Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Paul Smedley

Pages: [1] 2 3 ... 31
1
Networking / Re: openvpn configuration?
« on: October 13, 2019, 07:06:26 am »
Hey Dave!

I am using your new 2.4.7 build here on both OS/2 client and server with no issues so far. It's great being able to log on to my home network shares with ArcaMapper anywhere I can connect to the internet.

 There is one minor issue with ArcaMapper (happened with all the OpenVPN builds I've tried) - when started, on the 'Network Neighborhood' tab, all of the SAMBA machines show up, but none of the shares on them. I can mount 'All shares on server' on any of the machines and shares appear when I browse the drive mounted, but no shared folder can be mounted individually. This does not happen when I am connected directly to my LAN at home. Not a big deal, but maybe there is some setting not quite right.... need to read more about OpenVPN

Wow! That was quick! The main reason I had an interest in updating OpenVPN is that I've been using it myself quite a bit recently to connect to my home LAN from remote - mainly from my phone.

Sorry, I can't help with the ArcaMapper issue - I think it's just calling smbtree or smbclient to try and list the available shares...

Thanks for all you do for OS/2!

 PS. - the OpenVPN_src.zip on Hobbes doesn't have the TAP driver source in it?

I wish I had more free time for OS/2 related stuff - life keeps seeming to get in the way :P

Unfortunately OpenVPN_src.zip only has the source for the openvpn client itself, not the tap driver :(

Cheers,

Paul

2
Networking / Re: openvpn configuration?
« on: October 12, 2019, 11:14:01 pm »
Hi All,

I seem to have gotten 2.4.7 running. http://smedley.id.au/tmp/openvpn-2.4.7-os2-20191013.zip

Feedback appreciated.

Cheers,

Paul

3
Networking / Re: openvpn configuration?
« on: October 11, 2019, 11:17:22 pm »
Hi Rich,

Is there a possibility to create a tun driver?
I prefer to set up openvpn servers with tun, less traffic and perhaps better security.

There is definitely a *desire* to create a tun driver - largely for compatability with commercial VPN providers, most of which only support tun.

There's some investigation going on to see what might be required - unfortunately, it seems the source to Pasha's original tap driver has been lost - the original thought was to build on this driver and add the tun part (in a similar way to the win32 openvpn driver).

SO... anything is possible, but don't hold your breath - if a ndis driver is required - there's not many people left with the skills to do this....

Cheers,

Paul.

4
Networking / Re: openvpn configuration?
« on: October 10, 2019, 07:34:09 am »
Quote
That should be addressed (actually just suppressed per WIN32) in http://smedley.id.au/tmp/openvpn-2.3.18-os2-20191009.zip

I downloaded this file, and the Archive Tool says the data is invalid.

There is no file(s) contained in the zip.

Yup, all of a sudden, I can't create a working zip file :/

Edit: fixed now....

5
Networking / Re: openvpn configuration?
« on: October 09, 2019, 10:32:45 am »
BTW, I got Paul's 20191008 version, and it works too, now that I have decoded the instructions. There are a few warning messages, about security, that I need to figure out, but it seems to connect okay.

Assuming you're talking about:
Tue Oct  8 19:06:02 2019 WARNING: file 'pass.txt' is group or others accessible

That should be addressed (actually just suppressed per WIN32) in http://smedley.id.au/tmp/openvpn-2.3.18-os2-20191009.zip

6
Networking / Re: openvpn configuration?
« on: October 08, 2019, 10:55:05 pm »
Hi Bernard,

I tested your version 2.3 and it's working as expected. Thank's for the excelent work.

Great! Next step 2.4.7 - then to try get tun working .....

Cheers,

Paul

7
Networking / Re: openvpn configuration?
« on: October 08, 2019, 10:39:37 am »
With thanks to Rich for some fixes to the default gateway code, the 2.3.18 code seems to be working....

http://smedley.id.au/tmp/openvpn-2.3.18-os2-20191008.zip

Feedback appreciated - this still will only work for providers that use the tap interface....

8
Networking / Re: openvpn configuration?
« on: October 07, 2019, 11:16:01 am »
Hi All,

I managed to build OpenVPN 2.3.18 & 2.4.7 today. I had to add some ipv6 stuff to the libc headers as there's no way to disable ipv6 support in OpenVPN 2.3.x

It's now compiling, but I'm getting some select() errors - I suspect that some sockets are being created using non-ipv4 flags causing 'socket operation on non-socket' errors...

Will try work through it...

Cheers,

Paul

9
Web applications / Re: Migrating Apache Web Server
« on: October 07, 2019, 03:11:50 am »
Hey Neil,

Still no luck on stability. I'm wondering about the server machine being too old.

