Page 1 of 1

AUTH FAILURES

Posted: Wed Dec 19, 2012 2:49 am
by enforcegroup
Hello, I am prodominantly a Windows server tech but have been thrown into the deep end managing some other servers on a network.
Recently we have had some issues with our open vpn servers. One is used for windows authenticating against a security group in AD and the other authenticates against LDAP for dev users. So recently users get authentication error back within a few seconds of clicking OK after entering their password in the windows client.

The log is as per below.

My other issue is I cannot check the server log because the old network admin has locked the local user to be able to access the web interface.
He provided the below info but i just get bash errors when trying to unlock.

To make changes to the VPN server configuration, first unlock the "openvpn" local user on vpn.globemedical.com.au. (usermod -U, as root).

Any info greatly appreciated.


2012-12-19 12:07:42+1030 [HTTPChannel,646,127.0.0.1] *** API CALL f=xmlrpc_SubmitCreds args=['sess_150_101_xxx_xxx_dynamic_p1727_ADg2qVqQzR7Jjemp_1', {'username': 'it', 'password': '[redacted]'}, 'Dynamic', True] kw={} ret=None
2012-12-19 12:07:47+1030 [XMLProxyQueryProtocol,client] DynamicClientBase: AUTH_FAILED: client/dyncli:90,internet/defer:744,python/failure:338,client/dyncli:128,internet/defer:744,python/failure:338,client/asxmlcli:95,internet/defer:746,client/asxmlcli:139 (pyovpn.client.asxmlcli.AuthError)
2012-12-19 12:07:47+1030 [XMLProxyQueryProtocol,client] *** API CALL f=xmlrpc_Poll args=['sess_150_101_xxx_xxx_dynamic_p1727_gLpAGoZW7hiEorF6_2', 10] kw={} ret=[{'timestamp': 1355881067, 'info_type': 'pyovpn.client.asxmlcli.AuthError', 'type': 'INFO', 'severity': 'error', 'value': 'AUTH_FAILED'}]
2012-12-19 12:07:47+1030 [XMLProxyQueryProtocol,client] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_vQMedXzOH1tingAl_1', 10] kw={} ret=[{'timestamp': 1355881067, 'state': 'disconnect', 'profile_id': '150_101_xxx_xxx_dynamic_p1727', 'type': 'PROFILE'}]
2012-12-19 12:07:47+1030 [HTTPChannel,648,127.0.0.1] *** API CALL f=xmlrpc_EnumProfiles args=[] kw={} ret=[{'hash': '2363b8ffb0d6a4e59d956fbfac9ccfc9f750c89a5dd346249ab97a735289f46a', 'access_allowed': True, 'global': True, 'host': '150.101.xxx.xxx', 'snapshot': {'info': {'timestamp': 1355881067, 'info_type': 'pyovpn.client.asxmlcli.AuthError', 'type': 'INFO', 'severity': 'error', 'value': 'AUTH_FAILED'}, 'delete_pending': True, 'password': {'status': 'need', 'timestamp': 1355881055, 'need': ('username', 'password'), 'type': 'PASSWORD', 'auth_type': 'Dynamic'}}, 'owner': u'Luke', 'org': 'OpenVPN Technologies, Inc.', 'type': ['dynamic'], 'id': '150_101_xxx_xxx_dynamic_p1727', 'name': '150.101.xxx.xxx/Dynamic'}]
2012-12-19 12:07:47+1030 [HTTPChannel,650,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_150_101_xxx_xxx_dynamic_p1727_gLpAGoZW7hiEorF6_2', 10] kw={} ret=[{'timestamp': 1355881067, 'type': 'DELETE_PENDING'}]
