Socket Bind Failed During Boot

akashi

Hi, I am a new to Linux and have managed to install OpenVPN 2.3.4 on my debian distro running on a Raspberry Pi 2.

I am running OpenVPN on port TCP 443 and for some reasons during every boot it does not work:

Tue Jun 30 23:09:35 2015 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec  1 2014
Tue Jun 30 23:09:35 2015 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Tue Jun 30 23:09:35 2015 Control Channel Authentication: using '/usr/share/easy-rsa/keys/ta.key' as a OpenVPN static key file
Tue Jun 30 23:09:35 2015 TCP/UDP: Socket bind failed on local address [AF_INET]192.168.1.100:443: Cannot assign requested address
Tue Jun 30 23:09:35 2015 Exiting due to fatal error

However, when I restart the OpenVPN service, it works perfectly:

Tue Jun 30 23:17:53 2015 OpenVPN 2.3.4 arm-unknown-linux-gnueabihf [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec  1 2014
Tue Jun 30 23:17:53 2015 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08
Tue Jun 30 23:17:53 2015 NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Tue Jun 30 23:17:53 2015 Control Channel Authentication: using '/usr/share/easy-rsa/keys/ta.key' as a OpenVPN static key file
Tue Jun 30 23:17:53 2015 TUN/TAP device tun0 opened
Tue Jun 30 23:17:53 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Tue Jun 30 23:17:53 2015 /sbin/ip link set dev tun0 up mtu 1500
Tue Jun 30 23:17:53 2015 /sbin/ip addr add dev tun0 local 10.8.0.1 peer 10.8.0.2
Tue Jun 30 23:17:53 2015 GID set to nogroup
Tue Jun 30 23:17:53 2015 UID set to nobody
Tue Jun 30 23:17:53 2015 Listening for incoming TCP connection on [AF_INET]192.168.1.100:443
Tue Jun 30 23:17:53 2015 TCPv4_SERVER link local (bound): [AF_INET]192.168.1.100:443
Tue Jun 30 23:17:53 2015 TCPv4_SERVER link remote: [undef]
Tue Jun 30 23:17:53 2015 Initialization Sequence Completed

Here is my ifconfig:

eth0      Link encap:Ethernet  HWaddr b8:xx:xx:xx:xx:xx
          inet addr:192.168.1.100  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST DYNAMIC  MTU:1500  Metric:1
          RX packets:52459 errors:0 dropped:0 overruns:0 frame:0
          TX packets:52755 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:45044035 (42.9 MiB)  TX bytes:47096914 (44.9 MiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:446 errors:0 dropped:0 overruns:0 frame:0
          TX packets:446 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:103659 (101.2 KiB)  TX bytes:103659 (101.2 KiB)

Any ideas? Thanks in advance.

maikcat

is openvpn starts AFTER networking?

how do you start openvpn on startup?

Michael.

akashi

Thanks for your reply.

I am VERY new to Linux, not sure how to check if it loads before networking?

OpenVPN is started during boot up with init.d script.

Thanks

akashi

maikcat wroteis openvpn starts AFTER networking?

how do you start openvpn on startup?

Michael.

I just found out my distro is using connmanctl to manage the network.

I have no idea how to make it start before the OpenVPN service.

On another distro it uses the networking service and OpenVPN if working fine on that.

Your help is appreciated.

Thanks.

akashi

I finally fixed the problem by removing 'Local 192.168.1.100' from the server config file. Now it is working perfectly fine when system boots up.

The problem was/is OpenVPN service loads before the system receives an IP address and fails.

akashi

I spoke too soon :oops:

The server loads and allows the clients to connect, however the clients do not have any internet connection to the web.

I still need help if anyone can help out it would be appreciated

Thanks

Traffic

akashi wrotethe clients do not have any internet connection to the web

Please see this HOWTO:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

I highly recommend you read the entire HOWTO (more than once):
HOWTO: For OpenVPN Community Edition

akashi

Traffic wrote
akashi wrotethe clients do not have any internet connection to the web
Please see this HOWTO:
HOWTO: Routing all client traffic (including web-traffic) through the VPN

I highly recommend you read the entire HOWTO (more than once):
HOWTO: For OpenVPN Community Edition

Thanks for the links, my problem is the OpenVPN service loading before the system is able to configure the network.

If I restart the OpenVPN service manually,I have no problems whatsoever, clients can access internet etc.

I need help on how to either delay the OpenVPN service during boot or change settings for OpenVPN to wait for network service to finish first.

Traffic

akashi wroteI need help on how to either delay the OpenVPN service during boot or change settings for OpenVPN to wait for network service to finish first

You need to learn how your Operating System works ... Debian is well documented.

akashi

I was able to fix the problem and tested it many times and could confirm it has been fixed.

I investigated the boot log with 'journalctl -b' and noticed after the eth0 was up, the NTP service was started.

I simply edit my openvpn@.service and added 'After=ntp.service' and now OpenVPN is loading on every boot.

I hope this helps someone.

akashi

You can also add 'After=multi-user.target' instead as it works too.