OpenVPN - Ligação de soquete falhou no endereço local [AF_INET] IP: 1194: Não é possível atribuir o endereço solicitado

Navegue suas respostas
6

Como isso é resolvido? Eu estou tentando iniciar o servidor openVPN para que eu possa logar remotamente usando username: demo e senha: demo, mas o servidor openVPN está falhando ao iniciar.

O que estou fazendo de errado? Como posso consertar isso? 

$ cat /etc/openvpn/server.conf
proto tcp
port 1194
dev tap
#do-mtu 1492
#fragment 1300
dev-node tap
keepalive 10 120 
max-clients 10

# Annoying files 
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem

# Owner
user nobody
group nogroup
server 10.44.77.0 255.255.255.0

persist-key
persist-tun
status openvpn-status.log
verb 6

# Router
client-to-client
push "dhcp-option DOMAIN xxxxx" # Server public IP or domain name
push "dhcp-option DNS 208.67.222.222" # Primary dns server (opendns shown)
push "dhcp-option DNS 208.67.220.220" # Secondary dns server (opendns shown)
push "redirect-gateway" # Directs all traffic through your VPN
#log-append /var/log/openvpn
comp-lzo

# Username/password
auth-user-pass-verify /etc/openvpn/auth.sh via-env
client-cert-not-required
username-as-common-name
management-client-auth
management 8.8.8.8 1194 pass.txt

$ cat auth.sh
#/bin/sh
Allowed_user = "demo"
ALLOWED_PASS = "demo"

if ["$username" == "$Allowed_user"] && ["$password" == "$ALLOWED_PASS"]
 then exit 0
fi

exit 1

$ cat pass.txt  #chmod 600 pass.txt else it gives warning
demo demo;

Saída: 

