Open GoogleCodeExporter opened 9 years ago
Please anyone
Original comment by pedroam...@gmail.com
on 29 Aug 2008 at 10:14
The plugin currently does not work with OpenVPN using tap(4) bridging. This
functionality should be added.
Original comment by landon.j.fuller@gmail.com
on 30 Nov 2008 at 9:12
I had the same problem, using OpenVPN in brigde mode, with custom client-connect
script and auth-ldap. In this situation, OpenVPN environmental viriable
ifconfig_pool_remote_ip (remoteAddress in auth-ldap) isn't set for
OPENVPN_PLUGIN_CLIENT_{CONNECT,DISCONNECT}, and auth-ldap fails.
Because I use OpenVPN on GNU/Linux, I don't use PFTable, and I wrote attached
patch
to circumvent this problem.
Original comment by comel...@gmail.com
on 29 Apr 2009 at 11:25
Attachments:
thanks for this patch, I use the same configuration (tap bridging and linux)...
Original comment by dro...@gmail.com
on 20 Jul 2010 at 6:15
That patch seems to not apply anymore, or maybe it's factored in, but anyways
the code looks different.
I nevertheless still have this problem. After a while, this plugin just dies
like this.
I have therefore made the following patch to work around this issue. It seems
to work here.
I have also filed this in the Debian bugtrackers, in
http://bugs.debian.org/692936
Original comment by theanar...@gmail.com
on 11 Nov 2012 at 3:27
Attachments:
hello,
I am using openvpn 2.3.2-2 on centos 6 (openvpn-auth-ldap 2.0.3-6 from the epel
repo)
I have similar log files...
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 VERIFY OK: depth=0, C=xxx, O=xxx,
CN=client1
LDAP search failed: No such object
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 PLUGIN_CALL: POST
/usr/lib/openvpn/plugin/lib/openvpn-auth-ldap.so/PLUGIN_AUTH_USER_PASS_VERIFY
status=0
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 TLS: Username/Password
authentication succeeded for username 'username'
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 Data Channel Encrypt: Cipher
'BF-CBC' initialized with 128 bit key
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 Data Channel Encrypt: Using 160
bit message hash 'SHA1' for HMAC authentication
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 Data Channel Decrypt: Cipher
'BF-CBC' initialized with 128 bit key
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 Data Channel Decrypt: Using 160
bit message hash 'SHA1' for HMAC authentication
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 Control Channel: TLSv1, cipher
TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue Jan 21 10:11:49 2014 xxx.xxx.xxx.xxx:1194 [client1] Peer Connection
Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194
No remote address supplied to OpenVPN LDAP Plugin
(OPENVPN_PLUGIN_CLIENT_CONNECT).
Tue Jan 21 10:11:49 2014 client1/xxx.xxx.xxx.xxx:1194 PLUGIN_CALL: POST
/usr/lib/openvpn/plugin/lib/openvpn-auth-ldap.so/PLUGIN_CLIENT_CONNECT status=1
Tue Jan 21 10:11:49 2014 client1/xxx.xxx.xxx.xxx:1194 PLUGIN_CALL: plugin
function PLUGIN_CLIENT_CONNECT failed with status 1:
/usr/lib/openvpn/plugin/lib/openvpn-auth-ldap.so
Tue Jan 21 10:11:49 2014 client1/xxx.xxx.xxx.xxx:1194 WARNING: client-connect
plugin call failed
While I am almost sure the plugin's config is ok (ldapsearch with same params
is ok), ldap responds "LDAP search failed: No such object" and then "No remote
address supplied to OpenVPN LDAP Plugin (OPENVPN_PLUGIN_CLIENT_CONNECT)."
I this a similar error situation ?
thank you
Original comment by alextasi...@gmail.com
on 22 Jan 2014 at 2:53
I applied the patch provided in comment #5 (thanks theanar!!!) and the
authentication on the ldap succeeded (the "OPENVPN_PLUGIN_CLIENT_CONNECT"
disappeared).
The "LDAP search failed: No such object" exists but causing no problems (maybe
the sun ldap I am using causes this).
Shouldn't this patch be factored in the code? (2.0.3 version comes from 2008
and since then there are many fixes) This would be very convenient...
thank you
Original comment by alextasi...@gmail.com
on 30 Jan 2014 at 8:33
How to apply the patches ? can you please provide the steps.
I've just added a pull request (#75) to close this issue.
Original issue reported on code.google.com by
pedroam...@gmail.com
on 22 Aug 2008 at 1:48