|
|
On 11/8/05, Edson <4lists@xxxxxxxxx> wrote:
> For the second problem (dropping privileges) I suggest You to use the
> "openvpn-down-root" that is included with the source code in the plugin
> "down-root" directory. It's use is very simple and works for me.
>
> Edson.
>
> > -----Original Message-----
> > From: openvpn-users-admin@xxxxxxxxxxxxxxxxxxxxx [mailto:openvpn-users-
> > admin@xxxxxxxxxxxxxxxxxxxxx] On Behalf Of Dave Page
> > Sent: terça-feira, 8 de novembro de 2005 13:28
> > To: Cyber Dog
> > Cc: openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> > Subject: Re: [Openvpn-users] Route deletion fails on restart of OpenVPN
> > server.
> >
> > Cyber Dog wrote:
> >
> > > Nov 7 14:22:12 localhost ovpn-server[7174]: route del -net
> > > 192.168.5.0 netmask 255.255.255.0
> > > Nov 7 14:22:12 localhost ovpn-server[7174]: ERROR: Linux route delete
> > > command failed: shell command exited with error status: 7
> > > Nov 7 14:22:12 localhost ovpn-server[7174]: Closing TUN/TAP interface
> > > Nov 7 14:22:12 localhost ovpn-server[7174]: SIGTERM[hard,] received,
> > > process exiting
> >
> > > As I stated, this crashes the restart script and it fails to actually
> > > _start_ again afterward. Is anyone else familiar with this problem?
> > > Thanks...
> >
> > There are actually two problems here, both listed on the Debian Bug
> > Tracking System [1]. The restart part of the initscript failing is
> > covered by bug #317339 [2] and is a simple fix. The second is covered by
> > bug #309781 [3] among others, and is probably caused by OpenVPN dropping
> > privileges. I'm not aware of a workaround for this currently.
> >
> > Dave
> >
> > [1]
> > http://bugs.debian.org/cgi-
> > bin/pkgreport.cgi?which=pkg&data=openvpn&archive=no&dist=stable
> > [2] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=317339
> > [3] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=309781
>
Thanks for the info. I created a simple patch that (I believe) fixes
the init script exiting problem. I submitted it to the Debian bug
tracker. I'll attach it incase anyone else is interested.
Attachment:
openvpn.diff
Description: Binary data
|