2012-12-19 12:07:47+1030 [HTTPChannel,651,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_vQMedXzOH1tingAl_1', 10] kw={} ret=[{'timestamp': 1355881067, 'state': 'connect', 'profile_id': '150_101_xxx_xxx_dynamic_p1727', 'type': 'PROFILE'}]
2012-12-19 12:07:47+1030 [HTTPChannel,651,127.0.0.1] *** API CALL f=xmlrpc_Connect args=[{'profile_id': '150_101_230_164_dynamic_p1727', 'type': 'dynamic', 'non_interactive': False}, ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT'], {}] kw={} ret='sess_150_101_xxx_xxx_dynamic_p1727_ycVrcFxgsWKFzzZC_1'
2012-12-19 12:07:47+1030 [HTTPChannel,652,127.0.0.1] *** API CALL f=xmlrpc_ConnectActive args=['150_101_xxx_xxx_dynamic_p1727', ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT'], 'pending'] kw={} ret='sess_150_101_xxx_xxx_dynamic_p1727_abg2T9ybD824qXFQ_2'
2012-12-19 12:07:47+1030 [HTTPChannel,653,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_150_101_xxx_xxx_dynamic_p1727_abg2T9ybD824qXFQ_2', 10] kw={} ret=[{'status': 'need', 'timestamp': 1355881067, 'need': ('username', 'password'), 'type': 'PASSWORD', 'auth_type': 'Dynamic'}]
2012-12-19 12:08:03+1030 [HTTPChannel,655,127.0.0.1] *** API CALL f=xmlrpc_SubmitCreds args=['sess_150_101_xxx_xxx_dynamic_p1727_ycVrcFxgsWKFzzZC_1', {'username': 'administrator', 'password': '[redacted]'}, 'Dynamic', True] kw={} ret=None
2012-12-19 12:08:06+1030 [XMLProxyQueryProtocol,client] DynamicClientBase: AUTH_FAILED: client/dyncli:90,internet/defer:744,python/failure:338,client/dyncli:128,internet/defer:744,python/failure:338,client/asxmlcli:95,internet/defer:746,client/asxmlcli:139 (pyovpn.client.asxmlcli.AuthError)
2012-12-19 12:08:06+1030 [XMLProxyQueryProtocol,client] *** API CALL f=xmlrpc_Poll args=['sess_150_101_xxx_xxx_dynamic_p1727_abg2T9ybD824qXFQ_2', 10] kw={} ret=[{'timestamp': 1355881086, 'info_type': 'pyovpn.client.asxmlcli.AuthError', 'type': 'INFO', 'severity': 'error', 'value': 'AUTH_FAILED'}]
2012-12-19 12:08:06+1030 [XMLProxyQueryProtocol,client] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_vQMedXzOH1tingAl_1', 10] kw={} ret=[{'timestamp': 1355881086, 'state': 'disconnect', 'profile_id': '150_101_xxx_xxx_dynamic_p1727', 'type': 'PROFILE'}]
2012-12-19 12:08:06+1030 [HTTPChannel,660,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_150_101_xxx_xxx_dynamic_p1727_abg2T9ybD824qXFQ_2', 10] kw={} ret=[{'timestamp': 1355881086, 'type': 'DELETE_PENDING'}]
2012-12-19 12:08:06+1030 [HTTPChannel,658,127.0.0.1] *** API CALL f=xmlrpc_EnumProfiles args=[] kw={} ret=[{'hash': '2363b8ffb0d6a4e59d956fbfac9ccfc9f750c89a5dd346249ab97a735289f46a', 'access_allowed': True, 'global': True, 'host': '150.101.xxx.xxx', 'snapshot': {'info': {'timestamp': 1355881086, 'info_type': 'pyovpn.client.asxmlcli.AuthError', 'type': 'INFO', 'severity': 'error', 'value': 'AUTH_FAILED'}, 'delete_pending': True, 'password': {'status': 'need', 'timestamp': 1355881067, 'need': ('username', 'password'), 'type': 'PASSWORD', 'auth_type': 'Dynamic'}}, 'owner': u'Luke', 'org': 'OpenVPN Technologies, Inc.', 'type': ['dynamic'], 'id': '150_101_xxx_xxx_dynamic_p1727', 'name': '150.101.xxx.xxx/Dynamic'}]
