OpenVPN problems

[podilarius]

With a latest build and gitsync, I am getting the following error for my OpenVPNs. They are failing to connect.

Jun 6 07:44:55 openvpn[49428]: Use –help for more information.
Jun 6 07:44:55 openvpn[49428]: Options error: –client-connect requires --mode server

I don't know if it is related to the last couple of commits:
Import OpenVPN cisco style radius attributes applying policy to logge...

I found an old post from 2010 for version 2.0 Dev builds, but doing what it suggest to get it going is not working.  Please let me know if there is something I can do to correct the issue.

[Cino]

i can't connect with my client either,

from the client side:

Wed Jun 06 12:19:00 2012 AUTH: Received control message: AUTH_FAILED
Wed Jun 06 12:19:00 2012 SIGTERM[soft,auth-failure] received, process exiting

both my roadwarrior and my p2p wont connect

[mikesamo]

same issue here.

[jimp]

What shows up in the actual openvpn server config in /var/etc/openvpn?

And are these clients or servers in each of these cases?

[mikesamo]

Client for me

getting same message

Jun 6 07:44:55  openvpn[49428]: Use –help for more information.
Jun 6 07:44:55  openvpn[49428]: Options error: –client-connect requires --mode server

[podilarius]

It is a client for me as well.

Here is the config on client1.conf …. client2 is exactly the same only with different IPs.

dev ovpnc1
dev-type tun
tun-ipv6
dev-node /dev/tun1
writepid /var/run/openvpn_client1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-256-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local xx.xx.xx.xx
lport 0
management /var/etc/openvpn/client1.sock unix
remote yy.yy.yy.yy 1194
ifconfig zz.zz.zz.zz zz.zz.zz.aa
route cc.cc.cc.cc 255.255.255.0
secret /var/etc/openvpn/client1.secret 
comp-lzo

[mikesamo]

dev ovpnc2
dev-type tun
tun-ipv6
dev-node /dev/tun2
writepid /var/run/openvpn_client2.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp
cipher AES-128-CBC
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local 4.3.2.1
engine padlock
tls-client
client
lport 0
management /var/etc/openvpn/client2.sock unix
remote 1.2.3.4 1234
ca /var/etc/openvpn/client2.ca
cert /var/etc/openvpn/client2.cert
key /var/etc/openvpn/client2.key
tls-auth /var/etc/openvpn/client2.tls-auth 1
comp-lzo
resolv-retry infinite
verb 5
tun-mtu 1500
keysize 128
persist-key
fragment 1389
mssfix 1389

[mikesamo]

Ok I got it with comment theses 2 lines from the conf files

#client-connect /usr/local/sbin/openvpn.attributes.sh
#client-disconnect /usr/local/sbin/openvpn.attributes.sh

[mikesamo]

theses line are only for server config.

[jimp]

ok that's probably from the radius acl import that happened yesterday.

[podilarius]

Commented the lines out myself and the VPN connects. Was there a commit that put those in there?

[podilarius]

commit 1492e02 does this.

[mikesamo]

https://github.com/bsdperimeter/pfsense/commit/5b4ee05e58777606c988c099139adb25633b50c3

[jimp]

Fix commited, gitsync and it should be ok

[mikesamo]

seem to work after reboot thx!

[podilarius]

Thanks for fixing that. :-D

[Cino]

Thanks Jim!