On Tue, Sep 30, 2014 at 01:46:43PM +0200, Alberto Gonzalez Iniesta wrote: > On Tue, Sep 30, 2014 at 01:16:07PM +0200, Michael Biebl wrote: > > Am 30.09.2014 um 13:00 schrieb Alberto Gonzalez Iniesta: > > > On Tue, Sep 30, 2014 at 02:18:54AM +0200, Michael Biebl wrote: > > > > >> Sep 30 02:17:30 pluto systemd[1]: [email protected]: main process > > >> exited, code=exited, status=1/FAILURE > > >> Sep 30 02:17:30 pluto systemd[1]: Unit [email protected] entered > > >> failed state. > > >> > > >> So maybe [email protected] doesn't actually support reload and should be > > >> removed there? If not, this failure on reload should probably be tracked > > >> as a separate issue. > > > > > > It's working for me now. Maybe you are using --user without > > > --persistent-foo and the reload fails? I tested with some of my configs > > > (not using --user) and it works fine. > > > > > > user nobody > > group nogroup > > # http://openvpn.net/howto.html#mitm > > remote-cert-tls server > > Any relevant entry in the logs?
Hi Michael, As I suspected the use of --user is the cause of your reload problems. In my tests I had to change the ownership of /run/openvpn to nobody (in order for openvpn to be able to write the status file). You can make that change permanent in /usr/lib/tmpfiles.d/openvpn.conf. You may also need persist-local-ip and persist-remote-ip, plus verify "nobody" user has access to the key file. I'm closing this bug (reload of openvpn service due to missing ExecReload with the upload of the fixed package). Feel free to open a different one for this other issue if you want. Regards, Alberto -- Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico mailto/sip: [email protected] | en GNU/Linux y software libre Encrypted mail preferred | http://inittab.com Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D 4BF2 009B 3375 6B9A AA55 -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