2012-12-19 12:08:06+1030 [HTTPChannel,661,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_vQMedXzOH1tingAl_1', 10] kw={} ret=[{'timestamp': 1355881086, 'state': 'connect', 'profile_id': '150_101_xxx_xxx_dynamic_p1727', 'type': 'PROFILE'}]
2012-12-19 12:08:06+1030 [HTTPChannel,661,127.0.0.1] *** API CALL f=xmlrpc_Connect args=[{'profile_id': '150_101_xxx_xxx_dynamic_p1727', 'type': 'dynamic', 'non_interactive': False}, ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT'], {}] kw={} ret='sess_150_101_230_164_dynamic_p1727_1mkMq7W5kLI0Dxr3_1'
2012-12-19 12:08:06+1030 [HTTPChannel,662,127.0.0.1] *** API CALL f=xmlrpc_ConnectActive args=['150_101_xxx__dynamic_p1727', ['STATE', 'PASSWORD', 'ACTIVE', 'CERT_APPROVAL', 'INFO', 'CONNECTED_USER', 'FATAL', 'SCRIPT', 'CHALLENGE', 'DELETE_PENDING', 'NOTIFY', 'RSA_SIGN', 'CONNECT_TIMEOUT'], 'pending'] kw={} ret='sess_150_101_xxx_xxx_dynamic_p1727_wWOe8TpXPb58wxLk_2'
2012-12-19 12:08:06+1030 [HTTPChannel,663,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_150_101_xxx_xxx_dynamic_p1727_wWOe8TpXPb58wxLk_2', 10] kw={} ret=[{'status': 'need', 'timestamp': 1355881086, 'need': ('username', 'password'), 'type': 'PASSWORD', 'auth_type': 'Dynamic'}]
2012-12-19 12:08:13+1030 [HTTPChannel,666,127.0.0.1] *** API CALL f=xmlrpc_Poll args=['sess_TrackActiveProfiles_vQMedXzOH1tingAl_1', 10] kw={} ret=[{'timestamp': 1355881093, 'state': 'disconnect', 'profile_id': '150_101_xxx_xxx_dynamic_p1727', 'type': 'PROFILE'}]
2012-12-19 12:08:13+1030 [HTTPChannel,666,127.0.0.1] *** API CALL f=xmlrpc_DisconnectAll args=[] kw={} ret=[(True, ('150_101_xxx_xxx_dynamic_p1727', None))]
2012-12-19 12:08:13+1030 [HTTPChannel,665,127.0.0.1] OpenVPNClientSet: poll session ID 'sess_150_101_xxx_xxx_dynamic_p1727_wWOe8TpXPb58wxLk_2' not found: xml/authrpc:229,xml/authrpc:251,client/cliapixml:283,client/cliset:324,win32serviceutil:806,capiws:57,internet/base:1166,internet/base:1178,internet/selectreactor:140,python/log:85,python/log:70,python/context:59,python/context:37,internet/selectreactor:146,internet/tcp:462,protocols/basic:246,web/http:1602,web/http:1328,web/http:1542,web/http:1598,web/http:743,web/server:126,web/server:133,xml/authrpc:107,xml/authrpc:158,internet/defer:102,xml/authrpc:251,xml/authrpc:229,xml/authrpc:251,client/cliapixml:283,client/cliset:324,util/error:60,util/error:43 (SESSION_ID)
2012-12-19 12:08:13+1030 [HTTPChannel,667,127.0.0.1] *** API CALL f=xmlrpc_EnumProfiles args=[] kw={} ret=[{'hash': '2363b8ffb0d6a4e59d956fbfac9ccfc9f750c89a5dd346249ab97a735289f46a', 'name': '150.101.xxx.xxx/Dynamic', 'global': True, 'host': '150.101.xxx.xxx', 'owner': u'Luke', 'org': 'OpenVPN Technologies, Inc.', 'type': ['dynamic'], 'id': '150_101_xxx_xxx_dynamic_p1727', 'access_allowed': True}]