The symptom is that the machine stops serving. There is no error in the logs that we can see.

This is an IBM MPro with MCP 2r. The owner is reluctant to change things on the machine.

How important would it be to have an rpm/yum Unix compatibility system on the machine? I think it does not, but I will check if that looks like a significant issue.

Apache seems to run for a long time on ArcaOS with yum update to the current level.

The only important things for stability are latest libcx and libc066 DLL's - you shouldn't need a full rpm/yum setup.

Cheers,

Paul.

10
Networking / Re: openvpn configuration?
« on: October 04, 2019, 11:05:08 am »

11
Web applications / Re: How to make php active in Apache
« on: October 04, 2019, 05:09:10 am »
A bit more is needed in httpd.conf than just loading the module.

Most of https://www.thesitewizard.com/php/install-php-5-apache-windows.shtml is relevant -in particular the references to 'AddType application/x-httpd-php .php'

Cheers,

Paul

12
Applications / Re: Database solution for os/2
« on: October 04, 2019, 05:06:25 am »
FWIW - I do have a build of PHP7.3.x available - just not on my public site yet....

13
Networking / Re: openvpn configuration?
« on: October 04, 2019, 05:02:39 am »
Hi Rich!

I wouldn't worry about 'tap' vs 'tun'. Win uses 'tap', so it's going to be supported by commercial providers if they want any customers. Writing a new device driver for 'tun' is a tall order and best avoided if possible.

OK - from my reading I thought tun was more common, but happy to be wrong.


I suspect that this warning is the cause for the misconfiguration:
> WARNING: 'dev-type' is used inconsistently, local='dev-type tap', remote='dev-type tun'

My _guess_ is that there's some code or flag in the Win version that tells the server to use 'tap' during the initial connection setup - code that's being bypassed because Win32 isn't #defined.

If you'd care to share a diff of your changes, I'd be happy to pull the source and start looking.

I forgot to run a diff last night, but the netlabs build source (based on Pasha's original source on hobbes for 2.0.x) is at http://trac.netlabs.org/ports/browser/openvpn/trunk

Cheers,

Paul

14
Networking / Re: openvpn configuration?
« on: October 03, 2019, 04:47:35 am »
Hey Rich,

I'm trying to use Paul's build to connect to a commercial VPN provider but I'm not having any luck (the problems aren't specific to his build - all 3 versions act the same ).

At first I thought it would be easy because the provider (TigerVPN) offers customized '.ovpn' files for each of its servers. After changing "dev tun" to "dev tap", I tried to connect and got this:
Code: [Select]
Wed Oct  2 12:37:36 2019 C:/MPTN/BIN/ifconfig.exe lan1 100.97.0.2 100.97.0.2 netmask 255.255.0.0 mtu 1500 up
sem reset rc=300
Error: Interface is not point-to-point.
Wed Oct  2 12:37:36 2019 OS/2 ifconfig failed: external program did not exit normally


Note that it's supplying both local and remote IPs, rather than just the local address. My guess is that it's trying to configure lan1 as though it were a "tun" device rather than a "tap". Setting "dev-type tap" didn't help. Also, our 'ifconfig' complains if you include "up" when setting the address and netmask, so that's another minor problem.

Next, I tried to do a workaround by having it run a script using the "up" and "ifconfig-noexec" options rather than letting it run 'ifconfig' directly. No such luck, doing so produces this:
Code: [Select]
Wed Oct  2 12:48:30 2019 Assertion failed at misc.c:222

I got the same results regardless of whether I used 'cmd.exe' or 'sh.exe' (and the appropriate type of script). Having it run the same dummy script at an earlier point in the process worked just fine, so the issue isn't OpenVPN's ability to run a script or the script itself.

Finally, I considering writing a wrapper for 'ifconfig' that would fix the command line, but then I discovered that the path to 'ifconfig.exe' appears to be hard-coded as "x:/MPTN/BIN". This makes the wrapper idea impractical because it would affect normal use of 'ifconfig' during startup. (IMHO, the .exe should be found via a PATH search.)

Does anyone have any suggestions on how to get this working?

I had some similar issues attempting connection to a Getflix VPN service, but it seems to connect OK to my local OpenVPN instance running on Ubuntu.

I'm sure I can tweak the code around loading ifconfig.exe - I'll try and remember to zip up the source tonight.

I have no idea how difficult it might be to create a tun driver for OS/2 - from what I've read, almost all VPN services prefer tun to tap - which is awkward as our port only supports tap!

Cheers,

Paul

15
Should be part of linux kernel 5.4 - due before the end of the year... https://itsfoss.com/linux-kernel-5-4/

Pages: [1] 2 3 ... 31