ecanmaster@gmail.com
After many hours of troubleshooting openvpn installtion on my suse linux server, I want to connect to my vpnserver.
I did a start of the vpn services and even used command " /usr/local/openvpn/sbin/openvpn /etc/openvpn/server.conf"
It looks my installation is fine, but now I want to connect to my Linux server with openvpn client
my first question is: what is my openvpn adress (even on google I couldnt find this) ?
I have copied the ca.crt to my client and have the client.ovpn file.
with remote server I filled in the public ipadress of my server, is this correct?
Traffic
Exactly, which version of openvpn do you use ?
ecanmaster@gmail.com
I am using version 2.2.2
ecanmaster@gmail.com
Just to give you more info, I am using:
openvpn-2.2.2
Suse Linux Enterprise Srver 11 SP2 x86_64 (64-bit)
/etc/init.d/openvpn status
Checking for OpenVPN: running
Status written to /var/log/messages
test: /usr/local/openvpn/sbin/openvpn /etc/openvpn/server.conf
Fri Oct 17 08:21:42 2014 us=946552 Current Parameter Settings:
Fri Oct 17 08:21:42 2014 us=946742 config = '/etc/openvpn/server.conf'
Fri Oct 17 08:21:42 2014 us=946868 mode = 1
Fri Oct 17 08:21:42 2014 us=946988 persist_config = DISABLED
Fri Oct 17 08:21:42 2014 us=947106 persist_mode = 1
Fri Oct 17 08:21:42 2014 us=947221 show_ciphers = DISABLED
Fri Oct 17 08:21:42 2014 us=947336 show_digests = DISABLED
Fri Oct 17 08:21:42 2014 us=947452 show_engines = DISABLED
Fri Oct 17 08:21:42 2014 us=947565 genkey = DISABLED
Fri Oct 17 08:21:42 2014 us=947701 key_pass_file = '[UNDEF]'
Fri Oct 17 08:21:42 2014 us=947799 show_tls_ciphers = DISABLED
Fri Oct 17 08:21:42 2014 us=947864 Connection profiles [default]:
Fri Oct 17 08:21:42 2014 us=947924 proto = udp
Fri Oct 17 08:21:42 2014 us=947983 local = '[UNDEF]'
Fri Oct 17 08:21:42 2014 us=948043 local_port = 1194
Fri Oct 17 08:21:42 2014 us=948102 remote = '[UNDEF]'
Fri Oct 17 08:21:42 2014 us=948160 remote_port = 1194
Fri Oct 17 08:21:42 2014 us=948218 remote_float = DISABLED
Fri Oct 17 08:21:42 2014 us=948276 bind_defined = DISABLED
Fri Oct 17 08:21:42 2014 us=948335 bind_local = ENABLED
Fri Oct 17 08:21:42 2014 us=948392 NOTE: --mute triggered...
Fri Oct 17 08:21:42 2014 us=948470 199 variation(s) on previous 20 message(s) suppressed by --mute
Fri Oct 17 08:21:42 2014 us=948545 OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Oct 16 2014
Fri Oct 17 08:21:42 2014 us=948798 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Oct 17 08:21:42 2014 us=949442 PLUGIN_INIT: POST /usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so '[/usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so] [openvpn]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
Fri Oct 17 08:21:42 2014 us=951785 Diffie-Hellman initialized with 1024 bit key
Fri Oct 17 08:21:42 2014 us=952605 WARNING: POTENTIALLY DANGEROUS OPTION --client-cert-not-required may accept clients which do not present a certificate
Fri Oct 17 08:21:42 2014 us=952782 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Fri Oct 17 08:21:42 2014 us=952893 Socket Buffers: R=[124928->131072] S=[124928->131072]
Fri Oct 17 08:21:42 2014 us=953172 ROUTE default_gateway=10.80.172.193
Fri Oct 17 08:21:42 2014 us=954061 TUN/TAP device tun0 opened
Fri Oct 17 08:21:42 2014 us=954160 TUN/TAP TX queue length set to 100
Fri Oct 17 08:21:42 2014 us=954268 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Fri Oct 17 08:21:42 2014 us=964522 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Fri Oct 17 08:21:42 2014 us=967268 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Oct 17 08:21:42 2014 us=967318 UDPv4 link local (bound): [undef]:1194
Fri Oct 17 08:21:42 2014 us=967334 UDPv4 link remote: [undef]
Fri Oct 17 08:21:42 2014 us=967361 MULTI: multi_init called, r=256 v=256
Fri Oct 17 08:21:42 2014 us=967425 IFCONFIG POOL: base=10.8.0.4 size=62
Fri Oct 17 08:21:42 2014 us=967462 IFCONFIG POOL LIST
Fri Oct 17 08:21:42 2014 us=967504 Initialization Sequence Completed
ecanmaster@gmail.com
The issue is that I can't connect to the vpn server from windows client.
here is the status on the vpn server:
# netstat -uapn | grep openvpn
udp 0 0 0.0.0.0:1194 0.0.0.0:* 18441/openvpn
openvpn is running, but shouldn't this be on "LISTEN" state?
ecanmaster@gmail.com
It seems that the problem was my client configuration, after setting up correctly (also with the keys), I can connect now.
I used powershell on the client with command: openvpn client.ovpn
this generated errors and I solved them one by one
now its asking my username and password
I tried my root username and password, but it failed
does openvpn has its own useraccount management?
which userid can I use? or do I have to create them for openvpn?
ecanmaster@gmail.com
this is the error:
TLS Auth Error: Auth Username/Password verification failed
ecanmaster@gmail.com
here is my configuration file for server:
This is probably the problem:
plugin /usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so openvpn
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.11.241.0 255.255.255.0"
push "route 10.21.241.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
mute 20
plugin /usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so openvpn
client-cert-not-required
username-as-common-name
ecanmaster@gmail.com
I marked out the last 3 lines and its working !!!
What a hassle this was:0
thx
