maikcat wrotehi there,
first of all i want you to tell me if you want user-based authentication or not.?
your client asks for a user/pass because of this:
auth-user-pass
your server on the other hand misses auth plugin.... :?
you need to add something like:
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so login
also read here...
http://openvpn.net/index.php/open-source/documentation/howto.html#auth
Michael.
Hmm, thanks, I tried both with the script and the real plugin. Something doesn't work and I can't figure out anything from the log files, it doesn't even connect if I understand correctly.
client
remote 109.74.192.198 1194
proto udp
dev tun
dev-type tun
ns-cert-type server
reneg-sec 86400
auth-retry interact
auth-user-pass
comp-lzo yes
verb 3
ca "C:\\Users\\Comp\\Desktop\\keys\\ca.crt"
cert "C:\\Users\\Comp\\Desktop\\keys\\client1.crt"
key "C:\\Users\\Comp\\Desktop\\keys\\client1.key"
management 127.0.0.1 1194
management-hold
management-query-passwords
auth-retry interact
Mon Jul 22 12:54:24 2013 OpenVPN 2.0.9 Win32-MinGW [SSL] [LZO] built on Oct 1 2006
Mon Jul 22 12:54:24 2013 MANAGEMENT: TCP Socket listening on 127.0.0.1:1194
Mon Jul 22 12:54:24 2013 Need hold release from management interface, waiting...
Mon Jul 22 12:54:29 2013 Signal received from management interface, exiting
penVPN CLIENT LIST
Updated,Mon Jul 22 11:55:07 2013
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
GLOBAL STATS
Max bcast/mcast queue length,0
END
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/ecoste.crt
key /etc/openvpn/easy-rsa/keys/ecoste.key # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
plugin /usr/lib/openvpn/openvpn-auth-pam.so login
Sorry for wasting so much of your time :oops: