On Friday 26 February 2010 01:39:55 Joseph wrote: > On 02/25/10 22:17, Xavier Parizet wrote: > >From what i can see, please try to add full path to the ccd directory in > >client-config-dir directive on the server path. Also check permissions > >on that directory. On which user are you running openvpn on the server ? > >On the client ? > > On client: > drwxr-xr-x 2 root root 4096 Feb 24 18:49 ccd > -rw-r--r-- 1 root root 45 Feb 25 12:13 syscon9 > > so this looks OK,
From this, it looks like the "syscon9" file is not in the ".../ccd/" directory? Also, isn't this file supposed to be on the server? > >Can you increase verbosity and see if there is no open fails on the > >server ? If it works, you should have the following line in server logs: > >OPTIONS IMPORT: reading client specific options from: [path to > > ccd]/syscon9 MULTI: Learn: [192.168.139.15] -> syscon9/[ip source:port > > source] > > I've increased verbosity on server to 9 > but I can not find any phrase in the serer log file: "fails" "IMPORT" > > but I've noticed this section on the server log: > > ...syscon9/68.148.245.78:56172 TEST FILE '/etc/openvpn/ccd/syscon9' [0] > ...syscon9/68.148.245.78:56172 TEST FILE '/etc/openvpn/ccd/DEFAULT' [0] > ...syscon9/68.148.245.78:56172 MULTI: Learn: 192.168.139.2 -> > syscon9/68.148.245.78:56172 > > If I change the directory to "ccd" the log just shows: > ...syscon9/68.148.245.78:56172 TEST FILE 'ccd/syscon9' [0] > ...syscon9/68.148.245.78:56172 TEST FILE 'ccd/DEFAULT' [0 This seems to indicate it can't actually find the file "/etc/openvpn/ccd/syscon9" This file needs to be located on the server, not on the client, as it's the server that determines the IP-address for the client. -- Joost
