|
|
I want to use the username-password as my openvpn autehtication. The username password information had already exit in one openldap server. So I want to using the pam-openvpn module to realize it. in the openvpn server machine I also install two openldap. one is from suse package, the other is I install myself under /usr/local/etc/openldap/ldap.conf. Is it because of that? Or openvpn-Pam didn't support the simple bind? After I connect the openvpn server, there is an error log. ----------------------------------------------- Wed Sep 13 00:31:29 2006 IMPORTANT: OpenVPN's default port number is now 1194, b ased on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earl ier used 5000 as the default port. Wed Sep 13 00:31:29 2006 LZO compression initialized Wed Sep 13 00:31:29 2006 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET: 0 EL:0 ] Wed Sep 13 00:31:29 2006 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:23 ET:0 EL:0 AF:3/1 ] Wed Sep 13 00:31:29 2006 Local Options hash (VER=V4): '41690919' Wed Sep 13 00:31:29 2006 Expected Remote Options hash (VER=V4): '530fdded' Wed Sep 13 00:31:29 2006 NOTE: UID/GID downgrade will be delayed because of --cl ient, --pull, or --up-delay Wed Sep 13 00:31:29 2006 UDPv4 link local: [undef] Wed Sep 13 00:31:29 2006 UDPv4 link remote: 132.230.XX.XX:1194 Wed Sep 13 00:31:29 2006 TLS: Initial packet from 132.230.XX.XX:1194, sid=8160d93 6 ff5ee6ee Wed Sep 13 00:31:29 2006 VERIFY OK: depth=1, /C=KG/ST=NA/L=BISHKEK/O=OpenVPN-TES T/CN=OpenVPN-CA/emailAddress=me@xxxxxxxxxxxxxxx Wed Sep 13 00:31:29 2006 VERIFY OK: nsCertType=SERVER Wed Sep 13 00:31:29 2006 VERIFY OK: depth=0, /C=KG/ST=NA/O=OpenVPN-TEST/CN=serve r/emailAddress=me@xxxxxxxxxxxxxxx Wed Sep 13 00:31:29 2006 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key Wed Sep 13 00:31:29 2006 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Sep 13 00:31:29 2006 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key Wed Sep 13 00:31:29 2006 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Wed Sep 13 00:31:29 2006 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES2 56-SHA, 1024 bit RSA Wed Sep 13 00:31:29 2006 [server] Peer Connection Initiated with 132.230.4.95:11 94 Wed Sep 13 00:31:30 2006 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Wed Sep 13 00:31:30 2006 AUTH: Received AUTH_FAILED control message Wed Sep 13 00:31:30 2006 TCP/UDP: Closing socket Wed Sep 13 00:31:30 2006 SIGTERM[soft,auth-failure] received, process exiting ______________________ OpenVPN mailing lists https://lists.sourceforge.net/lists/listinfo/openvpn-users |