[Solved] Please enter password with the systemd-tty-ask-password-agent tool!

marting

I've setup PiVPN successfully and can connect from mobile with OpenVPN Connect.

Additionally I've installed another raspi and setting it up as OpenVPN Gateway (client).

Steps I've taken:

sudo apt-get install openvpn
sudo systemctl enable openvpn
# transferred client.ovpn from PiVPN to raspi
sudo mv client.ovpn /etc/openvpn/client.conf
cd /etc/openvpn
sudo nano auth.txt
# added username and password to auth.txt
sudo chmod 600 /etc/openvpn/auth.txt
sudo nano /etc/openvpn/client.conf
# added "auth-user-pass /etc/openvpn/auth.txt" to client.conf
sudo service openvpn restart

After the restart I'm getting the following message:

Broadcast message from root@raspberrypi (Fri 2018-11-09 19:47:11 CET):

Password entry required for 'Enter Private Key Password:' (PID 1632).
Please enter password with the systemd-tty-ask-password-agent tool!

Thumb question now: what is my "Private Key Password" (only have OpenVPN Server user and password) ?
... and how to enter it?

marting

I found out, that the "Private Key Password" is THE Password for the OpenVPN User - so simply the same, nothing else - so this question is answered. :!:

... but after a

sudo service openvpn restart

the message

Broadcast message from root@raspberrypi (Fri 2018-11-09 19:47:11 CET):

Password entry required for 'Enter Private Key Password:' (PID 1632).
Please enter password with the systemd-tty-ask-password-agent tool!

is always coming up again (similarily if raspi is rebooted - authentication needs to be done manually) - learned that the

auth-user-pass /etc/openvpn/auth.txt

is no more working 🙁 in the actual
raspian stretch lite
Linux raspberrypi 4.14.71+ #1145 Fri Sep 21 15:06:38 BST 2018 armv6l

so I removed "auth-user-pass" again from /etc/openvpn/client.conf.

... finally: how can the authentication can be automated? :?:

marting

anyone knows how to automate authentication? 🙁

TinCanTech

Try --askpass ..

marting

Hi TinCanTech,
thanks for your reply - this seems to be the solution:

using a file ...

/etc/openvpn/auth.txt

... with a single line with the required password.

sudo nano /etc/openvpn/auth.txt

... added password, saved with CTRL X

sudo chmod 600 /etc/openvpn/auth.txt

... and added

askpass /etc/openvpn/auth.txt

to the client conf file:

sudo nano /etc/openvpn/yourclient.conf

saved with CTRL X

after a restart of the client with

sudo service openvpn restart

no more message to use systemd-tty-ask-password-agent and logged in automatically!
😃

TinCanTech

Thanks for letting us know 8-)

TinCanTech

By the way .. this probably requires that openvpn is compiled with systemd support.