Crash Having trouble getting my OpenVPN configured correctly. Looked at a couple of of tutorials and links related to the errors I saw but couldn't find anything. Looking for a more experienced mind to look to see where the hell I might start. Here is the log for the OpenVPN file in vars/openvpn Sat May 16 00:50:03 2015 event_wait : Interrupted system call (code=4) Sat May 16 00:50:03 2015 TCP/UDP: Closing socket Sat May 16 00:50:03 2015 /sbin/route del -net 10.8.0.0 netmask 255.255.255.0 SIOCDELRT: Operation not permitted Sat May 16 00:50:03 2015 ERROR: Linux route delete command failed: external program exited with error status: 7 Sat May 16 00:50:03 2015 Closing TUN/TAP interface Sat May 16 00:50:03 2015 /sbin/ifconfig tun0 0.0.0.0 SIOCSIFADDR: Operation not permitted SIOCSIFFLAGS: Operation not permitted Sat May 16 00:50:03 2015 Linux ip addr del failed: external program exited with error status: 255 Sat May 16 00:50:03 2015 SIGTERM[hard,] received, process exiting Sat May 16 00:50:05 2015 OpenVPN 2.2.1 arm-linux-gnueabihf [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Dec 1 2014 Sat May 16 00:50:05 2015 WARNING: --keepalive option is missing from server config Sat May 16 00:50:05 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x. Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet. Sat May 16 00:50:05 2015 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Sat May 16 00:50:05 2015 Diffie-Hellman initialized with 1024 bit key Sat May 16 00:50:05 2015 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Sat May 16 00:50:05 2015 Socket Buffers: R=[163840->131072] S=[163840->131072] Sat May 16 00:50:05 2015 ROUTE default_gateway=192.168.0.1 Sat May 16 00:50:05 2015 TUN/TAP device tun0 opened Sat May 16 00:50:05 2015 TUN/TAP TX queue length set to 100 Sat May 16 00:50:05 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Sat May 16 00:50:05 2015 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500 Sat May 16 00:50:05 2015 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2 Sat May 16 00:50:05 2015 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ] Sat May 16 00:50:05 2015 GID set to nogroup Sat May 16 00:50:05 2015 UID set to nobody Sat May 16 00:50:05 2015 UDPv4 link local (bound): [undef] Sat May 16 00:50:05 2015 UDPv4 link remote: [undef] Sat May 16 00:50:05 2015 MULTI: multi_init called, r=256 v=256 Sat May 16 00:50:05 2015 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0 Sat May 16 00:50:05 2015 Initialization Sequence Completed and here is the config I put for the openvpn.conf file dev tun proto udp port 1194 ca /etc/openvpn/easy-rsa/keys/ca.crt cert /etc/openvpn/easy-rsa/keys/server.crt key /etc/openvpn/easy-rsa/keys/server.key dh /etc/openvpn/easy-rsa/keys/dh1024.pem user nobody group nogroup server 10.8.0.0 255.255.255.0 persist-key persist-tun status /var/log/openvpn-status.log verb 3 client-to-client push "redirect-gateway def1" #set the dns servers push "dhcp-option DNS 8.8.8.8" push "dhcp-option DNS 8.8.4.4" log-append /var/log/openvpn comp-lzo If someone can point me in the right direction that'd be amazing. Thanks!
maikcat Sat May 16 00:50:05 2015 Initialization Sequence Completed server is up and running... what exactly is your problem? Michael.
Traffic Looks like problems restarting the server:Crash wroteSat May 16 00:50:03 2015 TCP/UDP: Closing socket Sat May 16 00:50:03 2015 /sbin/route del -net 10.8.0.0 netmask 255.255.255.0 SIOCDELRT: Operation not permitted Sat May 16 00:50:03 2015 ERROR: Linux route delete command failed: external program exited with error status: 7 Sat May 16 00:50:03 2015 Closing TUN/TAP interface Sat May 16 00:50:03 2015 /sbin/ifconfig tun0 0.0.0.0 SIOCSIFADDR: Operation not permitted SIOCSIFFLAGS: Operation not permitted Sat May 16 00:50:03 2015 Linux ip addr del failed: external program exited with error status: 255 Sat May 16 00:50:03 2015 SIGTERM[hard,] received, process exitingprobably due to:Crash wroteuser nobody group nogroupwhen you drop privileges the process can no longer manage the network. There is a plugin to help with this: http://sourceforge.net/p/openvpn/openvpn-historical-cvs/ci/8eda4fa71ba60d13c1bc6c8402e7e4958166b37a/tree/plugin/down-root/README More Information: https://community.openvpn.net/openvpn/wiki/PrivilegeSeparation
Crash Essentially when I attempt to either start or restart the OpenVPN service through the /etc/init.d/openvpn restart command it says something like "openVPN server server [FAILED]" in red (sorry Don't have it in front of me at the moment). I thought the same with the privileges, I'll give that a shot and see if it works. I also saw that the sequence completed but I figured since it said Failed that it was not up and running. Thank you for the input. I'll post the results of configuring the privileges later.
