robigne
Hi all,
I'm trying to configure my internet box provided by my internet provider. The box is based on Linux, but as a user, I have no access to the OS it self. This box is is not only a router, but also it embeds a VPN Client (OPENVpn), that I try to configure.
To connect to a VPN server, the box allow you to set the VPN user/password to use, and a config file.
An error is raised when the box tries to connect to the VPN server provided by my VPN provider :
openvpn: asked for unsupported password
Here is the full log :
....
2017-04-17 17:39:01 openvpn: output: Mon Apr 17 17:39:01 2017 [b4cb369bb63585dc91259400f5bd306d] Peer Connection Initiated with [AF_INET]209.95.50.16:1198
2017-04-17 17:39:02 openvpn: rx: >STATE:1492443542,GET_CONFIG,,,,,,0
2017-04-17 17:39:02 openvpn: output: Mon Apr 17 17:39:02 2017 MANAGEMENT: >STATE:1492443542,GET_CONFIG,,,,,,0
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 SENT CONTROL [b4cb369bb63585dc91259400f5bd306d]: 'PUSH_REQUEST' (status=1)
2017-04-17 17:39:03 openvpn: rx: >PASSWORD:Auth-Token:GKq7dOuRy6ZznZXz4aJUC5BB6mA3NZ2xmidTYtHurhA=
2017-04-17 17:39:03 openvpn: asked for unsupported password
2017-04-17 17:39:03 l3 is now stable
2017-04-17 17:39:03 l3 does not fulfil config requirement
2017-04-17 17:39:03 l3 state change 'l3_wait_stable' => 'l3_bring_down'
2017-04-17 17:39:03 waiting for l3 providers to go down
2017-04-17 17:39:03 l3 state change 'l3_bring_down' => 'l3_wait_down'
2017-04-17 17:39:03 l3 state change 'l3_wait_down' => 'l3_cleanup_start'
2017-04-17 17:39:03 calling helper script at '/etc/fbxconnman/conn.post-down'
2017-04-17 17:39:03 l3 state change 'l3_cleanup_start' => 'l3_wait_postdown_helper'
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 209.222.18.222,dhcp-option DNS 209.222.18.218,ping 10,comp-lzo no,route 10.88.10.1,topology net30,ifconfig 10.88.10.6 10.88.10.5,auth-token GKq7dOuRy6ZznZXz4aJUC5BB6mA3NZ2xmidTYtHurhA='
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 OPTIONS IMPORT: timers and/or timeouts modified
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 OPTIONS IMPORT: LZO parms modified
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 OPTIONS IMPORT: --ifconfig/up options modified
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 OPTIONS IMPORT: route options modified
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 ROUTE: default_gateway=UNDEF
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 Initialization Sequence Completed
2017-04-17 17:39:03 openvpn: output: Mon Apr 17 17:39:03 2017 MANAGEMENT: >STATE:1492443543,CONNECTED,SUCCESS,10.88.10.6,209.95.50.16,209.222.18.218,209.222.18.222,1500
2017-04-17 17:39:03 l3 state change 'l3_wait_postdown_helper' => 'l3_cleanup_finish'
2017-04-17 17:39:03 l3 state change 'l3_cleanup_finish' => 'l3_finished'
2017-04-17 17:39:03 state change 'wait_l3_up' => 'wait_l3_down'
2017-04-17 17:39:03 l3 state change 'l3_finished' => 'l3_down'
2017-04-17 17:39:03 state is now DOWN
2017-04-17 17:39:03 state change 'wait_l3_down' => 'l3_finished'
2017-04-17 17:39:03 state change 'l3_finished' => 'wait_l2_down'
2017-04-17 17:39:03 l2 state change 'l2_up' => 'l2_cleanup'
2017-04-17 17:39:03 l2 state change 'l2_cleanup' => 'l2_down'
2017-04-17 17:39:03 state change 'wait_l2_down' => 'down'
Here is the configuration file :
client
dev tun
proto udp
remote no.privateinternetaccess.com 1198
resolv-retry infinite
nobind
persist-key
persist-tun
cipher aes-128-cbc
auth sha1
tls-client
remote-cert-tls server
auth-user-pass
comp-lzo
script-security 2
verb 3
reneg-sec 0
<ca>
-----BEGIN CERTIFICATE-----
MIIFqzRiU....
-----END CERTIFICATE-----
</ca>
I do not understand the error raised.
Is someone understand what's going wrong ??
Thank you in advance
Robert
robigne
I have no access to the OS of the box and thus no control on how the user name/password are transmitted.
I just try to understand the error message, try to know if the error comes from the client side (ovpn configuration file, user/password parameters, or something else) or from the server.
If I understand well, you would say from the client and the way the credentials are transmitted ?
Unsupported password would mean the password holds invalid characters ?
THanks for your help 😃
TinCanTech
robigne wroteI have no access to the OS of the box and thus no control on how the user name/password are transmitted
Your config file uses --
auth-user-pass without parameter and so the user must type the password in when requested, I presume this is what you have to do. If you do not have access to the OS you can not save the password to a file.
robigne wroteUnsupported password would mean the password holds invalid characters ?
The error message appears to be from your OS so I don't know what it means.
Who ever provides the equipment needs to answer your question.
robigne
Hi all,
Finally, it might come from my Internet provider. A ticket has been opened for this issue and it is being investigated.
I would like to thank all of you.
Regards,
Rob