Page 1 of 2
no access after EULA
Posted: Mon Nov 01, 2021 8:30 am
by magusykt
Hi!
I've installed openvpn-as on my arm server. After that I've got access for loginpage at
https://myserverip:943/admin/ and used the credentials openvpn/mypassword to reach the adminpage. I can see the EULA, but after click agree nothing happens, it redirects back to loginpage.
I tried to reinstall as, force-init, reinstall whole os, but nothing helped.
what I'm doing wrong?
Re: no access after EULA
Posted: Mon Nov 01, 2021 11:14 am
by openvpn_inc
Hello magusykt,
Usually when that happens this is just a symptom of a larger problem occurring under the hood. Check /var/log/openvpnas.log for error messages that could point out what the problem is. Note that only Ubuntu 20.04 LTS is supported for ARM at this time. If you use any other OS, that will not work.
If you need further assistance, contact
https://openvpn.net/support
Kind regards,
Johan
Re: no access after EULA
Posted: Fri Nov 05, 2021 1:51 am
by rufftradenh
I've also been struggling with this issue all day. I've tried the following distributions, all with the same results. Once I accept the EULA I'm immediately sent back to the login screen.
Ubuntu Desktop and Server 20.04 LTS
Ubuntu Desktop and Server 18.04 LTS
Debian 10 amd64
I've noticed the following javascript errors in the Firefox developers tool console when the EULA is accessed:
qrcode.js:1 Uncaught SyntaxError: Unexpected token '<'
wufoo.js:1 Uncaught SyntaxError: Unexpected token '<'
saveAs.js:1 Uncaught SyntaxError: Unexpected token '<'
jquery.min.js:1 Uncaught SyntaxError: Unexpected token '<'
popper.min.js:1 Uncaught SyntaxError: Unexpected token '<'
bootstrap.min.js:1 Uncaught SyntaxError: Unexpected token '<'
bootstrap-toggle.min.js:1 Uncaught SyntaxError: Unexpected token '<'
bootstrap-select.min.js:1 Uncaught SyntaxError: Unexpected token '<'
tooltips.js:1 Uncaught SyntaxError: Unexpected token '<'
jquery.dataTables.js:1 Uncaught SyntaxError: Unexpected token '<'
dataTables.bootstrap4.min.js:1 Uncaught SyntaxError: Unexpected token '<'
status_overview:30 Uncaught ReferenceError: $ is not defined
at status_overview:30
(anonymous) @ status_overview:30
status_overview:55 Uncaught ReferenceError: $ is not defined
at status_overview:55
I don't know if this points to the issue, but I've tried various avenues of debugging and this is the only obvious issue.
Kindly,
Eddie
Re: no access after EULA
Posted: Fri Nov 05, 2021 10:31 am
by openvpn_inc
Hello Eddie,
That sounds pretty strange to me. We release and test on Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Debian 10. Latest version most definitely works on that. I would again like to suggest that /var/log/openvpnas.log is checked and that you contact
https://openvpn.net/support to further investigate what's causing the issue. It would help us for example to see log files.
Kind regards,
Johan
Re: no access after EULA
Posted: Tue Dec 21, 2021 10:52 am
by wgen
John,
I've also tried setting up on Ubuntu 20, 18, Debian 11, 10 and Red Hat 8 and found the same issue as the OP. You have an issue with your Admin authentication as the TwistedWeb Http service after a successful login is currently redirecting every request to /admin which means assets aren't being loaded and the EULA page not functioning correctly.
Re: no access after EULA
Posted: Sun Jan 02, 2022 11:15 pm
by openvpn_inc
Hello wgen,
I suggest you send log file and configuration information to our support ticket system so that we can find out the actual root cause of the symptom you're seeing.
Kind regards,
Johan
Re: no access after EULA
Posted: Tue Jan 04, 2022 6:09 pm
by openvpn_inc
Hi all,
The one user who opened a support ticket was trying to use Docker container. We do not support that. We do not feel that the added complexity improves your security. Use a
virtual appliance if you wish.
Are others in this thread also trying to use Docker or other containers?
regards, rob0
Re: no access after EULA
Posted: Tue Apr 19, 2022 7:35 pm
by nullmike
I have this same issue, clean install in Ubuntu 20.04 LTS. I checked /var/log/openvpn-as.log and I see the following error repeatedly:
Code: Select all
"openvpn_4": [
2022-04-19T12:33:20-0600 [stdout#info] [
2022-04-19T12:33:20-0600 [stdout#info] "error",
2022-04-19T12:33:20-0600 [stdout#info] "service failed to start due to unresolved dependencies: {'iptables_openvpn', 'user', 'iptables_live'}"
2022-04-19T12:33:20-0600 [stdout#info] ]
2022-04-19T12:33:20-0600 [stdout#info] ],
I followed the instructions on:
https://openvpn.net/vpn-software-packag ... repository
Re: no access after EULA
Posted: Thu Apr 21, 2022 8:42 am
by openvpn_inc
Hello nullmike,
As is usual with this problem of not being able to get past the EULA, it is caused by another problem underwater. In this case there appears to be a problem with iptables or implementing iptables rules. What exactly is the platform that you deployed this on? Is it some kind of docker or other similar, shall we say, "less capable virtualization" solutions? If so that might be the problem. It would be helpful to know what you tried to deploy this on.
