Cannot write to openvpn.log file

[geharvey]

I have an openvpn server installed and working on a Centos 6 server. I have installed logrotate to keep the log files under control. When I look at the files, openvpn.log is zero bytes. It is owned by root and has 600 permissions. If I change the ownership of the file to nobody:nobody, still with 600 permissions and restart ovenvpn, then it starts to fill up with data.

When logrotate moves the logfile to openvpn.log.1 a new openvpn.log file is created, but it is owned by root and has 600 permissions. The file then remains at zero bytes. I have configured openvpn to run as used 'nobody' and group 'nobody' and to append to the openvpn.log file.

There seems to be a permission problem with doing this, although the pevious server on Centos 5 workd fine with the same arrangement.

Has anyone seen this problem before?

Graham.

[geharvey]

Further to my post, I think that the owner of the file is a red herring, restarting the server allows it to start loging data. After further Googling, I have discovered that it is a problem with logrotate and I need to use a postrotate script to restart openvpn, after the logs have rotated, to ensure that the current logs are written to openvpn.log.

I hope someone finds this information useful.

Graham.