Unable to start openvpn in Centos 6 x86_64

w0w

Please help, openvpn can't start. Here's the log file:

Wed Apr  2 04:09:40 2014 us=558321 PLUGIN_INIT: could not load plugin shared object /usr/lib/openvpn/openvpn-plugin-auth-pam.so: /usr/lib/openvpn/openvpn-plugin-auth-pam.so: cannot open shared object file: No such file or directory: No such file or directory (errno=2)
Wed Apr  2 04:09:40 2014 us=558459 Exiting due to fatal error

and here's the server.conf


local xxx-xxx-xxx-xxx
port 1194
proto udp
topology subnet
dev tun
ca /etc/openvpn/easy-rsa2/keys/ca.crt
cert /etc/openvpn/easy-rsa2/keys/server.crt
key /etc/openvpn/easy-rsa2/keys/server.key # This file should be kept secret
dh /etc/openvpn/easy-rsa2/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 208.67.222.222"
client-to-client
keepalive 10 120
auth SHA256
cipher AES-256-CBC # AES
comp-lzo yes
persist-key
persist-tun
status openvpn-status.log
log /etc/openvpn/openvpn.log
log-append /var/log/openvpn2.log
verb 6

What the log means and any idea to fix it?
Thank you!

maikcat

hello there,

the error is self explanatory...

/usr/lib/openvpn/openvpn-plugin-auth-pam.so: cannot open shared object file: No such file or directory

your system misses (or wrong permissions?) /usr/lib/openvpn/openvpn-plugin-auth-pam.so file...

BUT this file is not called in your config... :shock:

are there any other config files ?
how do you start openvpn?

Michael.

w0w

Sorry got a wrong config file.
here it is:

local xxx.xxx.xxx.xxx
port 1194
proto udp
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
comp-lzo
persist-key
persist-tun
status 1194.log
verb 3

now its different error:

Options error: --client-cert-not-required must be used with --management-client-auth, an --auth-user-pass-verify script, or plugin
Use --help for more information.

i used this command to start and always [FAILED]

service openvpn start

thanks

thanks

maikcat

--client-cert-not-required
Don't require client certificate, client will authenticate using username/password only. Be aware that using this directive is less secure than requiring certificates from all clients.

If you use this directive, the entire responsibility of authentication will rest on your --auth-user-pass-verify script, so keep in mind that bugs in your script could potentially compromise the security of your VPN.

If you don't use this directive, but you also specify an --auth-user-pass-verify script, then OpenVPN will perform double authentication. The client certificate verification AND the --auth-user-pass-verify script will need to succeed in order for a client to be authenticated and accepted onto the VPN.

the above means that disabling the need of client certs you still need to authenticate (somehow)
your clients (via a script maybe) ,your config lacks auth method...

clear enough?

Michael.

h5d2

On raspberry pi I have quite the same problem:

Thu Apr  7 07:21:48 2016 PLUGIN_INIT: could not load plugin shared object /usr/lib/openvpn/openvpn-auth-pam.so: /usr/lib/openvpn/openvpn-auth-pam.so: cannot open shared object file: No such file or directory
Thu Apr  7 07:21:48 2016 Exiting due to fatal error

I verified, the file and path are correct. So probably there is a problem with wrong permissions - how to verify and fix this?

my config file looks like this:

port 1194
proto tcp
dev tun
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 60
client-cert-not-required
plugin /usr/lib/openvpn/openvpn-auth-pam.so login
username-as-common-name
user nobody
group nogroup
persist-key
persist-tun
verb 3