6

How get it resolved? I am trying to start the openVPN server so that I can login remotely using username: demo and password: demo, but openVPN server is failing to start.

What am I doing wrong? How can I fix it?

$ cat /etc/openvpn/server.conf
proto tcp
port 1194
dev tap
#do-mtu 1492
#fragment 1300
dev-node tap
keepalive 10 120 
max-clients 10

# Annoying files 
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem

# Owner
user nobody
group nogroup
server 10.44.77.0 255.255.255.0

persist-key
persist-tun
status openvpn-status.log
verb 6

# Router
client-to-client
push "dhcp-option DOMAIN xxxxx" # Server public IP or domain name
push "dhcp-option DNS 208.67.222.222" # Primary dns server (opendns shown)
push "dhcp-option DNS 208.67.220.220" # Secondary dns server (opendns shown)
push "redirect-gateway" # Directs all traffic through your VPN
#log-append /var/log/openvpn
comp-lzo

# Username/password
auth-user-pass-verify /etc/openvpn/auth.sh via-env
client-cert-not-required
username-as-common-name
management-client-auth
management 8.8.8.8 1194 pass.txt

$ cat auth.sh
#/bin/sh
Allowed_user = "demo"
ALLOWED_PASS = "demo"

if ["$username" == "$Allowed_user"] && ["$password" == "$ALLOWED_PASS"]
 then exit 0
fi

exit 1

$ cat pass.txt  #chmod 600 pass.txt else it gives warning
demo demo; 

Output:

$ openvpn /etc/openvpn/server.conf 
Thu Aug 29 12:02:46 2013 us=863944 Current Parameter Settings:
Thu Aug 29 12:02:46 2013 us=864047   config = '/etc/openvpn/server.conf'
Thu Aug 29 12:02:46 2013 us=864075   mode = 1
Thu Aug 29 12:02:46 2013 us=864097   persist_config = DISABLED
Thu Aug 29 12:02:46 2013 us=864119   persist_mode = 1
Thu Aug 29 12:02:46 2013 us=864164   show_ciphers = DISABLED
Thu Aug 29 12:02:46 2013 us=864185   show_digests = DISABLED
Thu Aug 29 12:02:46 2013 us=864216   show_engines = DISABLED
Thu Aug 29 12:02:46 2013 us=864237   genkey = DISABLED
Thu Aug 29 12:02:46 2013 us=864259   key_pass_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864290   show_tls_ciphers = DISABLED
Thu Aug 29 12:02:46 2013 us=864323 Connection profiles [default]:
Thu Aug 29 12:02:46 2013 us=864346   proto = tcp-server
Thu Aug 29 12:02:46 2013 us=864366   local = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864398   local_port = 1194
Thu Aug 29 12:02:46 2013 us=864419   remote = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864451   remote_port = 1194
Thu Aug 29 12:02:46 2013 us=864471   remote_float = DISABLED
Thu Aug 29 12:02:46 2013 us=864492   bind_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=864512   bind_local = ENABLED
Thu Aug 29 12:02:46 2013 us=864537   connect_retry_seconds = 5
Thu Aug 29 12:02:46 2013 us=864557   connect_timeout = 10
Thu Aug 29 12:02:46 2013 us=864581   connect_retry_max = 0
Thu Aug 29 12:02:46 2013 us=864604   socks_proxy_server = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864624   socks_proxy_port = 0
Thu Aug 29 12:02:46 2013 us=864647   socks_proxy_retry = DISABLED
Thu Aug 29 12:02:46 2013 us=864670 Connection profiles END
Thu Aug 29 12:02:46 2013 us=864695   remote_random = DISABLED
Thu Aug 29 12:02:46 2013 us=864719   ipchange = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864742   dev = 'tap'
Thu Aug 29 12:02:46 2013 us=864762   dev_type = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864785   dev_node = 'tap'
Thu Aug 29 12:02:46 2013 us=864809   lladdr = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864829   topology = 1
Thu Aug 29 12:02:46 2013 us=864850   tun_ipv6 = DISABLED
Thu Aug 29 12:02:46 2013 us=864878   ifconfig_local = '10.44.77.1'
Thu Aug 29 12:02:46 2013 us=864902   ifconfig_remote_netmask = '255.255.255.0'
Thu Aug 29 12:02:46 2013 us=864925   ifconfig_noexec = DISABLED
Thu Aug 29 12:02:46 2013 us=864946   ifconfig_nowarn = DISABLED
Thu Aug 29 12:02:46 2013 us=864966   ifconfig_ipv6_local = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864990   ifconfig_ipv6_netbits = 0
Thu Aug 29 12:02:46 2013 us=865013   ifconfig_ipv6_remote = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865036   shaper = 0
Thu Aug 29 12:02:46 2013 us=865057   tun_mtu = 1500
Thu Aug 29 12:02:46 2013 us=865077   tun_mtu_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=865106   link_mtu = 1500
Thu Aug 29 12:02:46 2013 us=865129   link_mtu_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=865152   tun_mtu_extra = 32
Thu Aug 29 12:02:46 2013 us=865172   tun_mtu_extra_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=865193   fragment = 0
Thu Aug 29 12:02:46 2013 us=865221   mtu_discover_type = -1
Thu Aug 29 12:02:46 2013 us=865244   mtu_test = 0
Thu Aug 29 12:02:46 2013 us=865266   mlock = DISABLED
Thu Aug 29 12:02:46 2013 us=865289   keepalive_ping = 10
Thu Aug 29 12:02:46 2013 us=865309   keepalive_timeout = 120
Thu Aug 29 12:02:46 2013 us=865330   inactivity_timeout = 0
Thu Aug 29 12:02:46 2013 us=865350   ping_send_timeout = 10
Thu Aug 29 12:02:46 2013 us=865378   ping_rec_timeout = 240
Thu Aug 29 12:02:46 2013 us=865401   ping_rec_timeout_action = 2
Thu Aug 29 12:02:46 2013 us=865422   ping_timer_remote = DISABLED
Thu Aug 29 12:02:46 2013 us=865442   remap_sigusr1 = 0
Thu Aug 29 12:02:46 2013 us=865470   explicit_exit_notification = 0
Thu Aug 29 12:02:46 2013 us=865493   persist_tun = ENABLED
Thu Aug 29 12:02:46 2013 us=865513   persist_local_ip = DISABLED
Thu Aug 29 12:02:46 2013 us=865535   persist_remote_ip = DISABLED
Thu Aug 29 12:02:46 2013 us=865558   persist_key = ENABLED
Thu Aug 29 12:02:46 2013 us=865584   mssfix = 1450
Thu Aug 29 12:02:46 2013 us=865609   passtos = DISABLED
Thu Aug 29 12:02:46 2013 us=865632   resolve_retry_seconds = 1000000000
Thu Aug 29 12:02:46 2013 us=865653   username = 'nobody'
Thu Aug 29 12:02:46 2013 us=865673   groupname = 'nogroup'
Thu Aug 29 12:02:46 2013 us=865692   chroot_dir = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865711   cd_dir = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865731   writepid = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865750   up_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865770   down_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865789   down_pre = DISABLED
Thu Aug 29 12:02:46 2013 us=865809   up_restart = DISABLED
Thu Aug 29 12:02:46 2013 us=865828   up_delay = DISABLED
Thu Aug 29 12:02:46 2013 us=865848   daemon = DISABLED
Thu Aug 29 12:02:46 2013 us=865867   inetd = 0
Thu Aug 29 12:02:46 2013 us=865887   log = DISABLED
Thu Aug 29 12:02:46 2013 us=865906   suppress_timestamps = DISABLED
Thu Aug 29 12:02:46 2013 us=865926   nice = 0
Thu Aug 29 12:02:46 2013 us=865946   verbosity = 6
Thu Aug 29 12:02:46 2013 us=865965   mute = 0
Thu Aug 29 12:02:46 2013 us=865985   gremlin = 0
Thu Aug 29 12:02:46 2013 us=866004   status_file = 'openvpn-status.log'
Thu Aug 29 12:02:46 2013 us=866024   status_file_version = 1
Thu Aug 29 12:02:46 2013 us=866044   status_file_update_freq = 60
Thu Aug 29 12:02:46 2013 us=866064   occ = ENABLED
Thu Aug 29 12:02:46 2013 us=866083   rcvbuf = 65536
Thu Aug 29 12:02:46 2013 us=866103   sndbuf = 65536
Thu Aug 29 12:02:46 2013 us=866122   sockflags = 0
Thu Aug 29 12:02:46 2013 us=866142   fast_io = DISABLED
Thu Aug 29 12:02:46 2013 us=866161   lzo = 7
Thu Aug 29 12:02:46 2013 us=866181   route_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866201   route_default_gateway = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866221   route_default_metric = 0
Thu Aug 29 12:02:46 2013 us=866241   route_noexec = DISABLED
