I am back after finishing off my problems with the
RaspberryPi OpenVPN server utilizing ccd.
Now I am having trouble with a Ubuntu Server 16.04-3 LTS server I installed yesterday on a small PC left over since my mother passed away.
It is not a powerhouse but probably better than the RPi units I have used before, specifically networking is much faster, not limited by the 100 Mb/s Ethernet on the RPi units. After all it ran Windows 7 x64 in 2 GB RAM and a 500 GB hdd using an AMD Athlon CPU.
Anyway I have followed my notes on setting the system up but cannot get it to work...
I will post my server.conf file below but here is the logfile produced when I try to start it up:
Wed Jan 31 00:07:39 2018 us=921001 Current Parameter Settings:
Wed Jan 31 00:07:39 2018 us=921079 config = '/etc/openvpn/server.conf'
Wed Jan 31 00:07:39 2018 us=921095 mode = 1
Wed Jan 31 00:07:39 2018 us=921109 persist_config = DISABLED
Wed Jan 31 00:07:39 2018 us=921121 persist_mode = 1
Wed Jan 31 00:07:39 2018 us=921133 show_ciphers = DISABLED
Wed Jan 31 00:07:39 2018 us=921144 show_digests = DISABLED
Wed Jan 31 00:07:39 2018 us=921156 show_engines = DISABLED
Wed Jan 31 00:07:39 2018 us=921167 genkey = DISABLED
Wed Jan 31 00:07:39 2018 us=921179 key_pass_file = '[UNDEF]'
Wed Jan 31 00:07:39 2018 us=921191 NOTE: --mute triggered...
Wed Jan 31 00:07:39 2018 us=921215 276 variation(s) on previous 10 message(s) suppressed by --mute
Wed Jan 31 00:07:39 2018 us=921228 OpenVPN 2.4.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Sep 26 2017
Wed Jan 31 00:07:39 2018 us=921247 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
Wed Jan 31 00:07:39 2018 us=946881 Diffie-Hellman initialized with 2048 bit key
Wed Jan 31 00:07:39 2018 us=964535 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 31 00:07:39 2018 us=964604 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jan 31 00:07:39 2018 us=964646 TLS-Auth MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Wed Jan 31 00:07:39 2018 us=965458 TUN/TAP device tun0 opened
Wed Jan 31 00:07:39 2018 us=965528 TUN/TAP TX queue length set to 100
Wed Jan 31 00:07:39 2018 us=965569 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Jan 31 00:07:39 2018 us=965620 /sbin/ip link set dev tun0 up mtu 1500
Wed Jan 31 00:07:39 2018 us=969054 /sbin/ip addr add dev tun0 10.8.0.1/24 broadcast 10.8.0.255
Wed Jan 31 00:07:39 2018 us=971910 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Wed Jan 31 00:07:39 2018 us=972392 failed to find GID for group nobody
Wed Jan 31 00:07:39 2018 us=972421 Exiting due to fatal error
Wed Jan 31 00:07:39 2018 us=972442 Closing TUN/TAP interface
Wed Jan 31 00:07:39 2018 us=972456 /sbin/ip addr del dev tun0 10.8.0.1/24
Look at the 4th line from the bottom, this is what I have not seen in any of my RPi systems but I use the same settings in the server.conf file there as I do here.
What gives, must be something simple?
port 1191
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key # This file should be kept secret
dh /etc/openvpn/keys/dh2048.pem
topology subnet
server 10.8.0.0 255.255.255.0 'nopool'
ifconfig-pool 10.8.0.2 10.8.0.127 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 192.168.119.0 255.255.255.0"
push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
tls-auth /etc/openvpn/keys/ta.key 0 # This file is secret
cipher AES-256-CBC
comp-lzo
max-clients 20
user openvpn
group nobody
persist-key
persist-tun
status /etc/openvpn/log/openvpn-status.log
log /etc/openvpn/log/openvpn.log
verb 4
mute 10
explicit-exit-notify 1
As you can see on lines 19-20 the server falls back to the user openvpn as recommended in the how-to's.
This worked first time on all the RPi units I have used it (several) without any issues.
But on Ubuntu 16.04 it complains about group nobody, why is that and what is it used for?
