[resolved] Connecting a Windows 7 Client

[jdcollins]

Hi guys,

I've got OpenVPN up and running on an Ubuntu 11.10 machine, everything seems to be working fine on that end. I have been able to successfully connect another linux client, however I am trying to connect with Windows 7 now. I have the OpenVPN GUI and everything for Windows 7 installed, copied my keys and set up my configuration but when I try to connect it hangs at "Need hold release from management interface, waiting..."

I'm not sure how to initiate this hold release and I am brand new at this. Any suggestions?

[FeileX]

Have you configured your openvpn server to allow management?
http://openvpn.net/index.php/open-sourc ... rface.html
Not sure if you need that or not... check if your server config has the management flag set.

[Mimiko]

Post the log, the config file. Do you run GUI with elevated privileges? What is the OpenVPN server version?

[jdcollins]

Thanks for the replies.

FeileX, I had not previously configured it to allow management but I added the directives to my server.conf file that were listed on that web page. After rebooting the server and attempting to connect again I am still getting the same error.

Mimiko, I am running it as an administrator account and even if I right click and do "Run as administrator" I still get the same error. The OpenVPN server is version 2.2.0, and here are the requested files:

Log(server)

Code: Select all

OpenVPN CLIENT LIST
Updated,Fri Dec  9 10:48:57 2011
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
ROUTING TABLE
Virtual Address,Common Name,Real Address,Last Ref
GLOBAL STATS
Max bcast/mcast queue length,0
END

Config (Server)

Code: Select all

;local a.b.c.d

port 1194

;proto tcp
proto udp

;dev tap
dev tun

;dev-node MyTap

ca ca.crt
cert ubuntuVPN.crt
key ubuntuVPN.key  # This file should be kept secret

dh dh1024.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100

;server-bridge

;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"

;client-config-dir ccd
;route 192.168.40.128 255.255.255.248

;client-config-dir ccd
;route 10.9.0.0 255.255.255.252

;learn-address ./script

;push "redirect-gateway def1 bypass-dhcp"

;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"

;client-to-client

;duplicate-cn

keepalive 10 120

;tls-auth ta.key 0 # This file is secret

;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES

comp-lzo

;max-clients 100

;user nobody
;group nogroup

persist-key
persist-tun

status openvpn-status.log

;log         openvpn.log
;log-append  openvpn.log

verb 3

;mute 20

--management
--management-query-passwords
--management-log-cache

Log (Client)

Code: Select all

Fri Dec 09 11:04:03 2011 OpenVPN 2.2.1 Win32-MSVC++ [SSL] [LZO2] built on Jul  1 2011
Fri Dec 09 11:04:03 2011 MANAGEMENT: TCP Socket listening on 127.0.0.1:1194
Fri Dec 09 11:04:03 2011 Need hold release from management interface, waiting...

Config (Client)

Code: Select all

client
remote  161.45.233.172
port 1194
proto udp
dev tun
dev-type tun
ns-cert-type server
reneg-sec 86400
auth-user-pass
auth-retry interact
comp-lzo yes
verb 3
ca ca.crt
cert "C:\\winclient.crt"
key "C:\\winclient.key"
management 127.0.0.1 1194
management-hold
management-query-passwords
auth-retry interact

[Mimiko]

As you don't know how to do management, just remove from the config file the lines:

management 127.0.0.1 1194
management-hold
management-query-passwords

[jdcollins]

Thank you very much that worked great!