Thu Aug 29 12:02:46 2013 us=866261   route_delay = 0
Thu Aug 29 12:02:46 2013 us=866282   route_delay_window = 30
Thu Aug 29 12:02:46 2013 us=866302   route_delay_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=866323   route_nopull = DISABLED
Thu Aug 29 12:02:46 2013 us=866343   route_gateway_via_dhcp = DISABLED
Thu Aug 29 12:02:46 2013 us=866364   max_routes = 100
Thu Aug 29 12:02:46 2013 us=866383   allow_pull_fqdn = DISABLED
Thu Aug 29 12:02:46 2013 us=866404   management_addr = 'xxxxxxxxx'
Thu Aug 29 12:02:46 2013 us=866424   management_port = 1194
Thu Aug 29 12:02:46 2013 us=866444   management_user_pass = 'pass.txt'
Thu Aug 29 12:02:46 2013 us=866464   management_log_history_cache = 250
Thu Aug 29 12:02:46 2013 us=866483   management_echo_buffer_size = 100
Thu Aug 29 12:02:46 2013 us=866504   management_write_peer_info_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866524   management_client_user = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866544   management_client_group = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866564   management_flags = 64
Thu Aug 29 12:02:46 2013 us=866583   shared_secret_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866603   key_direction = 0
Thu Aug 29 12:02:46 2013 us=866623   ciphername_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=866643   ciphername = 'BF-CBC'
Thu Aug 29 12:02:46 2013 us=866663   authname_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=866683   authname = 'SHA1'
Thu Aug 29 12:02:46 2013 us=866702   prng_hash = 'SHA1'
Thu Aug 29 12:02:46 2013 us=866722   prng_nonce_secret_len = 16
Thu Aug 29 12:02:46 2013 us=866742   keysize = 0
Thu Aug 29 12:02:46 2013 us=866761   engine = DISABLED
Thu Aug 29 12:02:46 2013 us=866790   replay = ENABLED
Thu Aug 29 12:02:46 2013 us=866810   mute_replay_warnings = DISABLED
Thu Aug 29 12:02:46 2013 us=866830   replay_window = 64
Thu Aug 29 12:02:46 2013 us=866850   replay_time = 15
Thu Aug 29 12:02:46 2013 us=866869   packet_id_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866899   use_iv = ENABLED
Thu Aug 29 12:02:46 2013 us=866919   test_crypto = DISABLED
Thu Aug 29 12:02:46 2013 us=866939   tls_server = ENABLED
Thu Aug 29 12:02:46 2013 us=866973   tls_client = DISABLED
Thu Aug 29 12:02:46 2013 us=867007   key_method = 2
Thu Aug 29 12:02:46 2013 us=867047   ca_file = '/etc/openvpn/keys/ca.crt'
Thu Aug 29 12:02:46 2013 us=867068   ca_path = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867088   dh_file = '/etc/openvpn/keys/dh1024.pem'
Thu Aug 29 12:02:46 2013 us=867108   cert_file = '/etc/openvpn/keys/server.crt'
Thu Aug 29 12:02:46 2013 us=867129   priv_key_file = '/etc/openvpn/keys/server.key'
Thu Aug 29 12:02:46 2013 us=867149   pkcs12_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867168   cipher_list = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867188   tls_verify = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867207   tls_export_cert = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867227   tls_remote = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867246   crl_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867266   ns_cert_type = 0
Thu Aug 29 12:02:46 2013 us=867285   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867304   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867323   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867342   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867361   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867380   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867398   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867417   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867436   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867455   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867473   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867492   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867511   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867529   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867548   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867567   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867587   remote_cert_eku = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867606   tls_timeout = 2
Thu Aug 29 12:02:46 2013 us=867625   renegotiate_bytes = 0
Thu Aug 29 12:02:46 2013 us=867644   renegotiate_packets = 0
Thu Aug 29 12:02:46 2013 us=867663   renegotiate_seconds = 3600
Thu Aug 29 12:02:46 2013 us=867681   handshake_window = 60
Thu Aug 29 12:02:46 2013 us=867701   transition_window = 3600
Thu Aug 29 12:02:46 2013 us=867720   single_session = DISABLED
Thu Aug 29 12:02:46 2013 us=867743   push_peer_info = DISABLED
Thu Aug 29 12:02:46 2013 us=867764   tls_exit = DISABLED
Thu Aug 29 12:02:46 2013 us=867784   tls_auth_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867803   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867823   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867843   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867862   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867882   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867902   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867922   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867941   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867960   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867980   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867999   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868019   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868038   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868057   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868077   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868097   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868117   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868137   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868157   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868177   