Re: [Openvpn-users] TLS Auth Error: Auth Username/Password verification failed for peer

[Jan J. K. <ja...@ni...>]

Hi Morten,

Morten Christensen wrote:
> Our openvpn-server runs fine for 2 to 3 weeks. Then it suddenly stops 
> to accept connections.
> The log has lines like this:
>
> Wed Mar 20 12:55:10 2013 195.184.117.26:62293 PLUGIN_CALL: POST 
> /usr/lib/openvpn/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=1
>
> Wed Mar 20 12:55:10 2013 195.184.117.26:62293 PLUGIN_CALL: plugin 
> function PLUGIN_AUTH_USER_PASS_VERIFY failed with status 1: 
> /usr/lib/openvpn/openvpn-auth-pam.so
>
> Wed Mar 20 12:55:10 2013 195.184.117.26:62293 TLS Auth Error: Auth 
> Username/Password verification failed for peer
>
>
> The server accepts connections again, when I manually restarts the 
> openvnp daemon.
>
> The server is a Ubuntu 10.04 LTS which uses OpenVPN 2.1.0 from 2010.
> Will a newer Ubuntu VM with a newer OpenVPN be more stable, or do you 
> have other solutions?
>

openvpn 2.1.0 is very old and is  no longer supported; I'd recommend 
upgrading to openvpn 2.2.2 or 2.3.0 . This can be done on Ubuntu 10 by 
building openvpn by yourself, or you can upgrade the OS at the same time.

Things that stop working "after a while" are especially tricky to 
troubleshoot, hence I'd suggest to do the upgrade first and then try again.
Also, try increasing the verbosity on the openvpn server (verb 5 ) to 
see what is happening during the auth-pam process. Is pam itself not 
responding properly? what do you see in the corresponding system log 
files (/var/log/messages or /var/log/daemon, depends a bit on the distro).

HTH,

JJK