Re: [Openvpn-users] client-config-dir ignored?

[<rhd...@ri...>]

On February 27, 2013 10:14:27 Jan Just Keijser wrote:
> quick and dirty approach: add
>   ccd-exclusive
> to the server config, restart the server.
> If the client is able to connect then the CCD file is NOT picked up. If
> it is able to connect, then you know it must use the CCD file.

I added this to the server config file and the client is not able to connect 
anymore. Thanks to this, I've figured it out. The permissions on the ccd file 
was correct, but the permissions on the containing directory 
(/etc/openvpn/ccd) was 700. As such, while the user 'root' could read it, the 
user 'nobody' (which OpenVPN runs as) could not, and it was silently ignoring 
it. It would be helpful if OpenVPN warned about this when it detects a 
"Permission denied" error when accessing ccd files.

After changing the permission of /etc/openvpn/ccd to 711, the client can 
connect and gets assigned 10.10.10.25, which is what I wanted.

Thanks for your help!