I am trying to setup openvpn as a server and also to run it as a unpriviledged user instead of root
I have followed the guide here
https://community.openvpn.net/openvpn/wiki/UnprivilegedUser and rather than using a configuration file I am starting openvpn using command line and flags.
The process seems to be able to start however I keep getting this error/note which I dont quite understand what it is
Note: Cannot set tx queue length on tap0: Operation not permitted (errno=1)
The process is started with the following commands (Dummy values are used as an example ofc)
openvpn --mktun --dev tap0 --dev-type tap --user openvpn --group openvpn >/dev/null 2>&1
ifconfig tap0 0.0.0.0 promisc up >/dev/null 2>&1
sudo -u openvpn openvpn --daemon --mode server --port 9433 --tls-server --dh /path/to/my/dh.file --ca /path/to/my/ca.crt --cert /path/to/my/cert.crt --key /path/to/my/cert.key --server-bridge 199.132.1.4 255.255.255.255 199.132.1.4 199.132.1.4 --dev tap0 --proto udp --keepalive 10 120 --auth-nocache --writepid /path/to/piddir.pid --ifconfig-pool-persist /path/pool/persist/file-ipp.txt --status /path/to/status/file-status.txt --log-append /path/to/log/file-openvpn.log --verb 1 --persist-tun --persist-key --iproute /usr/local/sbin/unpriv-ip --cd /etc/openvpn
The log shows the following:
Wed May 20 18:03:17 2015 OpenVPN 2.3.2 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on May 20 2015
Wed May 20 18:03:17 2015 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Wed May 20 18:03:17 2015 TUN/TAP device tap0 opened
Wed May 20 18:03:17 2015 Note: Cannot set tx queue length on tap0: Operation not permitted (errno=1)
Wed May 20 18:03:17 2015 UDPv4 link local (bound): [undef]
Wed May 20 18:03:17 2015 UDPv4 link remote: [undef]
Wed May 20 18:03:17 2015 Initialization Sequence Completed
