Re: [Openvpn-users] logs entries not as openvpn user

2025-09-20 Thread Dan Langille
On Tue, Sep 9, 2025, at 1:16 PM, Gert Doering wrote: > Hi, > > On Tue, Sep 09, 2025 at 07:07:36AM -0400, Dan Langille wrote: >> That's interesting: >> >> Sep 9 11:06:09 gw01 foo[26475]: my id: uid=0(root) gid=0(wheel) >> groups=0(wheel),5(operator) >> >> OpenVPN runs as root. > > Interesting.

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-20 Thread Dan Langille
On Tue, Sep 9, 2025, at 1:32 AM, Gert Doering wrote: > Hi, > > On Mon, Sep 08, 2025 at 05:28:38PM -0400, Dan Langille wrote: >> >> Sep 8 18:32:02 gw01 foo[38754]: pro06.int.example.org connected with IP >> >> 10.0.0.10 > [..] >> That's the script which produces the foo entry. I see no reason for

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-20 Thread Dan Langille
On Mon, Sep 8, 2025, at 4:38 PM, Gert Doering wrote: > Hi, > > On Mon, Sep 08, 2025 at 04:24:48PM -0400, Dan Langille wrote: >> I'm using openvpn-2.6.14 on FreeBSD 14.2 >> >> I've noticed these log entries: >> >> Sep 8 18:32:02 gw01 openvpn[63572]: pro06.int.example.org/10.0.0.10:64601 >> OPTIO

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-20 Thread Hans via Openvpn-users
uot; mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-users] logs entries not as openvpn user On Tue, Sep 9, 2025, at 2:08 PM, Marek Zarychta via Openvpn-users wrote: > W dniu 9.09.2025 o 19:23, Dan Langille pisze: >> On Tue, Sep 9, 2025, at 1:16 PM, Gert Doering wr

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-18 Thread Gert Doering
Hi, On Tue, Sep 09, 2025 at 02:59:47PM -0400, Dan Langille wrote: > DCO seems to speed things up a little bit. DCO speeds up things significantly while at the same time reducing CPU load. Whether it is a "must have" depends on overall VPN requirements... for a "I need this to securely reach low-

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-17 Thread Jan Just Keijser
Hi Dan, On 08/09/2025 23:28, Dan Langille wrote: On Mon, Sep 8, 2025, at 4:38 PM, Gert Doering wrote: Hi, On Mon, Sep 08, 2025 at 04:24:48PM -0400, Dan Langille wrote: I'm using openvpn-2.6.14 on FreeBSD 14.2 I've noticed these log entries: Sep 8 18:32:02 gw01 openvpn[63572]: pro06.int.exa

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-13 Thread Jochen Bern
On 09.09.25 07:32, Gert Doering wrote: According to "man logger", this is what is running under... -t tag Mark every line in the log with the specified tag rather than the default of current login name. Use -t tag[N] to insert specific decimal process id inste

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-11 Thread Gert Doering
Hi, On Wed, Sep 10, 2025 at 07:05:21AM +, Hans via Openvpn-users wrote: > Speed depends on a lot of things. > DCO only increase speed if you are cpu-core bound. > Else it only lowers the load on your machine (imho). DCO also reduces latency and inter-packet delays, so it depends where your bo

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-09 Thread Dan Langille
On Tue, Sep 9, 2025, at 2:08 PM, Marek Zarychta via Openvpn-users wrote: > W dniu 9.09.2025 o 19:23, Dan Langille pisze: >> On Tue, Sep 9, 2025, at 1:16 PM, Gert Doering wrote: >>> Hi, >>> >>> On Tue, Sep 09, 2025 at 07:07:36AM -0400, Dan Langille wrote: That's interesting: Sep 9 11

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-09 Thread Marek Zarychta via Openvpn-users
W dniu 9.09.2025 o 19:23, Dan Langille pisze: On Tue, Sep 9, 2025, at 1:16 PM, Gert Doering wrote: Hi, On Tue, Sep 09, 2025 at 07:07:36AM -0400, Dan Langille wrote: That's interesting: Sep 9 11:06:09 gw01 foo[26475]: my id: uid=0(root) gid=0(wheel) groups=0(wheel),5(operator) OpenVPN runs

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-09 Thread Marek Zarychta via Openvpn-users
W dniu 9.09.2025 o 19:23, Dan Langille pisze: On Tue, Sep 9, 2025, at 1:16 PM, Gert Doering wrote: Hi, On Tue, Sep 09, 2025 at 07:07:36AM -0400, Dan Langille wrote: That's interesting: Sep 9 11:06:09 gw01 foo[26475]: my id: uid=0(root) gid=0(wheel) groups=0(wheel),5(operator) OpenVPN runs

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-09 Thread Dan Langille
On Tue, Sep 9, 2025, at 1:28 PM, Gert Doering wrote: > Hi, > > On Tue, Sep 09, 2025 at 01:23:23PM -0400, Dan Langille wrote: >> > Interesting. So does "grep foo /etc/passwd" turn up anything? >> >> Yes, it finds the expected user (which is not actually foo). >> >> [17:22 gw01 dvl ~] % grep foo /

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-09 Thread Gert Doering
Hi, On Tue, Sep 09, 2025 at 01:23:23PM -0400, Dan Langille wrote: > > Interesting. So does "grep foo /etc/passwd" turn up anything? > > Yes, it finds the expected user (which is not actually foo). > > [17:22 gw01 dvl ~] % grep foo /etc/passwd > foo:*:1002:1002:User &:/usr/home/foo:/b

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-09 Thread Gert Doering
Hi, On Tue, Sep 09, 2025 at 07:07:36AM -0400, Dan Langille wrote: > That's interesting: > > Sep 9 11:06:09 gw01 foo[26475]: my id: uid=0(root) gid=0(wheel) > groups=0(wheel),5(operator) > > OpenVPN runs as root. Interesting. So does "grep foo /etc/passwd" turn up anything? gert -- "If was

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-09 Thread Dan Langille
On Tue, Sep 9, 2025, at 5:31 AM, Jan Just Keijser wrote: > Hi Dan, > > On 08/09/2025 23:28, Dan Langille wrote: >> On Mon, Sep 8, 2025, at 4:38 PM, Gert Doering wrote: >>> Hi, >>> >>> On Mon, Sep 08, 2025 at 04:24:48PM -0400, Dan Langille wrote: I'm using openvpn-2.6.14 on FreeBSD 14.2

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-08 Thread Gert Doering
Hi, On Mon, Sep 08, 2025 at 05:28:38PM -0400, Dan Langille wrote: > >> Sep 8 18:32:02 gw01 foo[38754]: pro06.int.example.org connected with IP > >> 10.0.0.10 [..] > That's the script which produces the foo entry. I see no reason for it to run > as foo. According to "man logger", this is what i

[Openvpn-users] logs entries not as openvpn user

2025-09-08 Thread Dan Langille
Hello, I'm using openvpn-2.6.14 on FreeBSD 14.2 I've noticed these log entries: Sep 8 18:32:02 gw01 openvpn[63572]: pro06.int.example.org/10.0.0.10:64601 OPTIONS IMPORT: reading client specific options from: /usr/local/etc/openvpn/ccd/pro06.int.example.org Sep 8 18:32:02 gw01 foo[38754]: pro

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-08 Thread Gert Doering
Hi, On Mon, Sep 08, 2025 at 04:24:48PM -0400, Dan Langille wrote: > I'm using openvpn-2.6.14 on FreeBSD 14.2 > > I've noticed these log entries: > > Sep 8 18:32:02 gw01 openvpn[63572]: pro06.int.example.org/10.0.0.10:64601 > OPTIONS IMPORT: reading client specific options from: > /usr/local/e

Re: [Openvpn-users] logs entries not as openvpn user

2025-09-08 Thread Gert Doering
Hi, On Mon, Sep 08, 2025 at 04:24:48PM -0400, Dan Langille wrote: > Why would the second entry be running as user foo? Is there something like --username-as-common-name involved= gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a compu