Hi, I configured OpenVPN 2.1.1 server in Fedora Box which also acts as the gateway/router of LAN. I am able to connect from single clients (XP, Win7, Linux), as well as from linux routers on different lans. Lets just say my requirements were fulfilled. Only thing is, my server fails to start at bootup. I have to start it manually every time. And once in a while it crashes with the following message. The same message I get when it fails to start at boot time. [quote] Apr 20 15:21:31 localhost NetworkManager[1005]: VPN: loaded org.freedesktop.NetworkManager.openvpn Apr 20 15:21:33 localhost openvpn[1067]: OpenVPN 2.1.1 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Jan 5 2010 Apr 20 15:21:33 localhost openvpn[1067]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Apr 20 15:21:33 localhost openvpn[1067]: Note: cannot open openvpn-status.log for WRITE Apr 20 15:21:33 localhost kernel: [ 27.110691] type=1400 audit(1303293093.351:4): avc: denied { write } for pid=1067 comm="openvpn" name="openvpn-status .log" dev=dm-0 ino=2623391 scontext=system_u:system_r:openvpn_t:s0 tcontext=system_u:object_r:openvpn_etc_t:s0 tclass=file Apr 20 15:21:33 localhost openvpn[1067]: Diffie-Hellman initialized with 1024 bit key Apr 20 15:21:33 localhost openvpn[1067]: TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Apr 20 15:21:33 localhost openvpn[1067]: TCP/UDP: Socket bind failed on local address X.X.X.X:1194: Cannot assign requested address Apr 20 15:21:33 localhost openvpn[1067]: Exiting [/quote] Any help will be greatly appreciated. karigarh

hi there, >TCP/UDP: Socket bind failed on local address X.X.X.X:1194: Cannot assign requested address this shows that *something* already runs at this specific port you must start openvpn as root use lsof -i to check if the port is in use.. ps:i believe you have only one config file into /etc/openvpn directory, if you have more make sure that they use different ports. ps2: do you have selinux enabled? Michael.

Thanks Micheal for your quick response [quote="maikcat"] >TCP/UDP: Socket bind failed on local address X.X.X.X:1194: Cannot assign requested address this shows that *something* already runs at this specific port you must start openvpn as root [/quote] In the server script i gave user and group as nobody. But when I do "sudo service openvpn start", it works. I have "chkconfig openvpn on", and its just supposed to start the service. but it does not!!! [quote="maikcat"] use lsof -i to check if the port is in use.. [/quote] lsof -i shows openvpn 2098 nobody 5u IPv4 15858 0t0 UDP X.X.X.X:openvpn [quote="maikcat"] ps:i believe you have only one config file into /etc/openvpn directory, if you have more make sure that they use different ports. [/quote] There is only one config file. And that works fine. I have been using it for 1 week now. Other than the fact that I have to start it manually it hasnt given me any trouble.[Other than with Windows 7 clients, which I solved. PHEW!!!] [quote="maikcat"] ps2: do you have selinux enabled? [/quote] Yes.

[quote]I have "chkconfig openvpn on", and its just supposed to start the service. but it does not!!! [/quote] 'chkconfig openvpn on' does [b]NOT[/b] start the service - it sets up the service to be started at the next reboot. [quote]openvpn 2098 nobody 5u IPv4 15858 0t0 UDP X.X.X.X:openvpn [/quote] this shows that openvpn is (already) running - sounds like 'sudo' is working!

[quote]'chkconfig openvpn on' does [b]NOT[/b] start the service - it sets up the service to be started at the next reboot.[/quote] Sorry if it got lost in translation. My point is that what I do with service openvpn start is actually what is supposed to happen when the machine boots up. Nothing is supposed to be blocking port 1194 when it boots up. And if it was blocking then the service would not start when I manually try to start it!!! Secondly, a running system, with openvpn on and working suddenly crashes, [not the m/c, but the openvpn service], with the same log error!!

hi there, which ver of fedora you use? try (for test only) to configure openvpn to run as root... >Secondly, a running system, with openvpn on and working suddenly crashes, [not the m/c, but the openvpn service], with the same log error!! the other server what os it has? you mean the service crashes and in logs only appears the same error? can you use verb 5 and post the results? Michael.

Fedora 14 Other server(s) are the same. Multplie clients connect directly - windows xp/vista/7 i will try ur suggestions and get back.

