thanks for your answer. i added the quotation marks, but still the same error...
Here is my log:
Wed Aug 19 14:01:00 2015 us=617385 Diffie-Hellman initialized with 4096 bit key
Wed Aug 19 14:01:00 2015 us=617868 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Wed Aug 19 14:01:00 2015 us=617880 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 19 14:01:00 2015 us=617889 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Aug 19 14:01:00 2015 us=617899 TLS-Auth MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Aug 19 14:01:00 2015 us=617914 Socket Buffers: R=[212992->131072] S=[212992->131072]
Wed Aug 19 14:01:00 2015 us=618012 TUN/TAP device tap0 opened
Wed Aug 19 14:01:00 2015 us=618027 TUN/TAP TX queue length set to 100
Wed Aug 19 14:01:00 2015 us=618052 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Aug 19 14:01:00 2015 us=619113 UID set to root
Wed Aug 19 14:01:00 2015 us=619169 UDPv4 link local (bound): [undef]
Wed Aug 19 14:01:00 2015 us=619183 UDPv4 link remote: [undef]
Wed Aug 19 14:01:00 2015 us=619196 MULTI: multi_init called, r=256 v=256
Wed Aug 19 14:01:00 2015 us=619276 IFCONFIG POOL: base=10.5.9.201 size=50, ipv6=0
Wed Aug 19 14:01:00 2015 us=619304 Initialization Sequence Completed
Wed Aug 19 14:01:21 2015 us=791103 MULTI: multi_create_instance called
Wed Aug 19 14:01:21 2015 us=791169 80.187.112.118:15995 Re-using SSL/TLS context
Wed Aug 19 14:01:21 2015 us=791210 80.187.112.118:15995 LZO compression initialized
Wed Aug 19 14:01:21 2015 us=791383 80.187.112.118:15995 Control Channel MTU parms [ L:1574 D:166 EF:66 EB:0 ET:0 EL:0 ]
Wed Aug 19 14:01:21 2015 us=791400 80.187.112.118:15995 Data Channel MTU parms [ L:1574 D:1450 EF:42 EB:135 ET:32 EL:0 AF:3/1 ]
Wed Aug 19 14:01:21 2015 us=791431 80.187.112.118:15995 Local Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-server'
Wed Aug 19 14:01:21 2015 us=791441 80.187.112.118:15995 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1574,tun-mtu 1532,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,tls-auth,key-method 2,tls-client'
Wed Aug 19 14:01:21 2015 us=791468 80.187.112.118:15995 Local Options hash (VER=V4): 'f7b041bb'
Wed Aug 19 14:01:21 2015 us=791485 80.187.112.118:15995 Expected Remote Options hash (VER=V4): '46a60371'
Wed Aug 19 14:01:21 2015 us=791521 80.187.112.118:15995 TLS: Initial packet from [AF_INET]80.187.112.118:15995, sid=6896e05e 325f408f
Wed Aug 19 14:01:24 2015 us=371595 80.187.112.118:15995 PID_ERR replay-window backtrack occurred [1] [TLS_AUTH-0] [0_0011111111111111111111122222222222222222222222222222222233333] 1439985679:63 1439985679:62 t=1439985684[0] r=[-3,64,15,$
Wed Aug 19 14:01:25 2015 us=672939 80.187.112.118:15995 VERIFY OK: depth=1, C=DE, ST=NS, L=Hannover, O=Wahnsinns-WG, OU=changeme, CN=changeme, name=CA-Homeserver, emailAddress=**@**.*
Wed Aug 19 14:01:25 2015 us=673399 80.187.112.118:15995 VERIFY OK: depth=0, C=DE, ST=NS, L=Hannover, O=Wahnsinns-WG, OU=christian, CN=christian, name=changeme, emailAddress=**@**.*
Wed Aug 19 14:01:25 2015 us=891797 80.187.112.118:15995 WARNING: Failed running command (--auth-user-pass-verify): could not execute external program
Wed Aug 19 14:01:25 2015 us=891852 80.187.112.118:15995 TLS Auth Error: Auth Username/Password verification failed for peer
Wed Aug 19 14:01:25 2015 us=931164 80.187.112.118:15995 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
Wed Aug 19 14:01:25 2015 us=931209 80.187.112.118:15995 [christian] Peer Connection Initiated with [AF_INET]80.187.112.118:15995
Wed Aug 19 14:01:28 2015 us=403304 80.187.112.118:15995 PUSH: Received control message: 'PUSH_REQUEST'
Wed Aug 19 14:01:28 2015 us=403333 80.187.112.118:15995 Delayed exit in 5 seconds
Wed Aug 19 14:01:28 2015 us=403352 80.187.112.118:15995 SENT CONTROL [christian]: 'AUTH_FAILED' (status=1)
i found the line " PID_ERR replay-window backtrack occurred" for the first time now and tried to set the protocol to tcp. the log shows the same "Failed running command (--auth-user-pass-verify)" as before, only the line "PID_ERR..." is missing with TCP instead of UDP so i changed server.conf (and client of course) back to UDP protocol.
Any other suggestions?