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868196   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868215   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868234   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868254   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868273   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868292   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868311   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868330   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868350   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868369   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868388   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868408   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868427   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868446   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868465   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868484   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868504   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868522   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868541   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868561   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868580   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868599   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868618   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868637   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868656   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868675   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868694   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868713   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868733   pkcs11_pin_cache_period = -1
Thu Aug 29 12:02:46 2013 us=868746   pkcs11_id = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=868767   pkcs11_id_management = DISABLED
Thu Aug 29 12:02:46 2013 us=868789   server_network = 10.44.77.0
Thu Aug 29 12:02:46 2013 us=868810   server_netmask = 255.255.255.0
Thu Aug 29 12:02:46 2013 us=868839   server_network_ipv6 = ::
Thu Aug 29 12:02:46 2013 us=868859   server_netbits_ipv6 = 0
Thu Aug 29 12:02:46 2013 us=868880   server_bridge_ip = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868901   server_bridge_netmask = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868922   server_bridge_pool_start = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868943   server_bridge_pool_end = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868963   push_entry = 'dhcp-option DOMAIN xxxxxxxxxxx'
Thu Aug 29 12:02:46 2013 us=868983   push_entry = 'dhcp-option DNS 208.67.222.222'
Thu Aug 29 12:02:46 2013 us=869003   push_entry = 'dhcp-option DNS 208.67.220.220'
Thu Aug 29 12:02:46 2013 us=869023   push_entry = 'redirect-gateway'
Thu Aug 29 12:02:46 2013 us=869043   push_entry = 'route-gateway 10.44.77.1'
Thu Aug 29 12:02:46 2013 us=869062   push_entry = 'ping 10'
Thu Aug 29 12:02:46 2013 us=869082   push_entry = 'ping-restart 120'
Thu Aug 29 12:02:46 2013 us=869101   ifconfig_pool_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=869123   ifconfig_pool_start = 10.44.77.2
Thu Aug 29 12:02:46 2013 us=869144   ifconfig_pool_end = 10.44.77.254
Thu Aug 29 12:02:46 2013 us=869165   ifconfig_pool_netmask = 255.255.255.0
Thu Aug 29 12:02:46 2013 us=869185   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869205   ifconfig_pool_persist_refresh_freq = 600
Thu Aug 29 12:02:46 2013 us=869224   ifconfig_ipv6_pool_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=869245   ifconfig_ipv6_pool_base = ::
Thu Aug 29 12:02:46 2013 us=869264   ifconfig_ipv6_pool_netbits = 0
Thu Aug 29 12:02:46 2013 us=869284   n_bcast_buf = 256
Thu Aug 29 12:02:46 2013 us=869303   tcp_queue_limit = 64
Thu Aug 29 12:02:46 2013 us=869322   real_hash_size = 256
Thu Aug 29 12:02:46 2013 us=869342   virtual_hash_size = 256
Thu Aug 29 12:02:46 2013 us=869361   client_connect_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869380   learn_address_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869400   client_disconnect_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869420   client_config_dir = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869439   ccd_exclusive = DISABLED
Thu Aug 29 12:02:46 2013 us=869458   tmp_dir = '/tmp'
Thu Aug 29 12:02:46 2013 us=869478   push_ifconfig_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=869499   push_ifconfig_local = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=869519   push_ifconfig_remote_netmask = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=869539   push_ifconfig_ipv6_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=869560   push_ifconfig_ipv6_local = ::/0
Thu Aug 29 12:02:46 2013 us=869580   push_ifconfig_ipv6_remote = ::
Thu Aug 29 12:02:46 2013 us=869599   enable_c2c = ENABLED
Thu Aug 29 12:02:46 2013 us=869619   duplicate_cn = DISABLED
Thu Aug 29 12:02:46 2013 us=869638   cf_max = 0
Thu Aug 29 12:02:46 2013 us=869657   cf_per = 0
Thu Aug 29 12:02:46 2013 us=869676   max_clients = 10
Thu Aug 29 12:02:46 2013 us=869696   max_routes_per_client = 256
Thu Aug 29 12:02:46 2013 us=869715   auth_user_pass_verify_script = '/etc/openvpn/auth.sh'
Thu Aug 29 12:02:46 2013 us=869735   auth_user_pass_verify_script_via_file = DISABLED
Thu Aug 29 12:02:46 2013 us=869754   ssl_flags = 3
Thu Aug 29 12:02:46 2013 us=869773   port_share_host = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869793   port_share_port = 0
Thu Aug 29 12:02:46 2013 us=869812   client = DISABLED
Thu Aug 29 12:02:46 2013 us=869831   pull = DISABLED
Thu Aug 29 12:02:46 2013 us=869850   auth_user_pass_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869877 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Thu Aug 29 12:02:46 2013 us=870025 MANAGEMENT: Socket bind failed on local address [AF_INET]xxxxx:1194: Cannot assign requested address
Thu Aug 29 12:02:46 2013 us=870058 Exiting
  • 2
    lol at the comment annoying files. – Jason Oct 29 '13 at 16:43
  • @user259412 "on" English? – Mohammed Shareef C Oct 22 at 5:14
6

