[Resolved] Client identification with CN

sven34

Hi everybody,

i've got a problem with identifying clients with their CN. I created the client certificates with standard values except for the common name. The CN is something like "sven" or "user2" etc.

I got the following line in my server.conf:

ifconfig-pool-persist /etc/openvpn/ipp_server.txt 0

and my ipp_server.txt

sven,10.8.0.6

When a client creates a connection, I get the following server message:

xxx.xxx.xxx.xxx:yyyyy VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/OU=changeme/CN=sven/name=changeme/emailAddress=mail@host.domain
xxx.xxx.xxx.xxx:yyyyy [sven] Peer Connection Initiated with [AF_INET] zzz.zzz.zzz.zzz:1194

However my client IP is 10.8.0.18 (or someting else) instead of 10.8.0.6. Can someone help me, what's wrong here?

Thanks
Sven

sven34

OK, I solved the problem with custom config files. But in my understanding of the documentation it should be possible to designate fixed IPs with the ipp.txt as well?!

sven34

Thanks, as always: RTFM :oops: