VPN

[kidwell]

I did a fresh install of Kubuntu 10.04 32bit. I started with a fresh home and everything... all new config files. Without tampering with any config files or anything, I installed KVPNC and could not connect to my server with OpenVPN or PPTP, I install network-manager-gnome, network-manager-gnome-pptp, network-manager-gnome-openvpn, then i tried the KDE versions, then WICD, then the fake TUN module, and so on and so on... i've been over and over the forums, but it seems I must have a different problem, maybe my hardware? The point is, I could connect to my server before the fresh install with OPENVPN and PPTP, and i haven't changed anything on my server. I can ping my server no problem. I can ssh to my server no problem. Any fresh ideas are welcome.

[MoonRise]

Re: VPN

I use KVPNC without issues. What problems are you having with it? What encryption mode and authentication method does the server require? You also need to define a route for it to work properly, so you need to know the remote network's Domain (base network ID) settings.

[kidwell]

Re: VPN

Well, when i've used KVPNC in the past i simply load my config file with the certificates and it works. My home server is ClearOS 5.1 (not sure if your familiar with that) so when i log in with the user on the webmin that is given OPENVPN access, I simply download all the certificates and the config file and then load that in to KVPNC with the wizard and it works out the box. KVPNC looks the same to me, maybe it's changed and not accepting the config file correctly? Long story short i'm no VPN wizard and i'm just a paint by numbers kinda guy when it comes to KVPNC. (I just follow directions) Here is my output.

info: Global configuration loaded.
debug: Profile found: Home
debug: Wallet disabled or not available, reading passwords from config file.
debug: Preserving network environment
debug: Last-used profile found: Home
debug: connectionType raw: 4
debug: Selected connection type: openvpn.
debug: Selected auth type: Certificate.
info: The required daemon (openvpn) is available, connect will be enabled.
debug: Connect try requested, profile: Home, type: OpenVPN
debug: Backup file of /etc/resolv.conf: /root/.kde/share/apps/kvpnc/resolv.conf.before.kvpnc_Home
debug: /etc/resolv.conf backup process started.
debug: openvpn: /usr/sbin/openvpn
debug: Support for TUN/TAP found (compiled into kernel or kernel module already loaded).
debug: Default interface: "wlan0".
debug: "getting IP address from interface" started.
debug: "getting IP address from interface" finished.
debug: IP address of default interface: "192.168.0.105".
debug: OpenVPN major: 2, minor: 1, extra: , extra ver: 0
info: OpenVPN >= 2.1-rc9 detected, adding script security parameter to config.
debug: chmod of /root/.kde/share/apps/kvpnc/openvpn.Home.up (a+x) started.
debug: "chmod" finished.
debug: chmod of /root/.kde/share/apps/kvpnc/openvpn.Home.down (a+x) started.
debug: "chmod" finished.
debug: Default route backup process started.
debug: chmod of /root/.kde/share/apps/kvpnc/openvpn.Home.down (a+x) started.
debug: "chmod" finished.
info: Trying to connect to server "NUNYA.COM" with ...
debug: Setting DNS_UPDATE "Yes".
debug: Openvpn Version: 2.1.0
debug: Starting Openvpn management handler...
debug: [openvpn raw]: Sun May 9 10:09:29 2010 OpenVPN 2.1.0 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jan 26 2010
debug: [openvpn] Sun May 9 10:09:29 2010 OpenVPN 2.1.0 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jan 26 2010
debug: [openvpn]
debug: OpenvpnManagementHandler: start
debug: OpenvpnManagementHandler: Connecting to the OpenVPN manage port (2222)...
debug: OpenvpnManagementHandler: Connecting to the OpenVPN manage port (2222)... host found
debug: OpenvpnManagementHandler Management greeting timer started.
debug: OpenvpnManagementHandler: Connected to the OpenVPN manage port (2222).
debug: OpenvpnManagementHandler raw: >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
debug: OpenvpnManagementHandler: Got greeting from management interface.
debug: OpenvpnManagementHandler raw: >PASSWORD:Need 'Auth' username/password
debug: OpenvpnManagementHandler: got 'need username/password' message
debug: OpenvpnManagementHandler: Send username...
info: Send username...
debug: OpenvpnManagementHandler: username: NUNYA
debug: OpenvpnManagementHandler raw: SUCCESS: 'Auth' username entered, but not yet verified
debug: OpenvpnManagementHandler: got SUCCESS: 'Auth' username entered message
debug: OpenvpnManagementHandler: Send password...
info: Send password...
debug: [openvpn raw]: Sun May 9 10:09:29 2010 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
debug: [openvpn raw]: Sun May 9 10:09:29 2010 /usr/bin/openssl-vulnkey -q -b 2048 -m
debug: OpenvpnManagementHandler raw: SUCCESS: 'Auth' password entered, but not yet verified
debug: OpenvpnManagementHandler: got SUCCESS for user password message
debug: [openvpn] Sun May 9 10:09:29 2010 /usr/bin/openssl-vulnkey -q -b 2048 -m
debug: [openvpn]
debug: [openvpn] Sun May 9 10:09:29 2010 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
debug: [openvpn]
debug: [openvpn raw]: Sun May 9 10:09:29 2010 LZO compression initialized
debug: [openvpn] Sun May 9 10:09:29 2010 LZO compression initialized
debug: [openvpn]
debug: [openvpn raw]: Sun May 9 10:09:30 2010 UDPv4 link local: [undef]
debug: [openvpn] Sun May 9 10:09:30 2010 UDPv4 link local: [undef]
debug: [openvpn raw]: Sun May 9 10:09:30 2010 UDPv4 link remote: [AF_INET]11.11.11.11:1194
debug: [openvpn raw]: Sun May 9 10:09:30 2010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
debug: [openvpn] Sun May 9 10:09:30 2010 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
debug: [openvpn]
debug: [openvpn] Sun May 9 10:09:30 2010 UDPv4 link remote: [AF_INET]11.11.11.11:1194
debug: [openvpn]

and it hangs there till i get this error

TLS key negotiation failed to occur within 60 seconds

and I changed my ip, username and server name in this post for privacy reasons, but they were all correct before i changed them. (as in they matched up)

[MoonRise]

Re: VPN

Hmmm. By the output you were authenticated by the server. I can't tell if you got an IP and other settings. That may be where it is hanging up. I would be at a loss to go further especially since this appears to be OpenVPN. Unfortunately my "expertise" is in M$ VPN as that is what I use @ work and the simple aspect as well with MSCHAP and MSCHAP2. I'll see if I can find something to help.