Arch Linux

rostoQ

Member

Registered: 2008-06-25

Posts: 40

OpenVPN to my University

Hi there! im trying to connect to my campus-network via OpenVPN. They have a documentary for Mac OS X & OpenVpn, > http://www.snt.utwente.nl/helpdesk/handleidingen/1/18
Im just using gopenvpnc instead of "tunnelblick". But it wont connect. Here the gopenvpn's log:

Sun Aug 24 17:30:35 2008: IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA.  OpenVPN 2.0-beta16 and earlier used 5000 as the default port.

Sun Aug 24 17:30:35 2008: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

Sun Aug 24 17:30:35 2008: Control Channel MTU parms [ L:1573 D:138 EF:38 EB:0 ET:0 EL:0 ]

Sun Aug 24 17:30:35 2008: Data Channel MTU parms [ L:1573 D:1450 EF:41 EB:4 ET:32 EL:0 ]

Sun Aug 24 17:30:35 2008: Local Options hash (VER=V4): '2c50bd2c'

Sun Aug 24 17:30:35 2008: Expected Remote Options hash (VER=V4): '0ddbb6e3'

Sun Aug 24 17:30:35 2008: UDPv4 link local: [undef]

Sun Aug 24 17:30:35 2008: UDPv4 link remote: 130.89.254.78:1194

Sun Aug 24 17:30:35 2008: TLS: Initial packet from 130.89.254.78:1194, sid=67814770 923e6ee3

Sun Aug 24 17:30:35 2008: VERIFY OK: depth=1, /C=NL/ST=OV/L=Enschede/O=Universiteit_Twente/CN=Universiteit_Twente_CA/emailAddress=openvpn@utwente.nl

Sun Aug 24 17:30:35 2008: VERIFY OK: depth=0, /C=NL/ST=OV/L=Enschede/O=Universiteit_Twente/CN=server/emailAddress=openvpn@utwente.nl

Sun Aug 24 17:30:36 2008: Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key

Sun Aug 24 17:30:36 2008: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Sun Aug 24 17:30:36 2008: Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key

Sun Aug 24 17:30:36 2008: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

Sun Aug 24 17:30:36 2008: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA

Sun Aug 24 17:30:36 2008: [server] Peer Connection Initiated with 130.89.254.78:1194

Sun Aug 24 17:30:38 2008: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

Sun Aug 24 17:30:38 2008: PUSH: Received control message: 'PUSH_REPLY,route-gateway 130.89.100.1,route 130.89.0.0 255.255.0.0,route remote_host 255.255.255.255 net_gateway,route 192.87.166.0 255.255.255.0,route 198.81.200.2 255.255.255.255,route 140.234.29.33 255.255.255.255,route 208.215.179.155 255.255.255.255,route 140.98.193.112 255.255.255.255,route 204.153.51.0 255.255.255.0,route 217.169.56.209 255.255.255.255,route 171.66.120.19 255.255.255.255,route 129.41.4.140 255.255.255.255,route 193.131.119.37 255.255.255.255,route 198.185.19.57 255.255.255.255,route 192.84.80.0 255.255.255.0,route 208.73.212.12 255.255.255.255,route 84.18.186.175 255.255.255.255,route 192.87.104.57 255.255.255.255,route 72.164.152.201 255.255.255.255,route 204.179.122.0 255.255.255.0,route 204.228.64.0 255.255.255.0,route 63.118.7.0 255.255.255.0,route 216.185.128.200 255.255.255.255,route 216.143.112.93 255.255.255.255,route 192.58.150.35 255.255.255.255,dhcp-option DNS 130.89.2.2,dhcp-option DNS 130.89.2.3,ping 10,ping-restart 120,if>LOG:1219591838,,OPTIONS IMPORT: timers and/or timeouts modified

Sun Aug 24 17:30:38 2008: OPTIONS IMPORT: --ifconfig/up options modified

Sun Aug 24 17:30:38 2008: OPTIONS IMPORT: route options modified

Sun Aug 24 17:30:38 2008: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

Sun Aug 24 17:30:38 2008: TUN/TAP device tap0 opened

Sun Aug 24 17:30:38 2008: /sbin/ifconfig tap0 130.89.101.173 netmask 255.255.254.0 mtu 1500 broadcast 130.89.101.255

Sun Aug 24 17:30:38 2008: Linux ifconfig failed: shell command exited with error status: 255

Looks pretty good, except that it fails in the end
Anybody got an idea? Never came in touch with VPN before... and as always, it (OpenVPN) works under Windows without complains -_- ... when i start openvpn manually, it works as well... but i'd like to use it with a networkmanager

Last edited by rostoQ (2008-08-24 16:42:05)

tam1138

Member

Registered: 2007-09-10

Posts: 238

Re: OpenVPN to my University

Are you trying this as root or as normal user?

rostoQ

Member

Registered: 2008-06-25

Posts: 40

Re: OpenVPN to my University

normal user, as root gopenvpn doesn't want to connect at all...
when i start openvpn (via "openvpn --config /etc/openvpn/openvpn.conf") i do as root...

tam1138

Member

Registered: 2007-09-10

Posts: 238

Re: OpenVPN to my University

It won't work as normal user because (hopefully) you don't have permissions to run ifconfig in that way (ie, to modify an interface).  I use openvpn myself, but run it as root; I'm not sure what facilities they provide for running it as a normal user.  What happens when you try to run as root?