$ openvpn /etc/openvpn/server.conf 
Thu Aug 29 12:02:46 2013 us=863944 Current Parameter Settings:
Thu Aug 29 12:02:46 2013 us=864047   config = '/etc/openvpn/server.conf'
Thu Aug 29 12:02:46 2013 us=864075   mode = 1
Thu Aug 29 12:02:46 2013 us=864097   persist_config = DISABLED
Thu Aug 29 12:02:46 2013 us=864119   persist_mode = 1
Thu Aug 29 12:02:46 2013 us=864164   show_ciphers = DISABLED
Thu Aug 29 12:02:46 2013 us=864185   show_digests = DISABLED
Thu Aug 29 12:02:46 2013 us=864216   show_engines = DISABLED
Thu Aug 29 12:02:46 2013 us=864237   genkey = DISABLED
Thu Aug 29 12:02:46 2013 us=864259   key_pass_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864290   show_tls_ciphers = DISABLED
Thu Aug 29 12:02:46 2013 us=864323 Connection profiles [default]:
Thu Aug 29 12:02:46 2013 us=864346   proto = tcp-server
Thu Aug 29 12:02:46 2013 us=864366   local = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864398   local_port = 1194
Thu Aug 29 12:02:46 2013 us=864419   remote = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864451   remote_port = 1194
Thu Aug 29 12:02:46 2013 us=864471   remote_float = DISABLED
Thu Aug 29 12:02:46 2013 us=864492   bind_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=864512   bind_local = ENABLED
Thu Aug 29 12:02:46 2013 us=864537   connect_retry_seconds = 5
Thu Aug 29 12:02:46 2013 us=864557   connect_timeout = 10
Thu Aug 29 12:02:46 2013 us=864581   connect_retry_max = 0
Thu Aug 29 12:02:46 2013 us=864604   socks_proxy_server = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864624   socks_proxy_port = 0
Thu Aug 29 12:02:46 2013 us=864647   socks_proxy_retry = DISABLED
Thu Aug 29 12:02:46 2013 us=864670 Connection profiles END
Thu Aug 29 12:02:46 2013 us=864695   remote_random = DISABLED
Thu Aug 29 12:02:46 2013 us=864719   ipchange = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864742   dev = 'tap'
Thu Aug 29 12:02:46 2013 us=864762   dev_type = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864785   dev_node = 'tap'
Thu Aug 29 12:02:46 2013 us=864809   lladdr = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864829   topology = 1
Thu Aug 29 12:02:46 2013 us=864850   tun_ipv6 = DISABLED
Thu Aug 29 12:02:46 2013 us=864878   ifconfig_local = '10.44.77.1'
Thu Aug 29 12:02:46 2013 us=864902   ifconfig_remote_netmask = '255.255.255.0'
Thu Aug 29 12:02:46 2013 us=864925   ifconfig_noexec = DISABLED
Thu Aug 29 12:02:46 2013 us=864946   ifconfig_nowarn = DISABLED
Thu Aug 29 12:02:46 2013 us=864966   ifconfig_ipv6_local = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=864990   ifconfig_ipv6_netbits = 0
Thu Aug 29 12:02:46 2013 us=865013   ifconfig_ipv6_remote = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865036   shaper = 0
Thu Aug 29 12:02:46 2013 us=865057   tun_mtu = 1500
Thu Aug 29 12:02:46 2013 us=865077   tun_mtu_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=865106   link_mtu = 1500
Thu Aug 29 12:02:46 2013 us=865129   link_mtu_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=865152   tun_mtu_extra = 32
Thu Aug 29 12:02:46 2013 us=865172   tun_mtu_extra_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=865193   fragment = 0
Thu Aug 29 12:02:46 2013 us=865221   mtu_discover_type = -1
Thu Aug 29 12:02:46 2013 us=865244   mtu_test = 0
Thu Aug 29 12:02:46 2013 us=865266   mlock = DISABLED
Thu Aug 29 12:02:46 2013 us=865289   keepalive_ping = 10
Thu Aug 29 12:02:46 2013 us=865309   keepalive_timeout = 120
Thu Aug 29 12:02:46 2013 us=865330   inactivity_timeout = 0
Thu Aug 29 12:02:46 2013 us=865350   ping_send_timeout = 10
Thu Aug 29 12:02:46 2013 us=865378   ping_rec_timeout = 240
Thu Aug 29 12:02:46 2013 us=865401   ping_rec_timeout_action = 2
Thu Aug 29 12:02:46 2013 us=865422   ping_timer_remote = DISABLED
Thu Aug 29 12:02:46 2013 us=865442   remap_sigusr1 = 0
Thu Aug 29 12:02:46 2013 us=865470   explicit_exit_notification = 0
Thu Aug 29 12:02:46 2013 us=865493   persist_tun = ENABLED
Thu Aug 29 12:02:46 2013 us=865513   persist_local_ip = DISABLED
Thu Aug 29 12:02:46 2013 us=865535   persist_remote_ip = DISABLED
Thu Aug 29 12:02:46 2013 us=865558   persist_key = ENABLED
Thu Aug 29 12:02:46 2013 us=865584   mssfix = 1450
Thu Aug 29 12:02:46 2013 us=865609   passtos = DISABLED
Thu Aug 29 12:02:46 2013 us=865632   resolve_retry_seconds = 1000000000
Thu Aug 29 12:02:46 2013 us=865653   username = 'nobody'
Thu Aug 29 12:02:46 2013 us=865673   groupname = 'nogroup'
