openvpn password

ghswebguy

Hi All,

I am in a trial phase of OpenVPN and hoping to use it for some connectivity in a project I am working on in Amazon Web Services. I created an instance following this guide:

http://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/amazon-ec2-appliance-ami-quick-start-guide/

It's in my VPC, and I can connect to it with my issued key-pair, but I can not figure out how to change the password. When I try to use passwd openvpn it wants the current password for openvpn, which I believe is blank but it may be the key-pair or something else. I can't su either. Does the keypair not having a name to function with limit me on this?

Do I need to set up another user to act as the AdminGUI user due to this? I selected the database as my storage method for the access, so not sure how I would alter that if needed to add the admin users?

Thanks,
George

ghswebguy

I wanted to add some clarification as well. when I log in to the console on Amazon Web Services, I use my ppk file for authentication, which is what I think is causing the issue as I can't use that for the web admin. The passwd command results in this:

login as: openvpn
Authenticating with public key "imported-openssh-key"
Welcome to OpenVPN Access Server Appliance 2.0.5
openvpn@openvpnas2:~$ passwd openvpn
Changing password for openvpn.
(current) UNIX password:
passwd: Authentication token manipulation error
passwd: password unchanged
openvpn@openvpnas2:~$

Note the (current) - I am not able to change without it. I've looked at some of the information about pam, but I figure that part of this is related to the administration database. The AMI I used was ami-cfa5afa6.

I've also tried using the openvpnas password but it does not work. Looking back I did not use the User Parameters section to supply anything, so I am curious if I should just rebuild and redeploy?

ghswebguy

So the key became incorporating this information:

http://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/openvpn-access-server-ami/#userdata

Into the tutorial that's the default one now I linked to above. You must put a password in as userdata in order to be able to access. You also will then not have to set up the server from command prompt.

Hope that helps some folks out there.