Re: [Openvpn-users] TAP devices and routes

["James Yonan" <jim@xxxxxxxxx>]

Doug Lytle <support@xxxxxxxxxx> said:

> Has anybody had any problems with tap devices and the route-up function 
> of OpenVPN 1.6 RC4?
> 
> This is the first time I've setup tap on a Mandrake 9.2 Linux client.  
> When setting it up, the connection works fine, but when setting the 
> routes via OpenVPN, it seems to change the user/group to nobody before 
> running the route-up command.  Then Linux complains about permissions.

If you use --route-delay, then the route script will not be run until after
the user/group downgrade.  

However, without --route-delay, the route script will be run immediately after
the tun/tap open which is before the privilege downgrade.

James

> I've currently setup a cron job to set the routes as root, but would 
> like to eliminate that.
> 
> I found a message back in May of 2003 that was a response from James 
> that matches my problem exactly.
> 
> >>Wayne,
> 
> >>There are probably errors occuring in your script ./soest.up, but the actual
> >>error messages are not being shown.  Because of the way that the daemon
> >>environment works, if scripts called by openvpn write to standard output or
> >>standard error, those messages will NOT make it into the syslog.
> 
> >>A better way to test the script is to run openvpn in non-daemon mode.  If you
> >>run openvpn at a command prompt, you will see errors in the script, if any
exist.
> 
> >>You can also use shell redirection to a file in the script to capture errors
> >>which occur when openvpn calls the script while in daemon mode.
> 
> >>James
> 
> 
> Is there anyway to get OpenVPN to do the routes before changing into nobody?
> 
> Thanks,
> 
> Doug
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
> 



-- 




____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users