client_connect not working on CentOS

dana

Good afternoon.
On two virtual machines, the client and the server are installed (OC Ubuntu).
I use certificates and keys for clients authentication. certificates and keys are created in easy-rsa. OpenVPN tunnel works good.
To control clientы connections, add to the server configuration:
script-security 2
client-connect "/etc/openvpn/connect_control.sh 1"
client-disconnect "/etc/openvpn/connect_control.sh 2”
Everything is working.
Now I installed the client and the server on CentOS. But everything works until the clients start to connect. Gives an error message AUTH_FAILED.
After commenting out client-connect, client-disconnect - everything works.
But the problem is that I need these functions very much.
How to solve this problem?

TinCanTech

See your server log at --verb 4 for errors.

Please see:
HOWTO: Request Help !

dana

server.log

Thu Sep  6 10:21:15 2018 us=111449 TUN/TAP device tun0 opened
Thu Sep  6 10:21:15 2018 us=111460 TUN/TAP TX queue length set to 100
Thu Sep  6 10:21:15 2018 us=111468 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Thu Sep  6 10:21:15 2018 us=111477 /sbin/ip link set dev tun0 up mtu 1500
Thu Sep  6 10:21:15 2018 us=147418 /sbin/ip addr add dev tun0 local 10.8.50.1 peer 10.8.50.2
Thu Sep  6 10:21:15 2018 us=160953 /sbin/ip route add 10.8.50.0/24 via 10.8.50.2
Thu Sep  6 10:21:15 2018 us=162328 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Sep  6 10:21:15 2018 us=162594 Could not determine IPv4/IPv6 protocol. Using AF_INET
Thu Sep  6 10:21:15 2018 us=162627 Socket Buffers: R=[212992->212992] S=[212992->212992]
Thu Sep  6 10:21:15 2018 us=162641 UDPv4 link local (bound): [AF_INET][undef]:1195
Thu Sep  6 10:21:15 2018 us=162646 UDPv4 link remote: [AF_UNSPEC]
Thu Sep  6 10:21:15 2018 us=162655 GID set to nobody
Thu Sep  6 10:21:15 2018 us=162662 UID set to nobody
Thu Sep  6 10:21:15 2018 us=162675 MULTI: multi_init called, r=256 v=256
Thu Sep  6 10:21:15 2018 us=162696 IFCONFIG POOL: base=10.8.50.4 size=62, ipv6=0
Thu Sep  6 10:21:15 2018 us=162734 Initialization Sequence Completed
Thu Sep  6 10:21:35 2018 us=696178 MULTI: multi_create_instance called
Thu Sep  6 10:21:35 2018 us=696239 192.168.10.90:33662 Re-using SSL/TLS context
Thu Sep  6 10:21:35 2018 us=696311 192.168.10.90:33662 LZO compression initializing
Thu Sep  6 10:21:35 2018 us=696393 192.168.10.90:33662 Control Channel MTU parms [ L:1622 D:1184 EF:66 EB:0 ET:0 EL:3 ]
Thu Sep  6 10:21:35 2018 us=696400 192.168.10.90:33662 Data Channel MTU parms [ L:1622 D:1450 EF:122 EB:406 ET:0 EL:3 ]
Thu Sep  6 10:21:35 2018 us=696418 192.168.10.90:33662 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-server'
Thu Sep  6 10:21:35 2018 us=696423 192.168.10.90:33662 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client'
Thu Sep  6 10:21:35 2018 us=696445 192.168.10.90:33662 TLS: Initial packet from [AF_INET]192.168.10.90:33662, sid=447d0af7 ca06615a
Thu Sep  6 10:21:35 2018 us=723601 192.168.10.90:33662 VERIFY OK: depth=1, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=OU, CN=base, name=server, emailAddress=mail@host.domain
Thu Sep  6 10:21:35 2018 us=723772 192.168.10.90:33662 VERIFY OK: depth=0, C=US, ST=CA, L=SanFrancisco, O=Fort-Funston, OU=OU, CN=LC-105, name=server, emailAddress=mail@host.domain
Thu Sep  6 10:21:35 2018 us=725366 192.168.10.90:33662 peer info: IV_VER=2.4.6
Thu Sep  6 10:21:35 2018 us=725409 192.168.10.90:33662 peer info: IV_PLAT=linux
Thu Sep  6 10:21:35 2018 us=725415 192.168.10.90:33662 peer info: IV_PROTO=2
Thu Sep  6 10:21:35 2018 us=725419 192.168.10.90:33662 peer info: IV_NCP=2
Thu Sep  6 10:21:35 2018 us=725423 192.168.10.90:33662 peer info: IV_LZ4=1
Thu Sep  6 10:21:35 2018 us=725427 192.168.10.90:33662 peer info: IV_LZ4v2=1
Thu Sep  6 10:21:35 2018 us=725431 192.168.10.90:33662 peer info: IV_LZO=1
Thu Sep  6 10:21:35 2018 us=725435 192.168.10.90:33662 peer info: IV_COMP_STUB=1
Thu Sep  6 10:21:35 2018 us=725439 192.168.10.90:33662 peer info: IV_COMP_STUBv2=1
Thu Sep  6 10:21:35 2018 us=725443 192.168.10.90:33662 peer info: IV_TCPNL=1
Thu Sep  6 10:21:35 2018 us=726038 192.168.10.90:33662 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
Thu Sep  6 10:21:35 2018 us=726073 192.168.10.90:33662 [LC-105] Peer Connection Initiated with [AF_INET]192.168.10.90:33662
Thu Sep  6 10:21:35 2018 us=726095 LC-105/192.168.10.90:33662 MULTI_sva: pool returned IPv4=10.8.50.6, IPv6=(Not enabled)
Thu Sep  6 10:21:35 2018 us=727090 LC-105/192.168.10.90:33662 WARNING: Failed running command (--client-connect): could not execute external program
Thu Sep  6 10:21:36 2018 us=878634 LC-105/192.168.10.90:33662 PUSH: Received control message: 'PUSH_REQUEST'
Thu Sep  6 10:21:36 2018 us=878718 LC-105/192.168.10.90:33662 Delayed exit in 5 seconds
Thu Sep  6 10:21:36 2018 us=878733 LC-105/192.168.10.90:33662 SENT CONTROL [LC-105]: 'AUTH_FAILED' (status=1)
Thu Sep  6 10:21:42 2018 us=8740 LC-105/192.168.10.90:33662 SIGTERM[soft,delayed-exit] received, client-instance exiting

TinCanTech

dana wrote server.log

Thu Sep  6 10:21:35 2018 us=727090 LC-105/192.168.10.90:33662 WARNING: Failed running command (--client-connect): could not execute external program

You must fix that.