Client OS that crashes won't be allowed to reconnect to serv

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
stren
OpenVpn Newbie
Posts: 1
Joined: Fri May 06, 2011 8:39 pm

Client OS that crashes won't be allowed to reconnect to serv

Post by stren » Fri May 06, 2011 8:51 pm

Hi, I'm having a problem with my vpn setup. As I currently can't login until I reboot the server I'll have to wait to post the server configuration.

At work we have an openvpn server running under esxi, it authorizes against the active directory running on win 2008 r2

Essentially if my client OS crashes (or if I do a hard termination of the openvpn process (i.e. kill -9)) I can no longer reconnect to the vpn. Others however can access it just fine. To fix the problem I simply start and stop the server from the web gui, or restart the server itself.

The openvpn server logs show this error, even though there should be plenty of assignable IP's. For example at the time there was only one connected user, and the opevpn setup states that the dynamic IP pool has over 20 IP's available for it.

DEFAULT_USER: IP address pool depleted: internet/defer:181,internet/defer:323,internet/defer:284,internet/defer:280,internet/defer:323,internet/defer:766,internet/defer:746,omi/auth:422,sagent/usersvc:744,sagent/usersvc:903,sagent/usersvc:390,sagent/usersvc:192,sagent/usersvc:151,sagent/usersvc:132,util/error:52,util/error:32 (VPN_AUTH)

My client log just shows:

Fri May 6 13:20:51 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri May 6 13:20:51 2011 Control Channel Authentication: tls-auth using INLINE static key file
Fri May 6 13:20:51 2011 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:51 2011 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:51 2011 LZO compression initialized
Fri May 6 13:20:51 2011 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Fri May 6 13:20:51 2011 Socket Buffers: R=[129024->200000] S=[129024->200000]
Fri May 6 13:20:51 2011 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Fri May 6 13:20:51 2011 Local Options hash (VER=V4): '504e774e'
Fri May 6 13:20:51 2011 Expected Remote Options hash (VER=V4): '14168603'
Fri May 6 13:20:51 2011 UDPv4 link local: [undef]
Fri May 6 13:20:51 2011 UDPv4 link remote: XXX.XXX.XXX.XXX:1195
Fri May 6 13:20:51 2011 TLS: Initial packet from XXX.XXX.XXX.XX:1195, sid=fcaa2532 ad75a5e3
Fri May 6 13:20:51 2011 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri May 6 13:20:51 2011 VERIFY OK: depth=1, /CN=OpenVPN_CA
Fri May 6 13:20:51 2011 VERIFY OK: nsCertType=SERVER
Fri May 6 13:20:51 2011 VERIFY OK: depth=0, /CN=OpenVPN_Server
Fri May 6 13:20:52 2011 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 6 13:20:52 2011 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:52 2011 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 6 13:20:52 2011 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 6 13:20:52 2011 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 6 13:20:52 2011 [OpenVPN_Server] Peer Connection Initiated with XXX.XXX.XXX.XXX:1195
Fri May 6 13:20:54 2011 SENT CONTROL [OpenVPN_Server]: 'PUSH_REQUEST' (status=1)
Fri May 6 13:20:54 2011 AUTH: Received AUTH_FAILED control message
Fri May 6 13:20:54 2011 TCP/UDP: Closing socket
Fri May 6 13:20:54 2011 SIGUSR1[soft,auth-failure] received, process restarting

Are there some settings I can change to fix this?

Thanks in advance!

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: Client OS that crashes won't be allowed to reconnect to

Post by janjust » Fri May 06, 2011 10:03 pm

this message does not seem to come from the community edition of OpenVPN, but rather from the Open Access version; this forum does not answer questions about Open Access.
For Open Access support contact OpenVPN Inc tech support.

Post Reply