Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I am trying to install OpenVPN Server with PPTP type enabled, so that only using username/password someone can have my network access. But my OpenVPN Access server is not allowing me to login via the weblink, how can i fix it?

Problem:

Browsing https://192.168.1.13:943/admin/ 

Permission Denied
> 
> You are not authorized to use the Admin UI
> 
> You do not have Administrative permission Retry Login

Installing OpenVPN as:

Step 1: 

$ apt-get install openvpn openssl
$ cp /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/
$ cd /etc/openvpn/

Step 2: 

$ mkdir keys
$ vim vars (edit the last section)
export KEY_COUNTRY="BE"
export KEY_PROVINCE="BE"
 ....
$ source ./vars
$ ./clean-all
$ ./build-ca
$ ./build-key-server server
$ ./build-key client
$ ./build-dh
$ ls
01.pem  ca.key    demo.csr  dh1024.pem  index.txt.attr      index.txt.old  serial.old  server.csr
02.pem  ca.crt            demo.crt  demo.key  index.txt   index.txt.attr.old  serial         server.crt  server.key

Step 3: 

$ vim /etc/openvpn/server.conf
dev tun
proto tcp
port 1194    
# Annoying files
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh1024.pem    
# OpenVPN username ownership
user nobody
group nogroup    
# Any private subnet not currently in use
server 10.44.77.0 255.255.255.0    
# do not know what is it for!!
persist-key
persist-tun        
#status openvpn-status.log
verb 3    
# Act as DHCP router
client-to-client
push "dhcp-option DOMAIN ###.###.###.###" # Server public IP or domain name
push "dhcp-option DNS 208.67.222.222" # Primary dns server (opendns shown)
push "dhcp-option DNS 208.67.220.220" # Secondary dns server (opendns shown)
push "redirect-gateway" # Directs all traffic through your VPN    
#log-append /var/log/openvpn
#comp-lzo

Step 4: 

$ /etc/sysctl.conf
net.ipv4.ip_forward = 1    
$ /etc/init.d/openvpn restart
  • As we can see it made a new tun0 so my VPN server is running

Now, thats not enough, i want to manage it more easy way/lazy way so i installed OpenVPN Access server + some tools

$ apt-get install gadmin-openvpn-client gadmin-openvpn-server
$ google-chrome http://openvpn.net/index.php/access-server/download-openvpn-as-sw/113.html?osfamily=Ubuntu
$ dpkg -i /home/sun/Downloads/openvpn-as-1.8.5-Ubuntu12.amd_64.deb

Now after installing this OpenVPN Access Server i have a long list as bellow:

$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN qlen 1000...
48: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
50: as0t1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 200
... lot more...

Now, the main goal was to have that web link accessible but failing with systems username/passwords.

share|improve this question
add comment

1 Answer

OpenVPN is the rubish VPN server they came out to develop. They do not follow any other hardware standards its like OpenVPN to OpenVPN as a result the real PPTP cant be done to have compatible interconnect with Cisco/Windows/Juniper/Draytek routers.

So to get benifit from OpenVPN try to get OpenVPN Access Server which is not free for enterprise use.

share|improve this answer
    
Couldn't that be reworded as "Anything but openvpn to openvpn is a pain. You should really look in to openswan." and placed as a comment? –  hbdgaf Oct 16 '13 at 23:21
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.