I had the same problem and could solve it by removing the line "local xxx.xxx.xxx.xxx." out of the server.conf.

via

  • This solved it for me as well on Cent OS 7 – Tanner Nov 21 '15 at 2:36
5

Removing the "local" directive from the openvpn configuration file is not a proper solution. What if you require the openvpn daemon to bind to just one network interface, which is the whole point of this directive?

The root of the problem appears to be that the openvpn daemon is trying to start too early, before the server's network interfaces have reached a state where it is possible to bind to just one of them. Looking at openvpn's default init script, I see that it is configured to wait for the network to become available (as implied by "network.target"):

[root@krampus ~]# grep After /usr/lib/systemd/system/openvpn\@.service
After=network.target

The network being available appears to be sufficient when binding to all interfaces (when the "local" directive is removed from the configuration), but not when binding to a specific interface.

A fix that worked for me was to modify the init script to wait for the network to fully come online using "network-online.target" in place of "network.target" like so:

[root@krampus ~]# grep After /usr/lib/systemd/system/openvpn\@.service
After=network-online.target
  • This seems reasonable. Note that which files you may need to edit depend on your init system — you apparently use systemd, but the process is generally adaptable to others. Overall: good answer – Fox Mar 6 '17 at 23:04
2

The error line:

Thu Aug 29 12:02:46 2013 us=870025 MANAGEMENT: Socket bind failed on local address 
    [AF_INET]xxxxx:1194: Cannot assign requested address

is your clue to the problem. I would imagine there is some process already listening on port 1194. You can check that with a netstat -pnta and see if 1194 is listed as a state LISTEN proces:

Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address     Foreign Address    State        PID/Program name
tcp        0      0 10.0.0.1:22       10.0.0.2:48346     ESTABLISHED  301/12  
tcp        0      0 10.44.77.1:1194   0.0.0.0:*          LISTEN       5998/mrfoo      

The output you are looking for should look something like the last line of that output. It should tell you the name of the process and the PID of the process (in the last column) so you can terminate it necessary. If it's a process that is needed then allocate a new unused port for your VPN config.

