[oi-dev] OpenVPN in a local zone

[Sven Schmeling]

Hello,

i have installed OpenVPN in a local zone.

Starting the service with "svcadm enable svc:/network/openvpn:default"
(or rebooting the zone) ends in the maintenance mode:

# svcs openvpn                                 
STATE          STIME    FMRI
maintenance    19:46:37 svc:/network/openvpn:default

cat /var/svc/log/network-openvpn:default.log

[ Jan 18 19:46:37 Enabled. ]
[ Jan 18 19:46:37 Executing start method ("/usr/sbin/openvpn --daemon
openvpn --config '/etc/openvpn/openvpn.conf'"). ]
[ Jan 18 19:46:37 svc.startd could not set context for method:  ]
setppriv: Not owner
[ Jan 18 19:46:37 Method "start" exited with status 96. ]

Hints to add "limitpriv="default,priv_net_rawaccess" to the zone config
are maded but doesn't change the behavior.

Starting openvpn with "/usr/sbin/openvpn --verb 9 --config
'/etc/openvpn/openvpn.conf'" on the command line works fine and
connections are possible.


Any hints about the "setppriv" error?

--------------

pkg info openvpn
Name: network/openvpn
Summary: OpenVPN is a full-featured open source SSL VPN solution
Category: Applications/Internet
State: Installed
Publisher: openindiana.org
Version: 2.4.3
Branch: 2018.0.0.1
Packaging Date: Sun Feb 11 13:19:38 2018
Size: 1.19 MB
FMRI:
pkg://openindiana.org/network/openvpn@2.4.3-2018.0.0.1:20180211T131938Z
Project URL: http://openvpn.net
Source URL:
http://swupdate.openvpn.org/community/releases/openvpn-2.4.3.tar.xz

--------------

Thanks

Sven Schmeling


- -- 
Sven Schmeling, Oldenburg, Germany
mailto:sven.schmeling at schmeling-ol.de




-------------- next part --------------
A non-text attachment was scrubbed...
Name: pEpkey.asc
Type: application/pgp-keys
Size: 3484 bytes
Desc: not available
URL: <http://openindiana.org/pipermail/oi-dev/attachments/20190118/f4876d06/attachment-0004.bin>