Re: [Openvpn-users] Problems with ifconfig-pool-persist

[Giancarlo Razzolini <linux-fan@xxxxxxxxxxx>]

Michael Scheidell wrote:
> I don't seem to be able to have openvpn 2.04 write to the
> ifconfig-pool-persist file.
> 
> When it starts, it creates (a blank) one, but never writes to it, ever.
> 
> .conf file:
> (it originally created the file rw------ owned as root.
> I chown[ed] it openvpn:openvpn and chmod[ed] it g+rw and restarted
> openvpn.
> Still won't write to file.
> Syslog shows it ok:
> Jul  3 12:53:54 link openvpn[57009]:   ifconfig_pool_persist_filename =
> './client2ip.txt'
> 
> Tried client2ip.txt  ./client2ip.txt,
> /usr/local/etc/openvpn/client2ip.txt, no good
> (it just creates a 0 byte file, that's it)
> 
> Tried with and without ccd dir directives.
> 
> --- .conf file:
> server 192.168.0.0 255.255.0.0
> proto udp
> float
> dev tun0
> persist-tun
> persist-key
> persist-local-ip
> persist-remote-ip
> ifconfig-pool-persist ./client2ip.txt 60
try to give a full path to the file. I generally use
/etc/openvpn/ifconfig-pool.txt
> reneg-sec 28800
> passtos
> client-to-client
> 
> # fast-io, udp only, not windows, when shape not used.
> fast-io
> mtu-test
> 
> user openvpn
> group openvpn
> keepalive 10 60
> comp-lzo
> 
> # Encryption Settings
> ca ca.crt
> cert gateway.crt
> key gateway.key
> dh dh2048.pem
> tls-auth ta.key 0
> crl-verify crl.pem
> #tried with and without ccd directives, no change
> client-config-dir ccd
> ccd-exclusive
never mix ccd with ifconfig-pool-persist. Weird things can happen. I
actually prefer ccd, because i can assign specific ip's and routes to my
clients. Always give full paths when specifying directories and/or
files. This will surely help you. Even when using a chroot.
> 
> verb 4
> ifconfig-nowarn
> status ./openvpn-status.log

My 2 cents,
-- 
Giancarlo Razzolini
Linux User 172199
Moleque Sem Conteudo Numero #002
Slackware Current
OpenBSD Stable
Snike Tecnologia em Informática
4386 2A6F FFD4 4D5F 5842  6EA0 7ABE BBAB 9C0E 6B85

Attachment: signature.asc
Description: OpenPGP digital signature

Get stuff done quickly with pre-integrated technology to make your job easier

_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users