LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   OpenVPN-connection with Endian always failing (https://www.linuxquestions.org/questions/linux-newbie-8/openvpn-connection-with-endian-always-failing-768657/)

jonaskellens 11-12-2009 08:37 AM

OpenVPN-connection with Endian always failing
 
When trying to connect through openVPN with an Endian-firewall, using NetworkManager, a username, password & CA, connection succeeds and after 1 minute fails...

The log :
Code:

Nov 12 15:29:19 jonas nm-openvpn[6118]: Initialization Sequence Completed
Nov 12 15:29:20 jonas NetworkManager: <info>  VPN connection 'VPN Endian' (IP Config Get) complete.
Nov 12 15:29:20 jonas NetworkManager: <info>  Policy set 'VPN Endian' (tun0) as default for routing and DNS.
Nov 12 15:29:20 jonas NetworkManager: <info>  VPN plugin state changed: 4
Nov 12 15:29:27 jonas nm-openvpn[6118]: write to TUN/TAP : Invalid argument (code=22)
Nov 12 15:29:35 jonas nm-openvpn[6118]: write to TUN/TAP : Invalid argument (code=22)
Nov 12 15:29:43 jonas nm-openvpn[6118]: write to TUN/TAP : Invalid argument (code=22)
Nov 12 15:29:51 jonas nm-openvpn[6118]: write to TUN/TAP : Invalid argument (code=22)
Nov 12 15:29:59 jonas nm-openvpn[6118]: write to TUN/TAP : Invalid argument (code=22)
Nov 12 15:30:07 jonas nm-openvpn[6118]: write to TUN/TAP : Invalid argument (code=22)
Nov 12 15:30:15 jonas nm-openvpn[6118]: write to TUN/TAP : Invalid argument (code=22)
Nov 12 15:30:45 jonas nm-openvpn[6118]: [127.0.0.1] Inactivity timeout (--ping-restart), restarting
Nov 12 15:30:45 jonas nm-openvpn[6118]: SIGUSR1[soft,ping-restart] received, process restarting
Nov 12 15:30:47 jonas nm-openvpn[6118]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Nov 12 15:30:47 jonas nm-openvpn[6118]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov 12 15:30:47 jonas nm-openvpn[6118]: Re-using SSL/TLS context
Nov 12 15:30:52 jonas nm-openvpn[6118]: UDPv4 link local: [undef]
Nov 12 15:30:52 jonas nm-openvpn[6118]: UDPv4 link remote: public_ip:1194
Nov 12 15:30:52 jonas nm-openvpn[6118]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Nov 12 15:30:53 jonas nm-openvpn[6118]: WARNING: 'dev-type' is used inconsistently, local='dev-type tun', remote='dev-type tap'
Nov 12 15:30:53 jonas nm-openvpn[6118]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1541', remote='link-mtu 1574'
Nov 12 15:30:53 jonas nm-openvpn[6118]: WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532'
Nov 12 15:30:53 jonas nm-openvpn[6118]: WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Nov 12 15:30:53 jonas nm-openvpn[6118]: [127.0.0.1] Peer Connection Initiated with public_ip:1194
Nov 12 15:30:54 jonas nm-openvpn[6118]: Preserving previous TUN/TAP instance: tun0
Nov 12 15:30:54 jonas nm-openvpn[6118]: /usr/libexec/nm-openvpn-service-openvpn-helper tun0 1500 1541 192.168.1.190 255.255.255.0 restart
Nov 12 15:30:54 jonas NetworkManager: <info>  VPN plugin failed: 2
Nov 12 15:30:54 jonas nm-openvpn[6118]: script failed: external program exited with error status: 1
Nov 12 15:30:54 jonas nm-openvpn[6118]: Exiting
Nov 12 15:30:54 jonas NetworkManager: <info>  VPN plugin failed: 1
Nov 12 15:30:54 jonas NetworkManager: <info>  VPN plugin state changed: 6
Nov 12 15:30:54 jonas NetworkManager: <info>  VPN plugin state change reason: 0
Nov 12 15:30:54 jonas NetworkManager: <WARN>  connection_state_changed(): Could not process the request because no VPN connection was active.
Nov 12 15:30:54 jonas NetworkManager: nm_system_device_flush_ip4_routes_with_iface: assertion `iface_idx >= 0' failed
Nov 12 15:30:54 jonas NetworkManager: nm_system_device_flush_ip4_addresses_with_iface: assertion `iface_idx >= 0' failed

Why is it disconnecting ?

jmc1987 11-13-2009 06:44 PM

First off can you connect with out your firewall or SELinux Running?

jonaskellens 11-16-2009 02:59 AM

Quote:

Originally Posted by jmc1987 (Post 3756385)
First off can you connect with out your firewall or SELinux Running?

On my client SElinux is permissive and firewall is disabled.

I can connect as follow :
Code:

[jonas@jonas ~]$ su -c 'openvpn --client --pull --comp-lzo --nobind --dev tap0 --ca /home/jonas/Desktop/endian.pem --auth-user-pass --remote XX.21.XX.XX'
Works fine.

What's wrong with NetworkManager then ??
I need root to create the tap0-device.


All times are GMT -5. The time now is 05:42 AM.