Re: [Openvpn-devel] ovpn-dco

[Antonio Q. <a...@un...>]

Hi,

Thanks a lot for testing!

On 08/01/2022 08:46, yuanxun wrote:
> HI!
> 
> I am using openvpn and want to test the real data of ovpn-dco in my 
> environment..
> 
> I m having some trouble and don t understand the kernel so seek your help.
> 
> My environment is a centos, 5.4.168-1.el7.elrepo.x86_64. Not sure if 
> anyone has installed successfully in centos.
> 
> And the openvpn process is started successfully, and the main problem is 
> from libnl.
> 
> Libnl version:
> 
> Openvpn.log:
> 
> Under what circumstances is this error displayed and what should I do

Gert, replied to your private email already, and, as he said, you 
probably are dropping privileges to a non-root user.

While this is possible, you need to make sure that openvpn still retains 
CAP_NET_ADMIN, so that it can happily send netlink messages.

The easy solution (At least for testing) would be to not drop privileges 
(i.e. remove --user from your config).

Regards,

-- 
Antonio Quartulli