openvpn problems ifconfig:SIOCSIFADDR: permission denied - maemo.org

dabozz | # 1 | 2010-02-10, 19:32 | Report

Hi,
I have problems to connect to my laptop via openvpn with my n900.
here are my config files:
laptop:

Code:

dev tun
remote *****.ath.cx
ifconfig 192.168.2.199 10.1.0.2
secret geheim.key
port 1194
verb 1
keepalive 30 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun

n900:

Code:

dev tun
remote ****.ath.cx
ifconfig 10.1.0.2 192.168.2.199
route 192.168.2.0 255.255.255.0
secret geheim.key
port 1194
verb 1
keepalive 30 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun

the command line says:

Code:

Mon Feb  8 17:32:05 2010 OpenVPN 2.1_rc20 arm-unknown-linux-gnueabi [SSL] [LZO2] [EPOLL] [MH] [PF_INET6] built on Nov 29 2009
Mon Feb  8 17:32:05 2010 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Feb  8 17:32:05 2010 /usr/sbin/openvpn-vulnkey -q geheim.key
Mon Feb  8 17:32:06 2010 ******* WARNING *******: 'geheim.key' cannot be verified as a non-vulnerable key. See 'man openvpn-vulnkey' for details.
Mon Feb  8 17:32:06 2010 WARNING: file 'geheim.key' is group or others accessible
Mon Feb  8 17:32:06 2010 LZO compression initialized
Mon Feb  8 17:32:06 2010 TUN/TAP device tun0 opened
Mon Feb  8 17:32:06 2010 /sbin/ifconfig tun0 10.1.0.2 pointopoint 192.168.2.199 mtu 1500
Mon Feb  8 17:32:06 2010 GID set to nogroup
Mon Feb  8 17:32:06 2010 UID set to nobody
Mon Feb  8 17:32:06 2010 UDPv4 link local (bound): [undef]
Mon Feb  8 17:32:06 2010 UDPv4 link remote: [AF_INET]94.219.202.11:1194

and after ending with ctrl+c:

Code:

^CMon Feb  8 17:33:58 2010 event_wait : Interrupted system call (code=4)
ifconfig: SIOCSIFADDR: Permission denied
Mon Feb  8 17:33:58 2010 Linux ip addr del failed: external program exited with error status: 1
Mon Feb  8 17:33:59 2010 SIGINT[hard,] received, process exiting

does somebody have a solution?

Pretoriano | # 2 | 2010-02-10, 21:50 | Report

Are you executing it as root?

Last edited by Pretoriano; 2010-02-10 at 21:56.

mikkov | # 3 | 2010-02-10, 22:30 | Report

If the permission denied at exit was the only problem, you can get rid of it by not dropping root priviledges (user nobody, group nogroup)

Pretoriano | # 4 | 2010-02-10, 22:34 | Report

Originally Posted by mikkov View Post

If the permission denied at exit was the only problem, you can get rid of it by not dropping root priviledges (user nobody, group nogroup)

I don't think thats the problem, I use openvpn dropping privilegies to nobody and nogroup.
But i'm not and expert

mikkov | # 5 | 2010-02-10, 22:37 | Report

Originally Posted by Pretoriano View Post

I don't think thats the problem, I use openvpn dropping privilegies to nobody and nogroup.
But i'm not and expert

Well he didn't really tell what problem was except in thread title. And that error message should disappear when root priviledges are not dropped. It doesn't really have any effect because "problem" happens when closing the connection.

dabozz | # 6 | 2010-02-11, 10:47 | Report

Hi guys,
I have removed user nobody, group nogroup and the errors disapperared.
I can not connect to my laptop, but there must be other problems.
If I have time, I'll take a look on that

thanks for helping!