Hi Michael, I changed the verbosity to level 5. Havent restarted the m/c yet. But I notice a funny thing - other than the normal log commands it prints a series of 'W' and 'R'. Whole bloody lots of it. Is this normal? and if so what does it mean? Sorry if this sounds like a newbie question - but i am - 1 week old :)

hi there, can you post the logs (verb 5) from server? Michael

The openvpn logs with verb 5. [quote] Thu Apr 21 09:11:52 2011 us=285636 Current Parameter Settings: Thu Apr 21 09:11:52 2011 us=292044 config = 'server.conf' Thu Apr 21 09:11:52 2011 us=292096 mode = 1 Thu Apr 21 09:11:52 2011 us=292145 persist_config = DISABLED Thu Apr 21 09:11:52 2011 us=292177 persist_mode = 1 Thu Apr 21 09:11:52 2011 us=292205 show_ciphers = DISABLED Thu Apr 21 09:11:52 2011 us=292232 show_digests = DISABLED Thu Apr 21 09:11:52 2011 us=292259 show_engines = DISABLED Thu Apr 21 09:11:52 2011 us=292286 genkey = DISABLED Thu Apr 21 09:11:52 2011 us=292312 key_pass_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=292339 show_tls_ciphers = DISABLED Thu Apr 21 09:11:52 2011 us=292375 Connection profiles [default]: Thu Apr 21 09:11:52 2011 us=292405 proto = udp Thu Apr 21 09:11:52 2011 us=292432 local = 'X.X.X.X' Thu Apr 21 09:11:52 2011 us=292459 local_port = 1194 Thu Apr 21 09:11:52 2011 us=292485 remote = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=292512 remote_port = 1194 Thu Apr 21 09:11:52 2011 us=292538 remote_float = DISABLED Thu Apr 21 09:11:52 2011 us=292565 bind_defined = DISABLED Thu Apr 21 09:11:52 2011 us=292591 bind_local = ENABLED Thu Apr 21 09:11:52 2011 us=292618 connect_retry_seconds = 5 Thu Apr 21 09:11:52 2011 us=292644 connect_timeout = 10 Thu Apr 21 09:11:52 2011 us=292671 connect_retry_max = 0 Thu Apr 21 09:11:52 2011 us=292698 socks_proxy_server = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=292724 socks_proxy_port = 0 Thu Apr 21 09:11:52 2011 us=292751 socks_proxy_retry = DISABLED Thu Apr 21 09:11:52 2011 us=292781 Connection profiles END Thu Apr 21 09:11:52 2011 us=292808 remote_random = DISABLED Thu Apr 21 09:11:52 2011 us=292835 ipchange = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=292861 dev = 'tun0' Thu Apr 21 09:11:52 2011 us=292888 dev_type = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=292914 dev_node = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=292940 lladdr = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=292967 topology = 1 Thu Apr 21 09:11:52 2011 us=292993 tun_ipv6 = DISABLED Thu Apr 21 09:11:52 2011 us=293020 ifconfig_local = '10.8.0.1' Thu Apr 21 09:11:52 2011 us=293046 ifconfig_remote_netmask = '10.8.0.2' Thu Apr 21 09:11:52 2011 us=293073 ifconfig_noexec = DISABLED Thu Apr 21 09:11:52 2011 us=293099 ifconfig_nowarn = DISABLED Thu Apr 21 09:11:52 2011 us=293135 shaper = 0 Thu Apr 21 09:11:52 2011 us=293165 tun_mtu = 1500 Thu Apr 21 09:11:52 2011 us=293191 tun_mtu_defined = ENABLED Thu Apr 21 09:11:52 2011 us=293218 link_mtu = 1500 Thu Apr 21 09:11:52 2011 us=293244 link_mtu_defined = DISABLED Thu Apr 21 09:11:52 2011 us=293271 tun_mtu_extra = 0 Thu Apr 21 09:11:52 2011 us=293297 tun_mtu_extra_defined = DISABLED Thu Apr 21 09:11:52 2011 us=293323 fragment = 0 Thu Apr 21 09:11:52 2011 us=293350 mtu_discover_type = -1 Thu Apr 21 09:11:52 2011 us=293377 mtu_test = 0 Thu Apr 21 09:11:52 2011 us=293403 mlock = DISABLED Thu Apr 21 09:11:52 2011 us=293430 keepalive_ping = 10 Thu Apr 21 09:11:52 2011 us=293456 keepalive_timeout = 120 Thu Apr 21 09:11:52 2011 us=293483 inactivity_timeout = 0 Thu Apr 21 09:11:52 2011 us=293509 ping_send_timeout = 10 Thu Apr 21 09:11:52 2011 us=293536 ping_rec_timeout = 240 Thu Apr 21 09:11:52 2011 us=293562 ping_rec_timeout_action = 2 Thu Apr 21 09:11:52 2011 us=293589 ping_timer_remote = DISABLED Thu Apr 21 09:11:52 2011 us=293615 remap_sigusr1 = 0 Thu Apr 21 09:11:52 2011 us=293642 explicit_exit_notification = 0 Thu Apr 21 09:11:52 2011 us=293668 persist_tun = ENABLED Thu Apr 21 09:11:52 2011 us=293695 persist_local_ip = DISABLED Thu Apr 21 09:11:52 2011 us=293721 persist_remote_ip = DISABLED Thu Apr 21 09:11:52 2011 us=293748 persist_key = ENABLED Thu Apr 21 09:11:52 2011 us=293774 mssfix = 1450 Thu Apr 21 09:11:52 2011 us=293800 passtos = DISABLED Thu Apr 21 09:11:52 2011 us=293827 resolve_retry_seconds = 1000000000 Thu Apr 21 09:11:52 2011 us=293857 username = 'nobody' Thu Apr 21 09:11:52 2011 us=293884 groupname = 'nobody' Thu Apr 21 09:11:52 2011 us=293923 chroot_dir = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=293984 cd_dir = '/etc/openvpn' Thu Apr 21 09:11:52 2011 us=294011 selinux_context = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=294036 writepid = '/var/run/openvpn/server.pid' Thu Apr 21 09:11:52 2011 us=294061 up_script = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=294086 down_script = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=294110 down_pre = DISABLED Thu Apr 21 09:11:52 2011 us=294146 up_restart = DISABLED Thu Apr 21 09:11:52 2011 us=294171 up_delay = DISABLED Thu Apr 21 09:11:52 2011 us=294196 daemon = ENABLED Thu Apr 21 09:11:52 2011 us=294223 inetd = 0 Thu Apr 21 09:11:52 2011 us=294248 log = ENABLED Thu Apr 21 09:11:52 2011 us=294272 suppress_timestamps = DISABLED Thu Apr 21 09:11:52 2011 us=294297 nice = 0 Thu Apr 21 09:11:52 2011 us=294321 verbosity = 5 Thu Apr 21 09:11:52 2011 us=294346 mute = 0 Thu Apr 21 09:11:52 2011 us=294370 gremlin = 0 Thu Apr 21 09:11:52 2011 us=294395 status_file = 'openvpn-status.log' Thu Apr 21 09:11:52 2011 us=294420 status_file_version = 1 Thu Apr 21 09:11:52 2011 us=294444 status_file_update_freq = 60 Thu Apr 21 09:11:52 2011 us=294469 occ = ENABLED Thu Apr 21 09:11:52 2011 us=294493 rcvbuf = 65536 Thu Apr 21 09:11:52 2011 us=294518 sndbuf = 65536 Thu Apr 21 09:11:52 2011 us=294542 sockflags = 0 Thu Apr 21 09:11:52 2011 us=294567 fast_io = DISABLED Thu Apr 21 09:11:52 2011 us=294591 lzo = 7 Thu Apr 21 09:11:52 2011 us=294616 route_script = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=294640 route_default_gateway = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=294665 route_default_metric = 0 Thu Apr 21 09:11:52 2011 us=294689 route_noexec = DISABLED Thu Apr 21 09:11:52 2011 us=294714 route_delay = 0 Thu Apr 21 09:11:52 2011 us=294738 route_delay_window = 30 Thu Apr 21 09:11:52 2011 us=294763 route_delay_defined = DISABLED Thu Apr 21 09:11:52 2011 us=294789 route_nopull = DISABLED Thu Apr 21 09:11:52 2011 us=294814 route_gateway_via_dhcp = DISABLED Thu Apr 21 09:11:52 2011 us=294839 max_routes = 100 Thu Apr 21 09:11:52 2011 us=294863 allow_pull_fqdn = DISABLED Thu Apr 21 09:11:52 2011 us=294889 route 192.168.1.0/255.255.255.0/nil/nil Thu Apr 21 09:11:52 2011 us=294915 route 10.8.0.0/255.255.255.0/nil/nil Thu Apr 21 09:11:52 2011 us=294940 management_addr = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=294965 management_port = 0 Thu Apr 21 09:11:52 2011 us=294990 management_user_pass = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295015 management_log_history_cache = 250 Thu Apr 21 09:11:52 2011 us=295040 management_echo_buffer_size = 100 Thu Apr 21 09:11:52 2011 us=295065 management_write_peer_info_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295090 management_client_user = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295114 management_client_group = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295150 management_flags = 0 Thu Apr 21 09:11:52 2011 us=295175 shared_secret_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295199 key_direction = 0 Thu Apr 21 09:11:52 2011 us=295224 ciphername_defined = ENABLED Thu Apr 21 09:11:52 2011 us=295249 ciphername = 'BF-CBC' Thu Apr 21 09:11:52 2011 us=295273 authname_defined = ENABLED Thu Apr 21 09:11:52 2011 us=295298 authname = 'SHA1' Thu Apr 21 09:11:52 2011 us=295322 prng_hash = 'SHA1' Thu Apr 21 09:11:52 2011 us=295347 prng_nonce_secret_len = 16 Thu Apr 21 09:11:52 2011 us=295372 keysize = 0 Thu Apr 21 09:11:52 2011 us=295396 engine = DISABLED Thu Apr 21 09:11:52 2011 us=295421 replay = ENABLED Thu Apr 21 09:11:52 2011 us=295445 mute_replay_warnings = DISABLED Thu Apr 21 09:11:52 2011 us=295470 replay_window = 64 Thu Apr 21 09:11:52 2011 us=295494 replay_time = 15 Thu Apr 21 09:11:52 2011 us=295519 packet_id_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295543 use_iv = ENABLED Thu Apr 21 09:11:52 2011 us=295568 test_crypto = DISABLED Thu Apr 21 09:11:52 2011 us=295592 tls_server = ENABLED Thu Apr 21 09:11:52 2011 us=295617 tls_client = DISABLED Thu Apr 21 09:11:52 2011 us=295641 key_method = 2 Thu Apr 21 09:11:52 2011 us=295682 ca_file = 'keys/ca.crt' Thu Apr 21 09:11:52 2011 us=295708 ca_path = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295733 dh_file = 'keys/dh1024.pem' Thu Apr 21 09:11:52 2011 us=295758 cert_file = 'keys/server.crt' Thu Apr 21 09:11:52 2011 us=295783 priv_key_file = 'keys/server.key' Thu Apr 21 09:11:52 2011 us=295808 pkcs12_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295832 