Re: [gentoo-user] openvpn static ip

["J. Roeleveld" <joost@antarean.org>]

On Friday 26 February 2010 01:39:55 Joseph wrote:
> On 02/25/10 22:17, Xavier Parizet wrote:
> >From what i can see, please try to add full path to the ccd directory in
> >client-config-dir directive on the server path. Also check permissions
> >on that directory. On which user are you running openvpn on the server ?
> >On the client ?
> 
> On client:
> drwxr-xr-x 2 root root 4096 Feb 24 18:49 ccd
> -rw-r--r-- 1 root root 45 Feb 25 12:13 syscon9
> 
> so this looks OK,

From this, it looks like the "syscon9" file is not in the ".../ccd/" 
directory?

Also, isn't this file supposed to be on the server?

> >Can you increase verbosity and see if there is no open fails on the
> >server ? If it works, you should have the following line in server logs:
> >OPTIONS IMPORT: reading client specific options from: [path to
> > ccd]/syscon9 MULTI: Learn: [192.168.139.15] -> syscon9/[ip source:port
> > source]
> 
> I've increased verbosity on server to 9
> but I can not find any phrase in the serer log file: "fails" "IMPORT"
> 
> but I've noticed this section on the server log:
> 
> ...syscon9/68.148.245.78:56172 TEST FILE '/etc/openvpn/ccd/syscon9' [0]
> ...syscon9/68.148.245.78:56172 TEST FILE '/etc/openvpn/ccd/DEFAULT' [0]
> ...syscon9/68.148.245.78:56172 MULTI: Learn: 192.168.139.2 ->
>  syscon9/68.148.245.78:56172
> 
> If I change the directory to "ccd" the log just shows:
> ...syscon9/68.148.245.78:56172 TEST FILE 'ccd/syscon9' [0]
> ...syscon9/68.148.245.78:56172 TEST FILE 'ccd/DEFAULT' [0

This seems to indicate it can't actually find the file 
"/etc/openvpn/ccd/syscon9"

This file needs to be located on the server, not on the client, as it's the 
server that determines the IP-address for the client.

--
Joost