各位师傅、大侠,本人半路出家,小白一个,对网络方面还不熟悉,现在在做个openvpn实验学习一下,但遇到问题难以解决,已经研究很长一段时间了,逼不得已在此向各位求救,望大家多多指教。本人用的是centos6.3的系统做openvpn+mysql+freeradius+daloradius测试,在公司的一部闲置的电脑里,双网卡,一个网卡的ip是10.30.11.4,另一个网卡是10.30.100.67,现在所有东西都已经按照试验要求配好了,但是认证失败。
客户端的log:
Mon May 26 09:59:39 2014 OpenVPN 2.1_beta7 Win32-MinGW [SSL] [LZO2] built on Nov 12 2005
Mon May 26 09:59:47 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file
Mon May 26 09:59:47 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 26 09:59:47 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Mon May 26 09:59:47 2014 LZO compression initialized
Mon May 26 09:59:47 2014 Control Channel MTU parms [ L:1542 D:166 EF:66 EB:0 ET:0 EL:0 ]
Mon May 26 09:59:47 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Mon May 26 09:59:47 2014 Local Options hash (VER=V4): '504e774e'
Mon May 26 09:59:47 2014 Expected Remote Options hash (VER=V4): '14168603'
Mon May 26 09:59:47 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Mon May 26 09:59:47 2014 UDPv4 link local: [undef]
Mon May 26 09:59:47 2014 UDPv4 link remote: 10.30.100.67:1194
Mon May 26 09:59:47 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 09:59:49 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 09:59:51 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 09:59:53 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 09:59:56 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 09:59:58 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 10:00:01 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 10:00:03 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 10:00:06 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 10:00:08 2014 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Mon May 26 10:00:09 2014 NOTE: --mute triggered...
Mon May 26 10:00:46 2014 18 variation(s) on previous 10 message(s) suppressed by --mute
Mon May 26 10:00:46 2014 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Mon May 26 10:00:46 2014 TLS Error: TLS handshake failed
Mon May 26 10:00:46 2014 TCP/UDP: Closing socket
Mon May 26 10:00:46 2014 SIGUSR1[soft,tls-error] received, process restarting
Mon May 26 10:00:46 2014 Restart pause, 2 second(s)
随便乱输入一个账号密码都会有以上的错误。
但是今天服务端的log没有显示任何内容,下面的log是前天的
SIOCSIFADDR: Permission denied
SIOCSIFFLAGS: Permission denied
Sat May 24 16:58:33 2014 Linux ip addr del failed: external program exited with error status: 255
Sat May 24 16:58:33 2014 PLUGIN_CLOSE: /usr/local/openvpn/radiusplugin.so
Sat May 24 16:58:33 2014 Error: The User is already authenticated. He could not insert in user map. The client connect will fail. In case of rekeying this note is ok.
Sat May 24 16:58:33 2014 Error: The User is already authenticated. He could not insert in user map. The client connect will fail. In case of rekeying this note is ok.
Sat May 24 16:58:33 2014 RADIUS-PLUGIN: FOREGROUND THREAD: Stop signal received.
Sat May 24 16:58:33 2014 RADIUS-PLUGIN: FOREGROUND THREAD: Thread finished.
Sat May 24 16:58:33 2014 RADIUS-PLUGIN: FOREGROUND: DONE.
Sat May 24 16:58:33 2014 SIGTERM[hard,] received, process exiting
希望大家能帮小弟一把,万分感激!
--转自