Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to install OpenVPN Server with PPTP type enabled, so that only using username/password someone can have my network access. But my OpenVPN Access server is not allowing me to login via the weblink, how can i fix it?



Permission Denied
> You are not authorized to use the Admin UI
> You do not have Administrative permission Retry Login

Installing OpenVPN as:

Step 1: 

$ apt-get install openvpn openssl
$ cp /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/
$ cd /etc/openvpn/

Step 2: 

$ mkdir keys
$ vim vars (edit the last section)
$ source ./vars
$ ./clean-all
$ ./build-ca
$ ./build-key-server server
$ ./build-key client
$ ./build-dh
$ ls
01.pem  ca.key    demo.csr  dh1024.pem  index.txt.attr      index.txt.old  serial.old  server.csr
02.pem  ca.crt            demo.crt  demo.key  index.txt   index.txt.attr.old  serial         server.crt  server.key

Step 3: 

$ vim /etc/openvpn/server.conf
dev tun
proto tcp
port 1194    
# Annoying files
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem    
# OpenVPN username ownership
user nobody
group nogroup    
# Any private subnet not currently in use
# do not know what is it for!!
#status openvpn-status.log
verb 3    
# Act as DHCP router
push "dhcp-option DOMAIN ###.###.###.###" # Server public IP or domain name
push "dhcp-option DNS" # Primary dns server (opendns shown)
push "dhcp-option DNS" # Secondary dns server (opendns shown)
push "redirect-gateway" # Directs all traffic through your VPN    
#log-append /var/log/openvpn

Step 4: 

$ /etc/sysctl.conf
net.ipv4.ip_forward = 1    
$ /etc/init.d/openvpn restart
  • As we can see it made a new tun0 so my VPN server is running

Now, thats not enough, i want to manage it more easy way/lazy way so i installed OpenVPN Access server + some tools

$ apt-get install gadmin-openvpn-client gadmin-openvpn-server
$ google-chrome
$ dpkg -i /home/sun/Downloads/openvpn-as-1.8.5-Ubuntu12.amd_64.deb

Now after installing this OpenVPN Access Server i have a long list as bellow:

$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN qlen 1000...
48: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
50: as0t1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 200
... lot more...

Now, the main goal was to have that web link accessible but failing with systems username/passwords.

share|improve this question

OpenVPN is the rubish VPN server they came out to develop. They do not follow any other hardware standards its like OpenVPN to OpenVPN as a result the real PPTP cant be done to have compatible interconnect with Cisco/Windows/Juniper/Draytek routers.

So to get benifit from OpenVPN try to get OpenVPN Access Server which is not free for enterprise use.

share|improve this answer
Couldn't that be reworded as "Anything but openvpn to openvpn is a pain. You should really look in to openswan." and placed as a comment? – RobotHumans Oct 16 '13 at 23:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.