cipher_list = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295857 tls_verify = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295882 tls_remote = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295907 crl_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=295932 ns_cert_type = 0 Thu Apr 21 09:11:52 2011 us=295957 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=295982 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296006 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296031 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296055 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296079 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296104 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296138 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296164 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296189 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296214 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296239 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296263 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296288 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296313 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296337 remote_cert_ku[i] = 0 Thu Apr 21 09:11:52 2011 us=296362 remote_cert_eku = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=296387 tls_timeout = 2 Thu Apr 21 09:11:52 2011 us=296412 renegotiate_bytes = 0 Thu Apr 21 09:11:52 2011 us=296436 renegotiate_packets = 0 Thu Apr 21 09:11:52 2011 us=296461 renegotiate_seconds = 3600 Thu Apr 21 09:11:52 2011 us=296485 handshake_window = 60 Thu Apr 21 09:11:52 2011 us=296510 transition_window = 3600 Thu Apr 21 09:11:52 2011 us=296535 single_session = DISABLED Thu Apr 21 09:11:52 2011 us=296559 tls_exit = DISABLED Thu Apr 21 09:11:52 2011 us=296584 tls_auth_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=296609 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296634 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296658 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296683 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296708 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296732 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296757 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296782 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296807 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296831 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296856 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296881 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296905 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296930 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296955 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=296979 pkcs11_protected_authentication = DISABLED Thu Apr 21 09:11:52 2011 us=297006 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297031 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297056 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297081 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297106 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297141 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297167 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297192 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297217 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297259 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297286 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297311 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297336 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297361 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297385 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297410 pkcs11_private_mode = 00000000 Thu Apr 21 09:11:52 2011 us=297435 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297460 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297485 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297509 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297534 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297558 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297583 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297607 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297632 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297656 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297681 