Infrastructure » sepia

Checking in again before I resolve the ticket. Can you confirm you're able to access the lab? I don't see any auth attempts in the openvpn logs.

Hi David,

Sorry for getting back now, I was working on my local machine and did not check back on this ticket. I am unable to establish VPN connection after issuing the following command:

sudo service openvpn start

output of /var/log/syslog:

Jun 6 12:40:43 donjaffer systemd¹: Starting OpenVPN connection to sepia...
Jun 6 12:40:43 donjaffer systemd¹: Started OpenVPN service.
Jun 6 12:40:43 donjaffer ovpn-sepia⁹¹³⁰: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/sepia.conf
Jun 6 12:40:43 donjaffer ovpn-sepia⁹¹³⁰: Use --help for more information.
Jun 6 12:40:43 donjaffer systemd¹: openvpn@sepia.service: control process exited, code=exited status=1
Jun 6 12:40:43 donjaffer systemd¹: Failed to start OpenVPN connection to sepia.
Jun 6 12:40:43 donjaffer systemd¹: Unit openvpn@sepia.service entered failed state.
Jun 6 12:40:43 donjaffer systemd¹: openvpn@sepia.service failed.

I am referring to http://ceph.github.io/sepia/adding_users/ link for accessing sepia.

Please let me know how to proceed further.

Thank you!
Shehbaz

Does /etc/openvpn/sepia.conf exist?

The method for starting the connection may have changed with systemd.

Can you try running openvpn --config /etc/openvpn/sepia.conf and report back with the output?

the file is a hard link to another file named client.conf as follows:

$ ls -l /etc/openvpn/sepia.conf
lrwxrwxrwx 1 root root 13 Apr 24 10:08 /etc/openvpn/sepia.conf -> ./client.conf

I searched for client.conf and it is located in a directory called sepia here:

/etc/openvpn/sepia/client.conf.

So I copied the file client.conf from /etc/openvpn/sepia folder into /etc/openvpn folder

when I run openvpn --config client.conf from /etc/openvpn folder, I am able to connect to VPN.

Then when I ssh, I am able to connect to teuthology.

shehbazj@teuthology:~$ hostname
teuthology

shehbazj@teuthology:~$ ifconfig
eth0 Link encap:Ethernet HWaddr 00:25:90:09:e0:94
inet addr:172.21.9.23 Bcast:172.21.15.255 Mask:255.255.240.0
inet6 addr: 2620:52:0:1500:225:90ff:fe09:e094/64 Scope:Global
inet6 addr: fe80::225:90ff:fe09:e094/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:39042942897 errors:0 dropped:186961 overruns:0 frame:0
TX packets:48822622007 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:40606239970432 (40.6 TB) TX bytes:63442645877422 (63.4 TB)
Interrupt:16 Memory:fb5e0000-fb600000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:41144716 errors:0 dropped:0 overruns:0 frame:0
TX packets:41144716 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4811996834 (4.8 GB) TX bytes:4811996834 (4.8 GB)

virbr0 Link encap:Ethernet HWaddr f6:1c:d5:a6:52:43
inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

Is sepia maintained by CEPH? If so, maybe we should make appropriate changes where the client.conf file is copied to /etc/openvpn folder.

Thanks a lot for your help David!