OpenVPN AS // is there a Server.conf file?

thierrite

Hello to the OpenVPN AS community,

Main idea here: I wish to change some settings in my conf and I can't, thinking this would have been in a server.conf file, but I don't have it, or let's say I can't find it.

I thought I could figure it out when reading some doc and info about OpenVPN, but I couldn't. I asked this question in the OpenVPN community, but I have been said that Openvpn and Openvpn-AS are two different products; so I came here with my request for help.

1/ how I got my OpenVPN AS running fine:
first, I did install OpenVPN & openvpn-as on a VPS running Debian Jessie, with the 2 command lines with a ssh connection from my personal computer (running Mint 19.2):

apt-get install openvpn

dpkg -i openvpnas2.x

(x is linked to the available package at the time of the install)
>> got my 2 URLs
then created my openvpn password.
I did create an new user from my admin console with success, I did add this user in my Debian as well and provided the rights riquired.
I was able to get my client.conf file and connect to my frehly installed OpenVPN AS.
Everything was successful.

2/ I wanted to change some OpenVPN AS settings... and 'drama' begins:
First I Iooked in etc/openvpn/ and all I can find there is update-resolv.conf
then I did search for the file elsewhere, but no joy.
Of course, I did as recommended in the OpenVPN forum:

grep -vE '^#|^;|^$' server.conf

>> says doesn't exist
I decided to 'track' my openvpn to find its pid:

ps -faux grep -i "open"

once found the right pid, thought I could find where server.conf is called using the command:

lsof -p pid

and still no server.conf

3/ what shall I do then?
I'd like to edit my server.conf order to check few things, such as change the verbose default (3), but as far as I can't find the conf, I have no idea whatelse I can do to change verb value.

Thank you for reading, I did my best to provide enough details.
I keep my fingers crossed that someone here will be able to provide an explaination of the 'missing' server.conf and how to find its equivalent if any or how to change my conf.

Regards,
T

krakenfury

I'm doing some digging into this, as well. Best I can tell for Access Server, the main config files are in the etc/ folder in the installation directory. Not sure about Debian, but the CentOS installation dir is /usr/local/openvpn_as

BTW, running rpm -ql on the package shows that everything belonging to the package is in that directory. I'd be willing to bet that this is the same for Ubuntu, but someone with more knowledge might have better info. I'm still on 2.6.1, and there was only one package for that version. Later versions include a client bundle package, but I haven't successfully upgraded my version yet, though I will be giving this a try soon. I've scoured the installation directory for any additional documentation, but, alas, nothing. Maybe there's something else included with the client bundle, but I'm not holding my breath.

There's two files etc/as.conf and etc/config.json and from some cursory investigation, it looks like these files are what write to the main files in etc/db/ whenever openvpnas runs.

Unfortunately, this is all pretty speculative, because I haven't gotten through all the documentation yet. I would open a support ticket, if you're running the most recent version. I plan to do this after I get upgraded to 2.7.5. They should have a pretty good idea of what configuration options are available. I think the documentation is still very much a work in progress, but if you have a paid license for openvpn_as, the support is part of what you pay for.

I have a sneaking suspicion that instead of handing config files directly, it might be that this work is meant to be done with one of the scripts in the scripts/ directory (sacli would be my first guess, though this might only be for user/group configuration? idk). But we should read through the "COMMAND LINE" tab here for clues: https://openvpn.net/vpn-server-resources/. I'm looking for log reports config (verbosity, rotation, etc), which I suspect will be in the database config stuff, but who the hell knows... If I find anything more useful, I pass it on in this post.

krakenfury

Oh and try to wear kid gloves with the stuff in scripts/
Not everything in there you can just run with a --help option, which is pretty crazy, IMO.
Some of could run, potentially change your configuration, then spit out an error about how --help doesn't mean anything to it.

thierrite

Thank you for your comments krakenfury, I also figure it out about the etc dir and that, in terms of configuration, OpenVPN AS & CN are quite different.

I'll look for some more info around.

So, to answer my originatl question (topic): no, there is no server.conf file in OpenVPN AS.

krakenfury

no, server.conf file is only for openvpn afaik.
for openvpn_as, there is etc/as.conf and etc/conf.json or etc/conf_local.json (maybe both). with a fresh installation, there are templates for these in etc/

thierrite

Thanks krakenfury, after digging a bit more I found that too.

Also, just found a couple of hours ago that there are tools to reach the settings.
In directory /usr/local/openvpn_as/scripts, seeing teh current configuration with teh following command:

./sacli ConfigQuery

It seems as well possible to edit it, but I believe it is unwise, better to use the OpenVPN AS GUI provided for that.

Anyway, this info was in teh help, but in the data backup management, which was not obvious when I started to look for asnwers, thus explaining my original message here.
The help I mention is here:
https://openvpn.net/vpn-server-resources/configuration-database-management-and-backups/

I consider the topic as 'SOLVED'.

T