Thu Aug 29 12:02:46 2013 us=865692   chroot_dir = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865711   cd_dir = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865731   writepid = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865750   up_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865770   down_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=865789   down_pre = DISABLED
Thu Aug 29 12:02:46 2013 us=865809   up_restart = DISABLED
Thu Aug 29 12:02:46 2013 us=865828   up_delay = DISABLED
Thu Aug 29 12:02:46 2013 us=865848   daemon = DISABLED
Thu Aug 29 12:02:46 2013 us=865867   inetd = 0
Thu Aug 29 12:02:46 2013 us=865887   log = DISABLED
Thu Aug 29 12:02:46 2013 us=865906   suppress_timestamps = DISABLED
Thu Aug 29 12:02:46 2013 us=865926   nice = 0
Thu Aug 29 12:02:46 2013 us=865946   verbosity = 6
Thu Aug 29 12:02:46 2013 us=865965   mute = 0
Thu Aug 29 12:02:46 2013 us=865985   gremlin = 0
Thu Aug 29 12:02:46 2013 us=866004   status_file = 'openvpn-status.log'
Thu Aug 29 12:02:46 2013 us=866024   status_file_version = 1
Thu Aug 29 12:02:46 2013 us=866044   status_file_update_freq = 60
Thu Aug 29 12:02:46 2013 us=866064   occ = ENABLED
Thu Aug 29 12:02:46 2013 us=866083   rcvbuf = 65536
Thu Aug 29 12:02:46 2013 us=866103   sndbuf = 65536
Thu Aug 29 12:02:46 2013 us=866122   sockflags = 0
Thu Aug 29 12:02:46 2013 us=866142   fast_io = DISABLED
Thu Aug 29 12:02:46 2013 us=866161   lzo = 7
Thu Aug 29 12:02:46 2013 us=866181   route_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866201   route_default_gateway = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866221   route_default_metric = 0
Thu Aug 29 12:02:46 2013 us=866241   route_noexec = DISABLED
Thu Aug 29 12:02:46 2013 us=866261   route_delay = 0
Thu Aug 29 12:02:46 2013 us=866282   route_delay_window = 30
Thu Aug 29 12:02:46 2013 us=866302   route_delay_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=866323   route_nopull = DISABLED
Thu Aug 29 12:02:46 2013 us=866343   route_gateway_via_dhcp = DISABLED
Thu Aug 29 12:02:46 2013 us=866364   max_routes = 100
Thu Aug 29 12:02:46 2013 us=866383   allow_pull_fqdn = DISABLED
Thu Aug 29 12:02:46 2013 us=866404   management_addr = 'xxxxxxxxx'
Thu Aug 29 12:02:46 2013 us=866424   management_port = 1194
Thu Aug 29 12:02:46 2013 us=866444   management_user_pass = 'pass.txt'
Thu Aug 29 12:02:46 2013 us=866464   management_log_history_cache = 250
Thu Aug 29 12:02:46 2013 us=866483   management_echo_buffer_size = 100
Thu Aug 29 12:02:46 2013 us=866504   management_write_peer_info_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866524   management_client_user = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866544   management_client_group = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866564   management_flags = 64
Thu Aug 29 12:02:46 2013 us=866583   shared_secret_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866603   key_direction = 0
Thu Aug 29 12:02:46 2013 us=866623   ciphername_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=866643   ciphername = 'BF-CBC'
Thu Aug 29 12:02:46 2013 us=866663   authname_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=866683   authname = 'SHA1'
Thu Aug 29 12:02:46 2013 us=866702   prng_hash = 'SHA1'
Thu Aug 29 12:02:46 2013 us=866722   prng_nonce_secret_len = 16
Thu Aug 29 12:02:46 2013 us=866742   keysize = 0
Thu Aug 29 12:02:46 2013 us=866761   engine = DISABLED
Thu Aug 29 12:02:46 2013 us=866790   replay = ENABLED
Thu Aug 29 12:02:46 2013 us=866810   mute_replay_warnings = DISABLED
Thu Aug 29 12:02:46 2013 us=866830   replay_window = 64
Thu Aug 29 12:02:46 2013 us=866850   replay_time = 15
Thu Aug 29 12:02:46 2013 us=866869   packet_id_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=866899   use_iv = ENABLED
Thu Aug 29 12:02:46 2013 us=866919   test_crypto = DISABLED
Thu Aug 29 12:02:46 2013 us=866939   tls_server = ENABLED
Thu Aug 29 12:02:46 2013 us=866973   tls_client = DISABLED
Thu Aug 29 12:02:46 2013 us=867007   key_method = 2
Thu Aug 29 12:02:46 2013 us=867047   ca_file = '/etc/openvpn/keys/ca.crt'
Thu Aug 29 12:02:46 2013 us=867068   ca_path = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867088   dh_file = '/etc/openvpn/keys/dh1024.pem'
Thu Aug 29 12:02:46 2013 us=867108   cert_file = '/etc/openvpn/keys/server.crt'
Thu Aug 29 12:02:46 2013 us=867129   priv_key_file = '/etc/openvpn/keys/server.key'
Thu Aug 29 12:02:46 2013 us=867149   pkcs12_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867168   cipher_list = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867188   tls_verify = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867207   tls_export_cert = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867227   tls_remote = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867246   crl_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867266   ns_cert_type = 0
Thu Aug 29 12:02:46 2013 us=867285   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867304   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867323   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867342   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867361   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867380   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867398   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867417   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867436   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867455   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867473   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867492   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867511   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867529   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867548   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867567   remote_cert_ku[i] = 0
Thu Aug 29 12:02:46 2013 us=867587   remote_cert_eku = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867606   tls_timeout = 2
Thu Aug 29 12:02:46 2013 us=867625   renegotiate_bytes = 0
Thu Aug 29 12:02:46 2013 us=867644   renegotiate_packets = 0
Thu Aug 29 12:02:46 2013 us=867663   renegotiate_seconds = 3600
Thu Aug 29 12:02:46 2013 us=867681   handshake_window = 60
Thu Aug 29 12:02:46 2013 us=867701   transition_window = 3600
Thu Aug 29 12:02:46 2013 us=867720   single_session = DISABLED
Thu Aug 29 12:02:46 2013 us=867743   push_peer_info = DISABLED
Thu Aug 29 12:02:46 2013 us=867764   tls_exit = DISABLED
Thu Aug 29 12:02:46 2013 us=867784   tls_auth_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=867803   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867823   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867843   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867862   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867882   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867902   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867922   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867941   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867960   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867980   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=867999   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868019   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868038   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868057   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868077   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868097   pkcs11_protected_authentication = DISABLED
Thu Aug 29 12:02:46 2013 us=868117   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868137   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868157   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868177   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868196   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868215   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868234   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868254   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868273   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868292   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868311   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868330   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868350   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868369   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868388   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868408   pkcs11_private_mode = 00000000
Thu Aug 29 12:02:46 2013 us=868427   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868446   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868465   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868484   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868504   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868522   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868541   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868561   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868580   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868599   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868618   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868637   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868656   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868675   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868694   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868713   pkcs11_cert_private = DISABLED
