Hi David:
I am getting AUTH_FAILED errors, as appended below.
To restart clean, I've now rerun "new-client".
The updated output from that (for you) is below.
- sepia/new-client joemario@blazingsaddles
Please submit the following line to the OpenVPN admin:
joemario@blazingsaddles OOyTBGVn2N5lN0wfRqzxhw cbd8a6fc9596277a233b6d9113e3a2844718ff902b8f5a087ba474c7e06ab86d
Can you update your "new-client" output for me? I will update my password in the openvpn network client (from the 2nd line in the secret file).
Thank you.
Joe Mario
// Here is the AUTH_FAILED error I got, as an fyi.
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager1002: <info> Starting VPN service 'openvpn'...
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager1002: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3974
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager1002: <info> VPN service 'openvpn' appeared; activating connections
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager1002: <info> VPN plugin state changed: starting (3)
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager1002: (nm-openvpn-service:3974): nm-openvpn-WARNING *: Directory '/var/lib/openvpn/chroot' not usable for chroot by 'nm-openvpn', openvpn will not be chrooted.
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager1002: nm-openvpn-Message: openvpn started with pid 3980
Feb 05 15:34:18 blazingsaddles.bos.redhat.com NetworkManager1002: <info> VPN connection 'sepia' (ConnectInteractive) reply received.
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn3980: OpenVPN 2.3.10 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jan 4 2016
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn3980: library versions: OpenSSL 1.0.2f-fips 28 Jan 2016, LZO 2.08
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn3980: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn3980: WARNING: file '/etc/openvpn/sepia/tlsauth' is group or others accessible
Feb 05 15:34:18 blazingsaddles.bos.redhat.com nm-openvpn3980: Control Channel Authentication: using '/etc/openvpn/sepia/tlsauth' as a OpenVPN static key file
Feb 05 15:34:19 blazingsaddles.bos.redhat.com nm-openvpn3980: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Feb 05 15:34:19 blazingsaddles.bos.redhat.com nm-openvpn3980: UDPv4 link local: [undef]
Feb 05 15:34:19 blazingsaddles.bos.redhat.com nm-openvpn3980: UDPv4 link remote: [AF_INET]8.43.84.129:1194
Feb 05 15:34:20 blazingsaddles.bos.redhat.com nm-openvpn3980: [openvpn-sepia] Peer Connection Initiated with [AF_INET]8.43.84.129:1194
Feb 05 15:34:23 blazingsaddles.bos.redhat.com nm-openvpn3980: AUTH: Received control message: AUTH_FAILED
Feb 05 15:34:23 blazingsaddles.bos.redhat.com nm-openvpn3980: SIGUSR1[soft,auth-failure] received, process restarting
Feb 05 15:34:23 blazingsaddles.bos.redhat.com NetworkManager1002: (nm-openvpn-service:3974): nm-openvpn-WARNING *: Password verification failed