a.edwards Starting yesterday i can now no longer connect from home to my work running openvpn to connect to pfsense firewalls. error log on client side is as follows: Tue Jan 28 20:20:56 2014 UDPv4 link remote: [AF_INET]81.31.x.x:1194 Tue Jan 28 20:20:56 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this Tue Jan 28 20:21:07 2014 [vpn.xxx.com] Peer Connection Initiated with [AF_INET]81.31.x.x:1194 Tue Jan 28 20:21:09 2014 AUTH: Received control message: AUTH_FAILED Tue Jan 28 20:21:09 2014 SIGUSR1[soft,auth-failure] received, process restarting Tue Jan 28 20:21:24 2014 UDPv4 link local (bound): [undef] Tue Jan 28 20:21:24 2014 UDPv4 link remote: [AF_INET]81.31.x.x:1194 Tue Jan 28 20:21:26 2014 [vpn.zengenti.com] Peer Connection Initiated with [AF_INET]81.31.x.x:1194 Tue Jan 28 20:21:29 2014 AUTH: Received control message: AUTH_FAILED Tue Jan 28 20:21:29 2014 SIGUSR1[soft,auth-failure] received, process restarting Tue Jan 28 20:21:31 2014 UDPv4 link local (bound): [undef] Tue Jan 28 20:21:31 2014 UDPv4 link remote: [AF_INET]81.31.x.x:1194 Tue Jan 28 20:21:31 2014 TLS Error: Unroutable control packet received from [AF_INET]81.31.x.x:1194 (si=3 op=P_CONTROL_V1) prior to this i have been connecting and had no issues. the SIGUSR1 error seems to refer to client password - this has not changed and is not being inputted wrong. the unroutable packet i cannot seem to find anything of use would really appreciate anything anyone can help me out with here many thanks Alex
a.edwards Hi there, this is the client openvpn config: dev tun persist-tun persist-key cipher AES-128-CBC tls-client client resolv-retry infinite remote ov.xxx.com 1194 udp tls-remote vpn.xxx.com auth-user-pass pkcs12 l-firewall1-udp-1194-xxx_VPN.p12 tls-auth l-firewall1-udp-1194-xxx_VPN-tls.key 1 kind regards Alex
a.edwards errors on firewall an 28 22:03:54 openvpn: user 'a.edwards' could not authenticate. Jan 28 22:03:54 openvpn: server3.php: ERROR! Could not bind to server abc. Jan 28 22:03:33 openvpn[31057]: 86.131.x.x:59235 [Contensis VPN] Peer Connection Initiated with [AF_INET]86.131.x.x:59235 Jan 28 22:03:33 openvpn[31057]: 86.131.x.x:59235 TLS Auth Error: Auth Username/Password verification failed for peer Jan 28 22:03:33 openvpn[31057]: 86.131.x.x:59235 WARNING: Failed running command (--auth-user-pass-verify): external program exited with error status: 255
a.edwards we had recently migrated domain controllers, a firewall alias was still pointing at the old connection, therefore when it tried to authenticate it was failing with invalid user details. this is now solved
