[Help] Cannot connect to vpn.

GrimReaper

Here is the log :

Sun Jan 29 19:43:29 2012 OpenVPN 2.2.2 Win32-MSVC++ [SSL] [LZO2] [PKCS11] built on Dec 15 2011
Sun Jan 29 19:43:29 2012 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sun Jan 29 19:43:29 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sun Jan 29 19:43:29 2012 Control Channel MTU parms [ L:1543 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sun Jan 29 19:43:29 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sun Jan 29 19:43:29 2012 Data Channel MTU parms [ L:1543 D:1450 EF:43 EB:4 ET:0 EL:0 ]
Sun Jan 29 19:43:29 2012 Local Options hash (VER=V4): 'db02a8f8'
Sun Jan 29 19:43:29 2012 Expected Remote Options hash (VER=V4): '7e068940'
Sun Jan 29 19:43:29 2012 Attempting to establish TCP connection with 207.xxx.xx.xxx:80
Sun Jan 29 19:43:29 2012 TCP connection established with 207.xxx.xx.xxx:80
Sun Jan 29 19:43:29 2012 TCPv4_CLIENT link local: [undef]
Sun Jan 29 19:43:29 2012 TCPv4_CLIENT link remote: 207.xxx.xx.xxx:80
Sun Jan 29 19:43:29 2012 TLS: Initial packet from 207.xxx.xx.xxx:80, sid=bf03456f 33e4adc0
Sun Jan 29 19:43:29 2012 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Sun Jan 29 19:43:31 2012 VERIFY OK: depth=1, /C=FR/ST=FRANCE/L=Paris/O=XXX-VPN/CN=Real-VPN_CA/emailAddress=support@xxx.xx
Sun Jan 29 19:43:31 2012 VERIFY OK: depth=0, /C=FR/ST=FRANCE/L=Paris/O=XXX-VPN/CN=server/emailAddress=support@@xxx.xx
Sun Jan 29 19:43:33 2012 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 29 19:43:33 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jan 29 19:43:33 2012 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sun Jan 29 19:43:33 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sun Jan 29 19:43:33 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sun Jan 29 19:43:33 2012 [server] Peer Connection Initiated with 207.xxx.xx.xxx:80
Sun Jan 29 19:43:35 2012 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Sun Jan 29 19:43:35 2012 AUTH: Received AUTH_FAILED control message
Sun Jan 29 19:43:35 2012 TCP/UDP: Closing socket
Sun Jan 29 19:43:35 2012 SIGTERM[soft,auth-failure] received, process exiting

please help me i use windows xp 32bit

maikcat

please post server config also..

Michael.

GrimReaper

client
dev tun
proto tcp
remote us.XXX-vpn.com 80
resolv-retry infinite
nobind
persist-key
persist-tun
ca XXXvpn.crt
auth-user-pass XXXvpn.auth
verb 3
reneg-sec 86400

route-method exe
route-delay 2

maikcat

hi there,

this is client config,

can you post SERVER config?

Michael.

GrimReaper

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
dh dh1024.pem
auth-user-pass-verify
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

maikcat

please read this:

Using alternative authentication methods

OpenVPN 2.0 includes a feature that allows the OpenVPN server to securely obtain a username and password from a connecting client, and to use that information as a basis for authenticating the client.

To use this authentication method, first add the auth-user-pass directive to the client configuration. It will direct the OpenVPN client to query the user for a username/password, passing it on to the server over the secure TLS channel.

Next, configure the server to use an authentication plugin, which may be a script, shared object, or DLL. The OpenVPN server will call the plugin every time a VPN client tries to connect, passing it the username/password entered on the client. The authentication plugin can control whether or not the OpenVPN server allows the client to connect by returning a failure (1) or success (0) value.
Using Script Plugins

Script plugins can be used by adding the auth-user-pass-verify directive to the server-side configuration file. For example:

auth-user-pass-verify auth-pam.pl via-file

will use the auth-pam.pl perl script to authenticate the username/password of connecting clients. See the description of auth-user-pass-verify in the manual page for more information.

The auth-pam.pl script is included in the OpenVPN source file distribution in the sample-scripts subdirectory. It will authenticate users on a Linux server using a PAM authentication module, which could in turn implement shadow password, RADIUS, or LDAP authentication. auth-pam.pl is primarily intended for demonstration purposes. For real-world PAM authentication, use the openvpn-auth-pam shared object plugin described below.

from http://openvpn.net/index.php/open-source/documentation/howto.html

Michael

GrimReaper

Ok i add "auth-user-pass-verify auth-pam.pl via-file" but nothing please help me ... maybe i no have auth-pam.pl ? i try to download some perl script but nothing again this error make me crazy 🙁 i don't understand english also ..

GrimReaper

Come onnn no help ? I add this line "auth-user-pass-verify auth-pam.pl via-file" in server.ovpn but the log is same... also i no have floader scripts in openvpn install floader come on boys help me

Mimiko

Just delete auth-user-pass-verify auth-pam.pl via-file from you server config file.