I've stuck with this problem. I've checked all but without result. There is somthing stupid or bug. :roll:
System:
Ubuntu 17.10
Instalation:
OpenVPN 2.4.3 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jul 3 2017
library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08
and
when I start openvpn server from command line:
$ /usr/sbin/openvpn /etc/openvpn/server.conf
server starts and works correctly, users can login.
but
when I start openvpn server as service:
service openvpn start
server starts but doesn't authorize users.
I've checed if the same config is loaded:
$ ps waux |grep openvpn
nobody 3247 0.0 0.0 56916 7124 ? Ss 14:42 0:00 /usr/sbin/openvpn --daemon ovpn-server --status /run/openvpn/server.status 10 --cd /etc/openvpn --script-security 2 --config /etc/openvpn/server.conf --writepid /run/openvpn/server.pid
root 3248 0.0 0.0 56648 3884 ? S 14:42 0:00 /usr/sbin/openvpn --daemon ovpn-server --status /run/openvpn/server.status 10 --cd /etc/openvpn --script-security 2 --config /etc/openvpn/server.conf --writepid /run/openvpn/server.pid
but loaded config is the same like from command line.
Below log from openvpn:
Apr 4 14:45:31 mp1 ovpn-server[3247]: MULTI: multi_create_instance called
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 Re-using SSL/TLS context
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 LZO compression initializing
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 Control Channel MTU parms [ L:1622 D:1212 EF:38 EB:0 ET:0 EL:3 ]
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 TLS: Initial packet from [AF_INET]10.103.53.67:61320, sid=8087d83a 32132196
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=T4, CN=Fort-Funston CA, name=mp1, emailAddress=
it@xxxxx.pl
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=T4, CN=rafal, name=mp1, emailAddress=
it@xxxx.pl
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_VER=2.4.4
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_PLAT=mac
Apr 4 14:45:31 mp1 openvpn[3247]: AUTH-PAM: BACKGROUND: received command code: 0
Apr 4 14:45:31 mp1 openvpn[3247]: AUTH-PAM: BACKGROUND: USER: rafal
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_PROTO=2
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_NCP=2
Apr 4 14:45:31 mp1 openvpn[3247]: AUTH-PAM: BACKGROUND: my_conv[0] query='Password: ' style=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_LZ4=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_LZ4v2=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_LZO=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_COMP_STUB=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_COMP_STUBv2=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_TCPNL=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 peer info: IV_GUI_VER="net.tunnelblick.tunnelblick_5011_3.7.5a__build_5011)"
Apr 4 14:45:31 mp1 openvpn[3247]: AUTH-PAM: BACKGROUND: user 'rafal' failed to authenticate: System error
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 PLUGIN_CALL: POST /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=1
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 PLUGIN_CALL: plugin function PLUGIN_AUTH_USER_PASS_VERIFY failed with status 1: /usr/lib/x86_64-linux-gnu/openvpn/plugins/openvpn-plugin-auth-pam.so
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 TLS Auth Error: Auth Username/Password verification failed for peer
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Apr 4 14:45:31 mp1 ovpn-server[3247]: 10.103.53.67:61320 [rafal] Peer Connection Initiated with [AF_INET]10.103.53.67:61320
Apr 4 14:45:32 mp1 ovpn-server[3247]: 10.103.53.67:61320 PUSH: Received control message: 'PUSH_REQUEST'
Apr 4 14:45:32 mp1 ovpn-server[3247]: 10.103.53.67:61320 Delayed exit in 5 seconds
Apr 4 14:45:32 mp1 ovpn-server[3247]: 10.103.53.67:61320 SENT CONTROL [rafal]: 'AUTH_FAILED' (status=1)
Apr 4 14:45:37 mp1 ovpn-server[3247]: 10.103.53.67:61320 SIGTERM[soft,delayed-exit] received, client-instance exiting
What's going on ?
