OPENVPN problem- users not found

Support
,
1

NethServer Version: 7.9.2009 on RaspberryPI
Module: OPENVPN

Hello,

I wanted to start to use the Roadwarrior VPN. I configured everything like described, but for any user I made a roadwarrior entry I am getting the following error in the logfile. I used the option type “system-user”. The users are existing and can access e.g. their email without prioblems:

…
Account pre.name not present in vpn db
Sat Mar 4 14:36:09 2023 aa.bb.cc.dd:9137 WARNING: Failed running command (–auth-user-pass-verify): external program exited with error status: 1
Sat Mar 4 14:36:09 2023 aa.bb.cc.dd:9137 TLS Auth Error: Auth Username/Password verification failed for peer
…

Do I need to register the users in some separate VPN USER file or so? I did not read that …

So, what is wrong and should be corrected - I am lost here, with other server distros e.g. ZENTYAL it did work without problems …

Greeting,
Jürgen

2

Hi @jzick

Here it mostly works out of the box. Usually the ost issues come from people mixing their own installs (No fw adaption!)

My 2 cents
Andy

3

Hello,

well, unfortunately nothing like that. It was/is running a clean install on the RaspberryPI and all other stuff is running perfect - except the VPN-tunnel …

4

Do you have an account provider?
LDAP or AD?

If you’re on the cloud / VPS, you may need this…
https://wiki.nethserver.org/doku.php?id=virtual_network_interface&s[]=dummy

My 2 cents
Andy

1 Like
5

I have a local AD configured …as I said, I am running NETHSERVER on a RaspberryPI …
More or less I followed

6

What Auth Mode are you using.

From memory, the user/password options can’t be used with system users. Although it was a verrrrrrrry long time ago when I set up my Roadwarrior configuration

Cheers.

7

Hello,

it is exactly that what I enabled, as it is offered from the VPN manager…So, then I should use VPN only and create different system users?

Greetz…

8

Hello eveybody,

after digging deaper in I found my error caused by misinterpreting ‘user’.
In my openvpn clients I really just used the user aka joe.smith, but it appeared that the user in the clients must be the full email adress, aka joe.smth@sub.dom.tld …

What a stupid misunderstanding :-)))

Now, all my roadwarriors can connect without problems…

Anyway, thanks to everybody for the help…

1 Like