  • Unfortunately its not the issue was it was configuration fault. I now changed the configuration but still i have now another issue saying Thu Aug 29 18:18:28 2013 us=667455 TCP/UDP: Socket bind failed on local address [undef]: Address already in use – user11085 Aug 29 '13 at 16:25
  • That definitely sounds like you have something using the same port - what does netstat -pnta say? (or if that give errors about arguments netstat -an | grep LISTEN) – Drav Sloan Aug 29 '13 at 18:18
  • Worked for me, thanks! Not sure what the reason is but I'm running Ubuntu in a VM and put my host to sleep, so maybe it has to do with the Network Manager not closing the ports correctly and failing when trying to connect back again. – djule5 Jan 15 '15 at 13:15
1

With Raspberry Pi 2 Model B, removing the local 192.168... line from /etc/openvpn/server.conf fixed this problem for me. See https://bbs.archlinux.org/viewtopic.php?id=183818 for more info about this.

1

I was fighting against this today, using Xenial (16.04), on the server side. So, I had to come up with a solution, and none of the above were applicable.

  1. Nuke OpenVPN autostart Assuming your configuration file is named server.conf, I resorted to:

    sudo nano /etc/default/openvpn
    

    and commented any line with AUTOSTART= in it with a leading # just leaving: AUTOSTART="none"

  2. Replace your openvpn startup script

    Then I replaced the openvpn script at /etc/network/if.up.d/openvpn with:

    #!/bin/sh
    
    MYOPENVPN=server
    OPENVPN=/usr/sbin/openvpn
    SYSTEMCTL=/bin/systemctl
    
    if [ ! -x $OPENVPN ]; then
    exit 0
    fi
    
    $SYSTEMCTL start openvpn@$MYOPENVPN.service
    
    exit 0
    

    MYOPNVPN is the name of your configuration file, stored in /etc/openvpn, and omitting the .conf extension. Replace it with your own name.

    If you do it from scratch don't forget to:

    sudo chmod +x /etc/network/if.up.d/openvpn
    

    Before you proceed it may be advisable to make a copy of your present /etc/network/if.up.d/openvpn script, maybe with:

    sudo cp /etc/network/if.up.d/openvpn /etc/network/if.up.d/openvpn.old
    
  3. Reboot, it should work


I have posted this in Portuguese here:

http://ajoliveira.com/ajoliveira/pt/software/openvpn_xenial.php

  • 1
    While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes. - From Review – Jeff Schaller Jan 25 '18 at 15:49
  • This looks as the same as on Ubuntu Bug #1454725, and the mod addresses the invalid openvpn system start-up script. I choose to provide the link since I can do any edit on the fly. The page is there for 14 years, so risk of it disappearing is minimum. – Antonio J. de Oliveira Jan 25 '18 at 16:49
  • @AntonioJ.deOliveira - doesn't matter, answers should be freestanding, put some of the relevant details here. – slm Jan 28 '18 at 3:21
  • Thank you for taking the time to answer, but we want answers to be actually answering the question. This is not providing an answer, but instead is giving directions to where an answer can be found, on another site. I have done this for you this time, but next time, please always include the actual solution in your posts. – terdon Jan 28 '18 at 13:13
0

Should the management line not just be ' management 1194 pass.txt' ?

I think you're trying to listen on Google's Public DNS server there and unless you are google, that's probably not a good idea :*)

0

If you're reading this in 2019 and using Ubuntu 16.x or 18.x, especially if you're running multiple IPs, a libvirt/kvm host, or expect that your OpenVPN instance only listen on a single specified port, and are encountering the following error:

Socket bind failed on local address [AF_INET]XXX.XXX.XXX.XXX:10e94: Cannot assign requested address

All of the other answers are incorrect or poor solutions, the correct solution is to:

In /etc/default/openvpn

AUTOSTART="none"

In /etc/network/interfaces

iface ethX inet static
  address XXX.XXX.XXX.XX
  netmask 255.255.255.0
  openvpn my_vpn_name

Where ethX is your interface (ex, eth0 for a regular interface, eth0:1 for an alias of an interface), my_vpn_name is the base filename without the .conf suffix of your /etc/openvpn/my_vpn_name.conf file.

To explain, the above causes the script /etc/network/if-up.d/openvpn to get executed, this in turn executes systemctl --no-block start openvpn@my_vpn_name which starts the openvpn after the interfeace or alias is brought up.

Why do I say the other answers are poor or incorrect? because they're either unnecessarily complex or require you to instruct your openvpn instance to listen on all IPs which is highly undesireable for obvious reasons.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy