Hi, I'm having a problem with my vpn setup. As I currently can't login until I reboot the server I'll have to wait to post the server configuration.
At work we have an openvpn server running under esxi, it authorizes against the active directory running on win 2008 r2
Essentially if my client OS crashes (or if I do a hard termination of the openvpn process (i.e. kill -9)) I can no longer reconnect to the vpn. Others however can access it just fine. To fix the problem I simply start and stop the server from the web gui, or restart the server itself.
The openvpn server logs show this error, even though there should be plenty of assignable IP's. For example at the time there was only one connected user, and the opevpn setup states that the dynamic IP pool has over 20 IP's available for it.
DEFAULT_USER: IP address pool depleted: internet/defer:181,internet/defer:323,internet/defer:284,internet/defer:280,internet/defer:323,internet/defer:766,internet/defer:746,omi/auth:422,sagent/usersvc:744,sagent/usersvc:903,sagent/usersvc:390,sagent/usersvc:192,sagent/usersvc:151,sagent/usersvc:132,util/error:52,util/error:32 (VPN_AUTH)
My client log just shows:
Fri May 6 13:20:51 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri May 6 13:20:51 2011 Control Channel Authentication: tls-auth using INLINE static key file
Fri May 6 13:20:51 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:51 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:51 2011 LZO compression initialized
Fri May 6 13:20:51 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 6 13:20:51 2011 Socket Buffers: R=[129024->200000] S=[129024->200000]
Fri May 6 13:20:51 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 6 13:20:51 2011 Local Options hash (VER=V4): '504e774e'
Fri May 6 13:20:51 2011 Expected Remote Options hash (VER=V4): '14168603'
Fri May 6 13:20:51 2011 UDPv4 link local: [undef]
Fri May 6 13:20:51 2011 UDPv4 link remote: XXX.XXX.XXX.XXX:1195
Fri May 6 13:20:51 2011 TLS: Initial packet from XXX.XXX.XXX.XX:1195, sid=fcaa2532 ad75a5e3
Fri May 6 13:20:51 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 6 13:20:51 2011 VERIFY OK: depth=1, /CN=OpenVPN_CA
Fri May 6 13:20:51 2011 VERIFY OK: nsCertType=SERVER
Fri May 6 13:20:51 2011 VERIFY OK: depth=0, /CN=OpenVPN_Server
Fri May 6 13:20:52 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 6 13:20:52 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:52 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 6 13:20:52 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:52 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 6 13:20:52 2011 [OpenVPN_Server] Peer Connection Initiated with XXX.XXX.XXX.XXX:1195
Fri May 6 13:20:54 2011 SENT CONTROL [OpenVPN_Server]: 'PUSH_REQUEST' (status=1)
Fri May 6 13:20:54 2011 AUTH: Received AUTH_FAILED control message
Fri May 6 13:20:54 2011 TCP/UDP: Closing socket
Fri May 6 13:20:54 2011 SIGUSR1[soft,auth-failure] received, process restarting
Are there some settings I can change to fix this?
Thanks in advance!
Client OS that crashes won't be allowed to reconnect to serv
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
-
- OpenVpn Newbie
- Posts: 1
- Joined: Fri May 06, 2011 8:39 pm
- janjust
- Forum Team
- Posts: 2703
- Joined: Fri Aug 20, 2010 2:57 pm
- Location: Amsterdam
- Contact:
Re: Client OS that crashes won't be allowed to reconnect to
this message does not seem to come from the community edition of OpenVPN, but rather from the Open Access version; this forum does not answer questions about Open Access.
For Open Access support contact OpenVPN Inc tech support.
For Open Access support contact OpenVPN Inc tech support.