Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread Gert Doering
Hi, On Sun, Jul 19, 2020 at 05:09:59PM +1200, Richard Hector wrote: > I have 4 machines (actually VPSes) that have a full mesh of VPNs between > them. I'm using a slightly-modified version of the 'client' example > config. Since it appears TLS, and the use of certificates, requires > named client

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread David Sommerseth
On 19/07/2020 07:09, Richard Hector wrote: > Hi all, > > I have 4 machines (actually VPSes) that have a full mesh of VPNs between > them. I'm using a slightly-modified version of the 'client' example > config. Since it appears TLS, and the use of certificates, requires > named client and server pe

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread Richard Hector
On 19/07/20 9:09 pm, Gert Doering wrote: > Hi, > > On Sun, Jul 19, 2020 at 05:09:59PM +1200, Richard Hector wrote: >> I have 4 machines (actually VPSes) that have a full mesh of VPNs between >> them. I'm using a slightly-modified version of the 'client' example >> config. Since it appears TLS, and

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread Richard Hector
On 19/07/20 9:20 pm, David Sommerseth wrote: > On 19/07/2020 07:09, Richard Hector wrote: >> Hi all, >> >> I have 4 machines (actually VPSes) that have a full mesh of VPNs between >> them. I'm using a slightly-modified version of the 'client' example >> config. Since it appears TLS, and the use of

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread Gert Doering
Hi, On Sun, Jul 19, 2020 at 09:56:09PM +1200, Richard Hector wrote: > I'm aware of the flags in the cert, and (IIRC) managed to enable both > client and server flags, and both client and server worked with the same > cert. Good :-) > What I wasn't able to do is have identical (well, reversed) co

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread Richard Hector
On 19/07/20 10:08 pm, Gert Doering wrote: > Hi, > > On Sun, Jul 19, 2020 at 09:56:09PM +1200, Richard Hector wrote: >> I'm aware of the flags in the cert, and (IIRC) managed to enable both >> client and server flags, and both client and server worked with the same >> cert. > > Good :-) > >> What

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread tincanteksup
Try removing these settings: > user nobody > group nogroup > persist-key > persist-tun If you study your logs you will probably notice their effects. On 19/07/2020 06:09, Richard Hector wrote: Hi all, I have 4 machines (actually VPSes) that have a full mesh of VPNs between them. I'm using a

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread Gert Doering
Hi, On Sun, Jul 19, 2020 at 10:32:42PM +1200, Richard Hector wrote: > > NAT with port translation in beteween? If the port > > changes after a restart, and the other end has no --float in the config, > > things will not work. Here a clear client/server role also helps, as > > there is a well

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread Gert Doering
Hi, On Sun, Jul 19, 2020 at 11:42:48AM +0100, tincanteksup wrote: > Try removing these settings: > > > user nobody > > group nogroup > > persist-key > > persist-tun > > If you study your logs you will probably notice their effects. In p2p mode, I do not think think it will make any differen

Re: [Openvpn-users] peer-peer vpns and systemd

2020-07-19 Thread tincanteksup
What is the effect of setting --nobind in the systemd unit file and then --lport/--rport in the config ? Does --keepalive work in p2p mode ? On 19/07/2020 06:09, Richard Hector wrote: Hi all, I have 4 machines (actually VPSes) that have a full mesh of VPNs between them. I'm using a slightly

[Openvpn-users] Join PC with OpenVpn to Active Directory

2020-07-19 Thread Fermin Francisco via Openvpn-users
Good afternoon! How Can I join a PC with openVPN to the Active Directory, does exists a manual, Video, something like that?? José Fermín Francisco Ferreras Registered User #579535 (LinuxCounter.net) ___ Openvpn-users mailing list Openvpn-users@list

Re: [Openvpn-users] Join PC with OpenVpn to Active Directory

2020-07-19 Thread Selva Nair
Hi, If your VPN establishes a route to the domain controller(s) and the domain name resolves from the client, you can join the domain just as you would do while directly connected to the LAN. For example, if the domain name is example.local, "nslookup example.local" should return the IP addresses

Re: [Openvpn-users] Join PC with OpenVpn to Active Directory

2020-07-19 Thread Fermin Francisco via Openvpn-users
Good evening! Let me explain my scenario: OpenVPN Server is in Server 2. Active Directory and domain controller Server is in Server 1. Example from a openVPN client: nslookup example.local Server: xxx.xxx.xxx.xxx Address: xxx.xxx.xxx.xxx#53 ** server can't find example.local: NXDOMAIN What