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297705 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297729 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297754 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297778 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297803 pkcs11_cert_private = DISABLED Thu Apr 21 09:11:52 2011 us=297827 pkcs11_pin_cache_period = -1 Thu Apr 21 09:11:52 2011 us=297852 pkcs11_id = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=297876 pkcs11_id_management = DISABLED Thu Apr 21 09:11:52 2011 us=297914 server_network = 10.8.0.0 Thu Apr 21 09:11:52 2011 us=297943 server_netmask = 255.255.255.0 Thu Apr 21 09:11:52 2011 us=297970 server_bridge_ip = 0.0.0.0 Thu Apr 21 09:11:52 2011 us=297997 server_bridge_netmask = 0.0.0.0 Thu Apr 21 09:11:52 2011 us=298024 server_bridge_pool_start = 0.0.0.0 Thu Apr 21 09:11:52 2011 us=298051 server_bridge_pool_end = 0.0.0.0 Thu Apr 21 09:11:52 2011 us=298076 push_entry = 'route 191.127.0.0 255.255.0.0' Thu Apr 21 09:11:52 2011 us=298101 push_entry = 'route 10.8.0.0 255.255.255.0' Thu Apr 21 09:11:52 2011 us=298136 push_entry = 'topology net30' Thu Apr 21 09:11:52 2011 us=298162 push_entry = 'ping 10' Thu Apr 21 09:11:52 2011 us=298188 push_entry = 'ping-restart 120' Thu Apr 21 09:11:52 2011 us=298212 ifconfig_pool_defined = ENABLED Thu Apr 21 09:11:52 2011 us=298240 ifconfig_pool_start = 10.8.0.4 Thu Apr 21 09:11:52 2011 us=298267 ifconfig_pool_end = 10.8.0.251 Thu Apr 21 09:11:52 2011 us=298294 ifconfig_pool_netmask = 0.0.0.0 Thu Apr 21 09:11:52 2011 us=298319 ifconfig_pool_persist_filename = 'ipp.txt' Thu Apr 21 09:11:52 2011 us=298344 ifconfig_pool_persist_refresh_freq = 600 Thu Apr 21 09:11:52 2011 us=298369 n_bcast_buf = 256 Thu Apr 21 09:11:52 2011 us=298394 tcp_queue_limit = 64 Thu Apr 21 09:11:52 2011 us=298418 real_hash_size = 256 Thu Apr 21 09:11:52 2011 us=298443 virtual_hash_size = 256 Thu Apr 21 09:11:52 2011 us=298467 client_connect_script = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=298492 learn_address_script = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=298517 client_disconnect_script = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=298542 client_config_dir = 'ccd' Thu Apr 21 09:11:52 2011 us=298566 ccd_exclusive = DISABLED Thu Apr 21 09:11:52 2011 us=298591 tmp_dir = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=298616 push_ifconfig_defined = DISABLED Thu Apr 21 09:11:52 2011 us=298643 push_ifconfig_local = 0.0.0.0 Thu Apr 21 09:11:52 2011 us=298670 push_ifconfig_remote_netmask = 0.0.0.0 Thu Apr 21 09:11:52 2011 us=298694 enable_c2c = ENABLED Thu Apr 21 09:11:52 2011 us=298719 duplicate_cn = DISABLED Thu Apr 21 09:11:52 2011 us=298744 cf_max = 0 Thu Apr 21 09:11:52 2011 us=298768 cf_per = 0 Thu Apr 21 09:11:52 2011 us=298793 max_clients = 1024 Thu Apr 21 09:11:52 2011 us=298818 max_routes_per_client = 256 Thu Apr 21 09:11:52 2011 us=298855 auth_user_pass_verify_script = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=298881 auth_user_pass_verify_script_via_file = DISABLED Thu Apr 21 09:11:52 2011 us=298907 ssl_flags = 0 Thu Apr 21 09:11:52 2011 us=298931 port_share_host = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=298956 port_share_port = 0 Thu Apr 21 09:11:52 2011 us=298981 client = DISABLED Thu Apr 21 09:11:52 2011 us=299006 pull = DISABLED Thu Apr 21 09:11:52 2011 us=299030 auth_user_pass_file = '[UNDEF]' Thu Apr 21 09:11:52 2011 us=299062 OpenVPN 2.1.1 i686-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Jan 5 2010 Thu Apr 21 09:11:52 2011 us=300457 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Thu Apr 21 09:11:52 2011 us=300831 Note: cannot open openvpn-status.log for WRITE Thu Apr 21 09:11:52 2011 us=342901 Diffie-Hellman initialized with 1024 bit key Thu Apr 21 09:11:52 2011 us=362187 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ] Thu Apr 21 09:11:52 2011 us=363106 TCP/UDP: Socket bind failed on local address X.X.X.X:1194: Cannot assign requested address Thu Apr 21 09:11:52 2011 us=363266 Exiting [/quote] It hasnt crashed while running yet. Only refuses to start at boot time.

just to debug: disable selinux (/etc/sysconfig/selinux), reboot and try again. If that works you know it is an selinux issue , if that also does not work then something else is going on.

OpenVPN fails to start at boot : Fedora

radiocolin

To help others: I solved this issue by removing the "local" line from my server.conf

« Previous Page