Thu Aug 29 12:02:46 2013 us=868733   pkcs11_pin_cache_period = -1
Thu Aug 29 12:02:46 2013 us=868746   pkcs11_id = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=868767   pkcs11_id_management = DISABLED
Thu Aug 29 12:02:46 2013 us=868789   server_network = 10.44.77.0
Thu Aug 29 12:02:46 2013 us=868810   server_netmask = 255.255.255.0
Thu Aug 29 12:02:46 2013 us=868839   server_network_ipv6 = ::
Thu Aug 29 12:02:46 2013 us=868859   server_netbits_ipv6 = 0
Thu Aug 29 12:02:46 2013 us=868880   server_bridge_ip = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868901   server_bridge_netmask = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868922   server_bridge_pool_start = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868943   server_bridge_pool_end = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=868963   push_entry = 'dhcp-option DOMAIN xxxxxxxxxxx'
Thu Aug 29 12:02:46 2013 us=868983   push_entry = 'dhcp-option DNS 208.67.222.222'
Thu Aug 29 12:02:46 2013 us=869003   push_entry = 'dhcp-option DNS 208.67.220.220'
Thu Aug 29 12:02:46 2013 us=869023   push_entry = 'redirect-gateway'
Thu Aug 29 12:02:46 2013 us=869043   push_entry = 'route-gateway 10.44.77.1'
Thu Aug 29 12:02:46 2013 us=869062   push_entry = 'ping 10'
Thu Aug 29 12:02:46 2013 us=869082   push_entry = 'ping-restart 120'
Thu Aug 29 12:02:46 2013 us=869101   ifconfig_pool_defined = ENABLED
Thu Aug 29 12:02:46 2013 us=869123   ifconfig_pool_start = 10.44.77.2
Thu Aug 29 12:02:46 2013 us=869144   ifconfig_pool_end = 10.44.77.254
Thu Aug 29 12:02:46 2013 us=869165   ifconfig_pool_netmask = 255.255.255.0
Thu Aug 29 12:02:46 2013 us=869185   ifconfig_pool_persist_filename = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869205   ifconfig_pool_persist_refresh_freq = 600
Thu Aug 29 12:02:46 2013 us=869224   ifconfig_ipv6_pool_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=869245   ifconfig_ipv6_pool_base = ::
Thu Aug 29 12:02:46 2013 us=869264   ifconfig_ipv6_pool_netbits = 0
Thu Aug 29 12:02:46 2013 us=869284   n_bcast_buf = 256
Thu Aug 29 12:02:46 2013 us=869303   tcp_queue_limit = 64
Thu Aug 29 12:02:46 2013 us=869322   real_hash_size = 256
Thu Aug 29 12:02:46 2013 us=869342   virtual_hash_size = 256
Thu Aug 29 12:02:46 2013 us=869361   client_connect_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869380   learn_address_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869400   client_disconnect_script = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869420   client_config_dir = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869439   ccd_exclusive = DISABLED
Thu Aug 29 12:02:46 2013 us=869458   tmp_dir = '/tmp'
Thu Aug 29 12:02:46 2013 us=869478   push_ifconfig_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=869499   push_ifconfig_local = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=869519   push_ifconfig_remote_netmask = 0.0.0.0
Thu Aug 29 12:02:46 2013 us=869539   push_ifconfig_ipv6_defined = DISABLED
Thu Aug 29 12:02:46 2013 us=869560   push_ifconfig_ipv6_local = ::/0
Thu Aug 29 12:02:46 2013 us=869580   push_ifconfig_ipv6_remote = ::
Thu Aug 29 12:02:46 2013 us=869599   enable_c2c = ENABLED
Thu Aug 29 12:02:46 2013 us=869619   duplicate_cn = DISABLED
Thu Aug 29 12:02:46 2013 us=869638   cf_max = 0
Thu Aug 29 12:02:46 2013 us=869657   cf_per = 0
Thu Aug 29 12:02:46 2013 us=869676   max_clients = 10
Thu Aug 29 12:02:46 2013 us=869696   max_routes_per_client = 256
Thu Aug 29 12:02:46 2013 us=869715   auth_user_pass_verify_script = '/etc/openvpn/auth.sh'
Thu Aug 29 12:02:46 2013 us=869735   auth_user_pass_verify_script_via_file = DISABLED
Thu Aug 29 12:02:46 2013 us=869754   ssl_flags = 3
Thu Aug 29 12:02:46 2013 us=869773   port_share_host = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869793   port_share_port = 0
Thu Aug 29 12:02:46 2013 us=869812   client = DISABLED
Thu Aug 29 12:02:46 2013 us=869831   pull = DISABLED
Thu Aug 29 12:02:46 2013 us=869850   auth_user_pass_file = '[UNDEF]'
Thu Aug 29 12:02:46 2013 us=869877 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013
Thu Aug 29 12:02:46 2013 us=870025 MANAGEMENT: Socket bind failed on local address [AF_INET]xxxxx:1194: Cannot assign requested address
Thu Aug 29 12:02:46 2013 us=870058 Exiting
    
