Hello,
We encounter some issue in a special case but i can't determine where the issue is.
We have a Synology NAS with OpenVPN server on it and a samba share.
A specific user can't access correctly Samba share since he reset his network configuration on his iPhone (no problem before) when he shares his data to the PC. When accessing some file (size 80 Ko), Windows Explorer completely hangs...
Any idea where is the conflict ?
Here are the things I tried :
- Tried with an other iPhone shared network (same PC) : it worked
- Tried with an Android shared network (same PC) : it worked
- Tried with the L2TP/IPSec server on the same Synology, Same PC, same iPhone : it worked
- Installed OpenVPN on iPhone, connect the iPhone to Server VPN, access Samba share from the phone => did not worked. I needed to restart the iPhone.
.
Thank you.
Vincent.
Here is the smb.conf generated by Synology (I replaced sensitive information with *****) :
[global]
printcap name=cups
winbind enum groups=yes
include=/var/tmp/nginx/smb.netbios.aliases.conf
ldap admin dn=uid=admin,cn=users,dc=******,dc=com
encrypt passwords=yes
ldap ssl=Off
security=user
local master=no
realm=*
ldap passwd sync=yes
ldap suffix=dc=*****,dc=com
passdb backend=multi:smbpasswd,ldapsam:ldap://*****
syno ldap support=yes
printing=cups
max protocol=SMB2
winbind enum users=yes
load printers=yes
workgroup=WORKGROUP
Here is the configuration file used on the PC (I removed public IP and certificate information) :
dev tun
tls-client
remote ***** 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway def1
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode
proto udp
script-security 2
comp-lzo
reneg-sec 0
cipher AES-256-CBC
auth SHA512
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
*******
-----END CERTIFICATE-----
</ca>
Here is the OpenVPN server conf file :
push "route 192.168.3.0 255.255.255.0"
push "route 10.8.0.0 255.255.255.0"
dev tun
management 127.0.0.1 1195
server 10.8.0.0 255.255.255.0
dh /var/packages/VPNCenter/target/etc/openvpn/keys/dh3072.pem
ca /var/packages/VPNCenter/target/etc/openvpn/keys/ca.crt
cert /var/packages/VPNCenter/target/etc/openvpn/keys/server.crt
key /var/packages/VPNCenter/target/etc/openvpn/keys/server.key
max-clients 30
comp-lzo
persist-tun
persist-key
verb 3
#log-append /var/log/openvpn.log
keepalive 10 60
reneg-sec 0
plugin /var/packages/VPNCenter/target/lib/radiusplugin.so /var/packages/VPNCenter/target/etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name
duplicate-cn
status /tmp/ovpn_status_2_result 30
status-version 2
proto udp6
port 1194
cipher AES-256-CBC
auth SHA512