For your information, we QA test Access Server on all the platforms we release it for, and it doesn't get released if it doesn't install and operate out of the box on the supported platforms. But some 'virtualization' or 'isolation' solutions to separate applications out from the main host OS can be too limited. If you use KVM, AWS, GCP, ESXi, Fusion, Parallels, HyperV, VirtualBox, etcetera, those are all fine to use. But docker may need additional permissions to run and possibly in OpenVZ as well there might be issues if the TUN adapter is not available.
If we know what platform exactly you're trying to run it on, that might help us to determine if that's possible or not.
Kind regards,
Johan
Re: no access after EULA
Posted: Fri Apr 29, 2022 11:29 pm
by nullmike
Hi Johan,
I am using Ubuntu 20.04.4 LTS. It is a VM running in proxmox. I'm not using docker. I had followed all the instructions for adding packages, I do have iptables installed.
I see lots of these errors during startup in the log
Code: Select all
2022-04-29T17:16:12-0600 [stdout#info] "iptables_live": "off. Error: [Error: service failed to start due to unresolved dependencies: {'iptables_openvpn'}.]",
2022-04-29T17:16:12-0600 [stdout#info] "iptables_openvpn": "off. Error: [Error: Service deferred error: PortPool: port pool depleted, cannot satisfy request for 'openvpn_74': internet/defer:654,sagent/ipts:159,sagent/iptvpn:178,sagent/vpnconfig:294,sagent/vpnconfig:231,util/portpool:58,internet/process:934,internet/process:946,internet/process:311,internet/_baseprocess:52,internet/process:948,internet/_baseprocess:64,svc/pp:133,svc/svcnotify:42,internet/defer:460,internet/defer:568,internet/defer:654,util/defer:10,internet/defer:460,internet/defer:568,internet/defer:654,internet/defer:1116,internet/defer:460,internet/defer:568,internet/defer:654,svc/svc:675,sagent/ipts:210,sagent/ipts:150,internet/defer:321,internet/defer:311,internet/defer:654,sagent/ipts:159,sagent/iptvpn:178,sagent/vpnconfig:294,sagent/vpnconfig:231,util/portpool:58,util/error:105,util/error:86.]",
2022-04-29T17:16:12-0600 [stdout#info] "iptables_web": "started",
2022-04-29T17:16:12-0600 [stdout#info] "log": "started",
2022-04-29T17:16:12-0600 [stdout#info] "openvpn_0": "off. Error: [Error: service failed to start due to unresolved dependencies: {'iptables_live', 'iptables_openvpn', 'user'}.]",
Re: no access after EULA
Posted: Sun May 01, 2022 5:13 am
by nullmike
I've tried with a fresh debian 11 install, I see the same errors. I'm baffled as these are fresh VMs and I'm following the instructions on openvpn.net carefully.
Re: no access after EULA
Posted: Wed May 04, 2022 12:28 pm
by openvpn_inc
nullmike wrote: ↑Fri Apr 29, 2022 11:29 pm
I am using Ubuntu 20.04.4 LTS. It is a VM running in proxmox. I'm not using docker. I had followed all the instructions for adding packages, I do have iptables installed.
I see lots of these errors during startup in the log
Code: Select all
2022-04-29T17:16:12-0600 [stdout#info] "iptables_live": "off. Error: [Error: service failed to start due to unresolved dependencies: {'iptables_openvpn'}.]",
2022-04-29T17:16:12-0600 [stdout#info] "iptables_openvpn": "off. Error: [Error: Service deferred error: PortPool: port pool depleted, cannot satisfy request for 'openvpn_74': internet/defer:654,sagent/ipts:159,sagent/iptvpn:178,sagent/vpnconfig:294,sagent/vpnconfig:231,util/portpool:58,internet/process:934,internet/process:946,internet/process:311,internet/_baseprocess:52,internet/process:948,internet/_baseprocess:64,svc/pp:133,svc/svcnotify:42,internet/defer:460,internet/defer:568,internet/defer:654,util/defer:10,internet/defer:460,internet/defer:568,internet/defer:654,internet/defer:1116,internet/defer:460,internet/defer:568,internet/defer:654,svc/svc:675,sagent/ipts:210,sagent/ipts:150,internet/defer:321,internet/defer:311,internet/defer:654,sagent/ipts:159,sagent/iptvpn:178,sagent/vpnconfig:294,sagent/vpnconfig:231,util/portpool:58,util/error:105,util/error:86.]",
2022-04-29T17:16:12-0600 [stdout#info] "iptables_web": "started",
2022-04-29T17:16:12-0600 [stdout#info] "log": "started",
2022-04-29T17:16:12-0600 [stdout#info] "openvpn_0": "off. Error: [Error: service failed to start due to unresolved dependencies: {'iptables_live', 'iptables_openvpn', 'user'}.]",
Hi again Mike,
"
openvpn_74" would be the 75th VPN daemon. There should be exactly one daemon per CPU core per protocol. So a 4-core VM would have 8, numbered 0 through 7. 75 or more daemons might mean that Access Server failed to determine how many CPU cores you have. Please show me what this command says:
Of course that won't work if Access Server fails to start.