por YumYumYum 29.08.2013 / 11:49

6 respostas

6

I had the same problem and could solve it by removing the line "local xxx.xxx.xxx.xxx." out of the server.conf.

via

    
por 29.10.2013 / 17:36
5

Remover a diretiva "local" do arquivo de configuração openvpn não é uma solução adequada. E se você exigir que o daemon openvpn se vincule a apenas uma interface de rede, que é o ponto principal desta diretiva?

A raiz do problema parece ser que o daemon openvpn está tentando iniciar muito cedo, antes que as interfaces de rede do servidor tenham alcançado um estado onde é possível ligar-se a apenas uma delas. Observando o script init padrão do openvpn, vejo que ele está configurado para aguardar a disponibilidade da rede (conforme implícito em "network.target"): 

[root@krampus ~]# grep After /usr/lib/systemd/system/openvpn\@.service
After=network.target

A rede disponível parece ser suficiente ao ligar a todas as interfaces (quando a diretiva "local" é removida da configuração), mas não ao ligar a uma interface específica.

Uma correção que funcionou para mim foi modificar o script de inicialização para esperar que a rede ficasse totalmente on-line usando "network-online.target" no lugar de "network.target" assim: 

[root@krampus ~]# grep After /usr/lib/systemd/system/openvpn\@.service
After=network-online.target
    
por 06.03.2017 / 23:41
3

A linha de erro: 

Thu Aug 29 12:02:46 2013 us=870025 MANAGEMENT: Socket bind failed on local address 
    [AF_INET]xxxxx:1194: Cannot assign requested address

é sua pista para o problema. Eu imagino que há algum processo já escutando na porta 1194. Você pode verificar isso com um netstat -pnta e ver se 1194 está listado como um estado LISTEN proces: 

Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address     Foreign Address    State        PID/Program name
tcp        0      0 10.0.0.1:22       10.0.0.2:48346     ESTABLISHED  301/12  
tcp        0      0 10.44.77.1:1194   0.0.0.0:*          LISTEN       5998/mrfoo

A saída que você está procurando deve ser algo como a última linha dessa saída. Ele deve informar o nome do processo e o PID do processo (na última coluna) para que você possa finalizá-lo. Se for um processo necessário, aloque uma nova porta não usada para sua configuração de VPN.

    
por 29.08.2013 / 12:42
1

Com o Raspberry Pi 2 Modelo B, remover a linha local 192.168... de /etc/openvpn/server.conf corrigiu esse problema para mim. Consulte o link para obter mais informações sobre isso.

    
por 09.11.2015 / 14:40
1

Eu estava lutando contra isso hoje, usando o Xenial (16.04), no lado do servidor. Então, eu tive que encontrar uma solução, e nenhuma das opções acima foi aplicável.

  1. Autostart do Nuke OpenVPN Supondo que o seu arquivo de configuração é chamado server.conf, eu recorri a: 

    sudo nano /etc/default/openvpn

    e comentou qualquer linha com AUTOSTART= com uma # inicial saindo:     AUTOSTART="nenhum"

  2. Substitua seu script de inicialização do openvpn

    Depois, substituí o script openvpn em /etc/network/if.up.d/openvpn por: 

    #!/bin/sh

MYOPENVPN=server
OPENVPN=/usr/sbin/openvpn
SYSTEMCTL=/bin/systemctl

if [ ! -x $OPENVPN ]; then
exit 0
fi

$SYSTEMCTL start openvpn@$MYOPENVPN.service

exit 0

    MYOPNVPN é o nome do seu arquivo de configuração, armazenado em /etc/openvpn e omitindo a extensão .conf . Substitua-o pelo seu próprio nome.

    Se você fizer isso do zero, não esqueça: 

    sudo chmod +x /etc/network/if.up.d/openvpn

    Antes de prosseguir, pode ser aconselhável fazer uma cópia do seu atual script /etc/network/if.up.d/openvpn , talvez com: 

    sudo cp /etc/network/if.up.d/openvpn /etc/network/if.up.d/openvpn.old

  3. Reinicie, deve funcionar

Eu postei isso em português aqui:

link

    
por 25.01.2018 / 16:18
0

A linha de gerenciamento não deve ser apenas 'gerenciamento 1194 pass.txt'?

Acho que você está tentando ouvir no servidor de DNS público do Google e, a menos que você seja do google, provavelmente não é uma boa ideia: *)

    
por 31.10.2017 / 00:41

Tags

Em uma condição Bash if, como verificar se existem arquivos correspondentes a uma expressão curinga simples? Classifique campos separados por vírgula em cada linha por valor numérico