Page 1 of 1

auth-user-pass-verify fails

Posted: Sat Aug 01, 2015 10:56 pm
by noobzilla89
hey guys,
i have a problem with my openvpn config. i wrote an sh-script for user-pass-verify which works stand-alone. but im always getting the error "WARNING: Failed running command (--auth-user-pass-verify): could not execute external program" in the log.
I googled a lot but have still no solution for it.

Here is my server.conf:
port 11950
proto udp
dev tap0
ca ca-homeserver.crt
cert homeserver.crt
key homeserver.key
dh dh4096.pem
server-bridge 10.5.9.1 255.255.255.0 10.5.9.201 10.5.9.250
push "route 10.5.9.0 255.255.255.0"
user root
reneg-sec 68400
tls-auth ta.key
username-as-common-name
auth-user-pass-verify /etc/openvpn/script/login.sh via-env
client-to-client
keepalive 10 120
comp-lzo
max-clients 50
persist-key
persist-tun
script-security 3 system
status homeserver.log
log-append openvpn.log
verb 3
And the login.sh-script:
username=$1
password=$2

passwordhash=$(mysql -h'localhost' -P'3306' -u'dbuser' -p'dbpass' dbname -sN -e "select right((select password from table where uid = '$username'), 60)")

returnval=$(php /etc/openvpn/script/newhashtest.php "$password" "$passwordhash")

[ $returnval ] && echo "auth for user '$username' ok" && exit 0 || echo "auth failed"; exit 1
i think there are some problems with file permissions, but i tested "chmod 777 login.sh" and it had no effect. always getting the could-not-execute error...
i had the same server.conf running on my server before i formatted it with debian 8 jessie last week to give everything a new start.

i hope someone can help me fixing this problem. thanks a lot!

Re: auth-user-pass-verify fails

Posted: Tue Dec 08, 2015 11:17 pm
by florit
:shock: Strange error

But you can renew the ca.crt Server.crt Server.key Client.crt Client.key make a p12 Client and a rsa key from Client.key

Just renew all the certs will help ...