How many CPU cores did you allocate to this VM? This could be a bug/issue with proxmox.
regards, rob0
Re: no access after EULA
Posted: Fri May 06, 2022 11:40 pm
by nullmike
/usr/local/openvpn_as/scripts/sacli GetNCores
ERROR: [Errno 2] No such file or directory: 'out/tmp-GBm0daDu9JO0.tmp': util/options:525,sagent/sacli:526,util/file:165,util/file:159,util/file:151,util/simplefile:9 (FileNotFoundError)
I had assigned 40 cores, that's how many cores the server has (20 cores, 40 threads). I do believe this issue is related to hosting in proxmox. I may try reinstalling in a VM with only 4 cores and see what happens, as well as install directly on hardware and see what happens.
Re: no access after EULA
Posted: Sat May 07, 2022 3:06 pm
by openvpn_inc
Hi Mike,
Good. Access Server always works best when the number of cores is a power of 2. That's because the VPN network and group address pools are assigned as CIDR netblocks, and they will be divided among the individual daemon processes, each bound to a specific CPU core. With 40 cores you get 80 daemons (one per core pre protocol), and to convert that to a power of 2, your networks will be cut into 128 pieces.
regards, rob0
Re: no access after EULA
Posted: Wed Dec 21, 2022 1:56 am
by rockgeo
I am a new user trying out openvpn on the Oracle cloud, basically following this info:
https://blogs.oracle.com/developers/pos ... acle-cloud .
I am also 'looping' after accepting the EULA, I get the admin signon screen, sign in, get the eula screen, sometimes with a 'box' around all the text, sometimes not, hit the accept button, and the admin signon screen is presented again. This happens if I'm using firefox on a linux (ubuntu) laptop, or firefox on an android phone.
I looked in openvpnas.log, no error messages, lots of web out messages but no errors.
I used all/as many of the default options for the define of the oracle vpn instance when creating it as I could.
I have ingress rules built for ports 22,943,443,1194.
I do not believe proxmox or docker are involved.
Any help would be appreciated.
Thanks
Re: no access after EULA
Posted: Fri Dec 23, 2022 1:49 pm
by openvpn_inc
Hello rockgeo,
Since you don't see anything obviously wrong, and this symptom of not being able to get past EULA means there is still definitely something wrong on a deeper level, you should contact our support department via
https://openvpn.net/support/ and do some basic troubleshooting and send a copy of the logs so we can analyze it here too. It's probably something simple but we'll have to take a closer look.
Kind regards,
Johan
Re: no access after EULA
Posted: Fri Dec 23, 2022 8:18 pm
by rockgeo
ok, will do, thanks
Re: no access after EULA
Posted: Sat Dec 24, 2022 7:43 pm
by rockgeo
soooo, I figured out why I'm having an issue, its because I have Tmobile home internet. I could not get past the EULA acceptance when setting up openvpn in the oracle cloud. I then set it up on an AWS cloud, but still had a problem not getting past EULA acceptance. I went to a neighbors house that does not have tmobile internet, and the EULA acceptance response was processed just fine. However, back at my house, now that I'm on the access server status page, it says the server is on, but if I hit the VPN settings link, I get the signon page again. Looks like I'm out of luck setting up openvpn unless I use someone elses network.... info for anyone else with tmobile....
Re: no access after EULA
Posted: Sun Dec 25, 2022 3:53 pm
by openvpn_inc
Hi rockgeo,
Honestly, don't know what to make of that. What kind of magic could they be doing to your Internet connection to break things like this?
Kind regards,
Johan
Re: no access after EULA
Posted: Mon Dec 26, 2022 5:35 pm
by rockgeo
the last on this subject, I can see that the web page, both for the admin signon page, and then if I can get to it the status page, are not rendering correctly, sometimes icons are not loaded, sometimes the userid/password fields are in different locations...
I did discover that if I sign onto a vpn 1st, and then access the openvpn admin signon screen, and get to the status page, the pages are rendering correctly and I will be able to finish my configuration.
as Johnny Carson would say, weird wild stuff