Bug 233657 - net-misc/openvpn-2.1_rc9 broken
|
Bug#:
233657
|
Product: Gentoo Linux
|
Version: unspecified
|
Platform: x86
|
|
OS/Version: Linux
|
Status: RESOLVED
|
Severity: normal
|
Priority: P2
|
|
Resolution: FIXED
|
Assigned To: cedk@gentoo.org
|
Reported By: Patrick.Fourniols@wanadoo.fr
|
|
Component: Unspecified
|
|
|
URL:
|
|
Summary: net-misc/openvpn-2.1_rc9 broken
|
|
Keywords: InCVS
|
|
Status Whiteboard:
|
|
Opened: 2008-08-01 23:47 0000
|
when i start my vpn :
Aug 2 01:31:38 mai openvpn[25261]: UDPv4 link remote: 1.2.3.4:5000
Aug 2 01:31:38 mai openvpn[25261]: Peer Connection Initiated with 1.2.3.4:5000
Aug 2 01:31:38 mai /etc/init.d/fournidist[25243]: WARNING: fournidist has
started, but is inactive
Aug 2 01:31:39 mai openvpn[25261]: TUN/TAP device tun0 opened
Aug 2 01:31:39 mai openvpn[25261]: TUN/TAP TX queue length set to 100
Aug 2 01:31:39 mai openvpn[25261]: /sbin/ifconfig tun0 192.168.52.2
pointopoint 192.168.52.1 mtu 1500
Aug 2 01:31:39 mai openvpn[25261]: /etc/openvpn/up.sh tun0 1500 1544
192.168.52.2 192.168.52.1 init
Aug 2 01:31:39 mai openvpn[25261]: openvpn_execve: external program may not be
called due to setting of --script-security level
Aug 2 01:31:39 mai openvpn[25261]: script failed: external program fork failed
Aug 2 01:31:39 mai openvpn[25261]: Exiting
rc7 worked fine but is gone...
removed all personnal config scripts and backed to sample configs files in
openvpn sample config for static key: allways same answer...
Reproducible: Always
Steps to Reproduce:
1. ;)
2.
3.
Actual Results:
openvpn_execve: external program may not be called due to setting of
--script-security level
????
Expected Results:
working ;)
same on 3 computer... go to bed for now, see tomorow ;)
Please post your `emerge --info' too.
same result trying to start openvpn by hand, seems that openvpn don't permit
calling external script ( here $(SVCNAME)-up.sh...
result: server tunx up but no route, client tunx down ...
have downgraded to 2.0.9 for now, will look further later
I put "--script-security 2" in init script when it uses --up and --down option.
default breakage is not very apparent for startup error messages.
--script-security <n> was added to the openvpn package, see the openvpn man
page for specific details. add script-security <n> to your
/etc/openvpn/openvpn.conf file as appropriate. :)
Can we have some information on what that means and how to deal with that. The
ebuild just silently breaks a user's OpenVPN setup without hinting a word.
*** Bug 234254 has been marked as a duplicate of this bug. ***
