can't start openvpn with the ldap plugin

ecanmaster@gmail.com

I get this error when starting openvpn on my suse enterprise linux server 11 sp2

# /usr/local/openvpn/sbin/openvpn /etc/openvpn/server.conf &
[1] 24901
# Thu Oct 23 14:43:54 2014 us=144149 PLUGIN_INIT: could not load plugin shared object /usr/lib64/openvpn/plugins/openvpn-auth-ldap.so: libobjc.so.4: cannot open shared object file: No such file or directory: No such file or directory (errno=2)
Thu Oct 23 14:43:54 2014 us=144325 Exiting

I checked the file location and it is correct and does exist:
/usr/lib64/openvpn/plugins/openvpn-auth-ldap.so

I installed the openvpn auth ldap from an rpm file:

# zypper install openvpn-auth-ldap-2.0.3-1.2.x86_64.rpm
Refreshing service 'susecloud'.
Loading repository data...
Reading installed packages...
'openvpn-auth-ldap = 0:2.0.3-1.2' is already installed.
No update candidate for 'openvpn-auth-ldap-2.0.3-1.2.x86_64'. The highest available version is already installed.
Resolving package dependencies...

Nothing to do.

here is my server config file:

# grep -vE '^#|^;|^$' server.conf
port 1194
proto udp
dev tun
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.11.241.0 255.255.255.0"
push "route 10.21.241.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
mute 20
plugin /usr/lib64/openvpn/plugins/openvpn-auth-ldap.so /etc/openvpn/auth/auth-ldap.conf
client-cert-not-required
username-as-common-name

ecanmaster@gmail.com

I got it working, but now I have different problem:

Thu Oct 23 15:44:22 2014 us=387054 194.213.3.205:2525 PLUGIN_CALL: POST /usr/lib64/openvpn/plugins/openvpn-auth-ldap.so/PLUGIN_AUTH_USER_PASS_VERIFY status=1
Thu Oct 23 15:44:22 2014 us=387079 194.213.3.205:2525 PLUGIN_CALL: plugin function PLUGIN_AUTH_USER_PASS_VERIFY failed with status 1: /usr/lib64/openvpn/plugins/openvpn-auth-ldap.so
Thu Oct 23 15:44:22 2014 us=387129 194.213.3.205:2525 TLS Auth Error: Auth Username/Password verification failed for peer
Thu Oct 23 15:44:22 2014 us=433168 194.213.3.205:2525 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA

this looks more like a config issue, because I can't login with root or any other user and I am very sure I typed in the correct password

ecanmaster@gmail.com

seems openvpn can't communicate with openldap

# /tmp/auth-ldap-2.0.3/src/testplugin /etc/openvpn/auth/auth-ldap.conf
Username: test1
Password:
LDAP user "test1" was not found.
Authorization Failed!
LDAP user "test1" was not found.
client-connect failed!
LDAP user "test1" was not found.
client-disconnect failed!

here is the auth-ldap.conf:

# cat /etc/openvpn/auth/auth-ldap.conf
<LDAP>
# LDAP server URL
URL ldap://localhost

# Bind DN (If your LDAP server doesn't support anonymous binds)
#BindDN uid=Manager,ou=People,dc=example,dc=com

# Bind Password
#Password SuperSecretPassword

# Network timeout (in seconds)
Timeout 15

# Enable TLS
TLSEnable no

# TLS CA Certificate File
#TLSCACertFile /usr/local/etc/ssl/ca.pem

# TLS CA Certificate Directory
#TLSCACertDir /etc/ssl/certs

# Client Certificate
#TLSCertFile /usr/local/etc/ssl/client-cert.pem

# Client Key
#TLSKeyFile /usr/local/etc/ssl/client-key.pem

# Cipher Suite
#TLSCipherSuite ALL:!ADH:@STRENGTH
</LDAP>

<Authorization>
# Base DN
BaseDN "dc=hwidc,dc=com"

# User Search Filter
SearchFilter "(&(uid=%u)(accountStatus=active))"
#SearchFilter "(&(sAMAccountName=%u))"

# Require Group Membership
RequireGroup false

<Group>
BaseDN "ou=Groups,dc=example,dc=com"
SearchFilter "(|(cn=developers)(cn=artists))"
MemberAttribute uniqueMember
</Group>

</Authorization>