:22 2013 us=36095 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=39 DATA len=100
939 Thu May 9 15:58:22 2013 us=94325 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 36 ]
940 Thu May 9 15:58:22 2013 us=94373 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=40 DATA len=100
941 Thu May 9 15:58:22 2013 us=154545 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 37 ]
942 Thu May 9 15:58:22 2013 us=154594 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
943 Thu May 9 15:58:22 2013 us=154615 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 38 ]
944 Thu May 9 15:58:22 2013 us=154636 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=100
945 Thu May 9 15:58:22 2013 us=214759 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 39 ]
946 Thu May 9 15:58:22 2013 us=214807 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=43 DATA len=100
947 Thu May 9 15:58:22 2013 us=273010 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 40 ]
948 Thu May 9 15:58:22 2013 us=273059 37.108.121.198:49646 TCPv4_SERVER WRITE [84] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=44 DATA len=70
949 Thu May 9 15:58:22 2013 us=335213 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 41 ]
950 Thu May 9 15:58:22 2013 us=335257 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 42 ]
951 Thu May 9 15:58:22 2013 us=393514 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 43 ]
952 Thu May 9 15:58:22 2013 us=604414 37.108.121.198:49646 TCPv4_SERVER READ [126] from [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ 44 ] pid=30 DATA len=100
953 Thu May 9 15:58:22 2013 us=604484 37.108.121.198:49646 TCPv4_SERVER WRITE [22] to [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 30 ]
954 Thu May 9 15:58:22 2013 us=604515 37.108.121.198:49646 TCPv4_SERVER READ [114] from [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=31 DATA len=100
955 Thu May 9 15:58:22 2013 us=604537 37.108.121.198:49646 TCPv4_SERVER WRITE [22] to [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 31 ]
956 Thu May 9 15:58:22 2013 us=604555 37.108.121.198:49646 TCPv4_SERVER READ [114] from [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=32 DATA len=100
957 Thu May 9 15:58:22 2013 us=604573 37.108.121.198:49646 TCPv4_SERVER WRITE [22] to [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 32 ]
958 Thu May 9 15:58:22 2013 us=604589 37.108.121.198:49646 TCPv4_SERVER READ [60] from [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=33 DATA len=46
959 AUTH-PAM: BACKGROUND: received command code: 0
960 AUTH-PAM: BACKGROUND: USER: xxxx
961 AUTH-PAM: BACKGROUND: my_conv[0] query='Password: ' style=1
962 Thu May 9 15:58:22 2013 us=615450 37.108.121.198:49646 PLUGIN_CALL: POST /usr/lib/openvpn/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=0
963 Thu May 9 15:58:22 2013 us=616993 37.108.121.198:49646 TLS Auth Error: Auth Username/Password verification failed for peer
964 Thu May 9 15:58:22 2013 us=617102 37.108.121.198:49646 TCPv4_SERVER WRITE [126] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ 33 ] pid=45 DATA len=100
965 Thu May 9 15:58:22 2013 us=617131 37.108.121.198:49646 TCPv4_SERVER WRITE [114] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=46 DATA len=100
966 Thu May 9 15:58:22 2013 us=617150 37.108.121.198:49646 TCPv4_SERVER WRITE [96] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=47 DATA len=82
967 Thu May 9 15:58:23 2013 us=25941 37.108.121.198:49646 TCPv4_SERVER READ [22] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 45 ]
968 Thu May 9 15:58:23 2013 us=166433 37.108.121.198:49646 TCPv4_SERVER READ [26] from [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 46 47 ]
969 Thu May 9 15:58:23 2013 us=166477 37.108.121.198:49646 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
970 Thu May 9 15:58:23 2013 us=166508 37.108.121.198:49646 [rosol] Peer Connection Initiated with [AF_INET]37.108.121.198:49646
971 Thu May 9 15:58:25 2013 us=858968 37.108.121.198:49646 TCPv4_SERVER READ [104] from [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=34 DATA len=90
972 Thu May 9 15:58:25 2013 us=859552 37.108.121.198:49646 PUSH: Received control message: 'PUSH_REQUEST'
973 Thu May 9 15:58:25 2013 us=882196 37.108.121.198:49646 Delayed exit in 5 seconds
974 Thu May 9 15:58:25 2013 us=882235 37.108.121.198:49646 SENT CONTROL [rosol]: 'AUTH_FAILED' (status=1)
975 Thu May 9 15:58:25 2013 us=882260 37.108.121.198:49646 TCPv4_SERVER WRITE [22] to [AF_INET]37.108.121.198:49646: P_ACK_V1 kid=0 [ 34 ]
976 Thu May 9 15:58:25 2013 us=882301 37.108.121.198:49646 TCPv4_SERVER WRITE [104] to [AF_INET]37.108.121.198:49646: P_CONTROL_V1 kid=0 [ ] pid=48 DATA len=90
977 Thu May 9 15:58:26 2013 us=302714 37.108.121.198:49646 Connection reset, restarting [0]
978 Thu May 9 15:58:26 2013 us=302743 37.108.121.198:49646 SIGUSR1[soft,connection-reset] received, client-instance restarting
979 Thu May 9 15:58:26 2013 us=302856 TCP/UDP: Closing socket