kylemanna / docker-openvpn

🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA
https://hub.docker.com/r/kylemanna/openvpn/
MIT License
8.62k stars 2.37k forks source link

Unable to connect on VPN server with google 2FA #746

Open Dieterm5 opened 1 year ago

Dieterm5 commented 1 year ago

Hi everyone

I've been trying for days to be able to connect to my VPN server with google 2FA. I've followed every step and everything works without 2FA, and when I reconfigure everything over again but with google 2FA

Followed steps:

OVPN_DATA="ovpn-data-example"
docker volume create --name $OVPN_DATA
docker run -v $OVPN_DATA:/etc/openvpn --rm kylemanna/openvpn ovpn_genconfig -u udp://VPN.SERVERNAME.COM -2
docker run -v $OVPN_DATA:/etc/openvpn --rm -it kylemanna/openvpn ovpn_initpki
docker run -v $OVPN_DATA:/etc/openvpn -d -p 1194:1194/udp --cap-add=NET_ADMIN kylemanna/openvpn
docker run -v $OVPN_DATA:/etc/openvpn --rm -it kylemanna/openvpn easyrsa build-client-full CLIENTNAME nopass
docker run -v $OVPN_DATA:/etc/openvpn --rm -it kylemanna/openvpn ovpn_otp_user CLIENTNAME

google-authenticator --time-based --disallow-reuse --force --rate-limit=3 --rate-time=30 --window-size=3 \
    -l "${1}@${OVPN_CN}" -s /etc/openvpn/otp/${1}.google_authenticator

docker run -v $OVPN_DATA:/etc/openvpn --rm -it kylemanna/openvpn ovpn_getclient CLIENTNAME > CLIENTNAME.ovpn

Pamtester says everything is OK

In my logs on the server it says:

Could not create temporary file '/tmp/openvpn_acf_78c265702ae917f36e22368e66075c2a.tmp': Permission denied (errno=13)
TLS Auth Error (verify_user_pass_plugin): could not create deferred auth control file
TLS Auth Error: Auth Username/Password verification failed for peer

I've tried to give permissions on /tmp directory, but nothing helps...

What am I doing wrong?

(Sorry for broken english)