Re: [gentoo-user] Re: openvpn and ipp.txt

[Bill Kenworthy]

On 04/09/16 11:56, Ian Zimmerman wrote:
> On 2016-09-04 11:38, Bill Kenworthy wrote:
>
>> open vpn is set to run under the openvpn user and group (default
>> gentoo - drop privileges) It also creates a log file with the same
>> privileges as ipp.txt and logging is working ok.  I've tried using
>> /etc/openvpn/ipp.txt (default, both with and without path specifier)
>> and /tmp/ipp.txt.
>
> Well, in my (working) setup I pre-created an empty ipp.txt file with
> permissions such as to allow access by the openvpn user.  Not saying
> this is certainly the cause of your problem, but it may be.
>
> The location+name of the file is configurable with the
> ifconfig-pool-persist option, btw, so set it explicitly if you want to
> be sure it's used.
>

Hi Ian, it wasn’t permissions ... a closer look at detailed logs showed
I had duplicate-cn set (from a long time ago when I was testing) which
stops the persist method from working.

This explains why I new it worked at one point and didn’t know it had
stopped until recently.

Thanks,
BillK