[Solved] Please enter password with the systemd-tty-ask-password-agent tool!

[marting]

I've setup PiVPN successfully and can connect from mobile with OpenVPN Connect.

Additionally I've installed another raspi and setting it up as OpenVPN Gateway (client).

Steps I've taken:

Code: Select all

sudo apt-get install openvpn
sudo systemctl enable openvpn
# transferred client.ovpn from PiVPN to raspi
sudo mv client.ovpn /etc/openvpn/client.conf
cd /etc/openvpn
sudo nano auth.txt
# added username and password to auth.txt
sudo chmod 600 /etc/openvpn/auth.txt
sudo nano /etc/openvpn/client.conf
# added "auth-user-pass /etc/openvpn/auth.txt" to client.conf
sudo service openvpn restart

After the restart I'm getting the following message:

Code: Select all

Broadcast message from root@raspberrypi (Fri 2018-11-09 19:47:11 CET):

Password entry required for 'Enter Private Key Password:' (PID 1632).
Please enter password with the systemd-tty-ask-password-agent tool!

Thumb question now: what is my "Private Key Password" (only have OpenVPN Server user and password) ?
... and how to enter it?

[marting]

I found out, that the "Private Key Password" is THE Password for the OpenVPN User - so simply the same, nothing else - so this question is answered.

... but after a

Code: Select all

sudo service openvpn restart

the message

Code: Select all

Broadcast message from root@raspberrypi (Fri 2018-11-09 19:47:11 CET):

Password entry required for 'Enter Private Key Password:' (PID 1632).
Please enter password with the systemd-tty-ask-password-agent tool!

is always coming up again (similarily if raspi is rebooted - authentication needs to be done manually) - learned that the

Code: Select all

auth-user-pass /etc/openvpn/auth.txt

is no more working in the actual
raspian stretch lite
Linux raspberrypi 4.14.71+ #1145 Fri Sep 21 15:06:38 BST 2018 armv6l

so I removed "auth-user-pass" again from /etc/openvpn/client.conf.

... finally: how can the authentication can be automated?

[marting]

anyone knows how to automate authentication?

[TinCanTech]

Try --askpass ..

[marting]

Hi TinCanTech,
thanks for your reply - this seems to be the solution:

using a file ...

Code: Select all

/etc/openvpn/auth.txt

... with a single line with the required password.

Code: Select all

sudo nano /etc/openvpn/auth.txt

... added password, saved with CTRL X

Code: Select all

sudo chmod 600 /etc/openvpn/auth.txt

... and added

Code: Select all

askpass /etc/openvpn/auth.txt

to the client conf file:

Code: Select all

sudo nano /etc/openvpn/yourclient.conf

saved with CTRL X

after a restart of the client with

Code: Select all

sudo service openvpn restart

no more message to use systemd-tty-ask-password-agent and logged in automatically!

[TinCanTech]

Thanks for letting us know

[TinCanTech]

By the way .. this probably requires that openvpn is compiled with systemd support.