Jump to content

macester

Community Developer
  • Posts

    102
  • Joined

  • Last visited

Posts posted by macester

  1. On 7/23/2017 at 10:48 PM, johng1290 said:

    ad to reinstall open VPN on my UnRaid all of a sudden iOS devices cannot access the internet.  Everything else is working fine.  It worked before i re-installed it so I doubt its my router

    Dont know if its till a problem? but he latest docker i did work on all platforms i tested it on? but (dosent play nice with kvm/docker on the same bridge witch macvlan something brakes not much I can do, packages get stuck in limbo(works with OVS so kernel/package related ) )

  2. On 7/27/2017 at 6:58 PM, EgillSkallagrimsson said:

    I'm having some trouble getting qbittorrent running. It was working fine but we had a power outage and now the it hangs at "*** Running /etc/my_init.d/10_config.sh...
    Checking if Torrent config exist, if not creating it". I've tried removing the docker and deleting the config directory and it still won't get past that spot. Any help would be appreciated.

     

    edit: Well deleting /etc/my_init.d/10_config.sh (appeared to just be a config file check) out of the container got it to run again. Would like a solution that survives a docker upgrade though......

    Dont use qbit myself, if you still use? it i can build a new one.

  3. On 12/20/2017 at 10:43 AM, nuhll said:

    Hi, could you please disable mail if i disable mail? :D

     

    I disabled it and still i get:

    Dec 20 00:20:01 1e39b5376f82 /USR/SBIN/CRON[3010]: (smmsp) CMD (test -x /etc/init.d/sendmail && /usr/share/sendmail/sendmail cron-msp)
    Dec 20 00:40:01 1e39b5376f82 /USR/SBIN/CRON[3026]: (smmsp) CMD (test -x /etc/init.d/sendmail && /usr/share/sendmail/sendmail cron-msp)
    Dec 20 01:00:01 1e39b5376f82 /USR/SBIN/CRON[3042]: (smmsp) CMD (test -x /etc/init.d/sendmail && /usr/share/sendmail/sendmail cron-msp)

     

    Haven´t checket in here for along time sorry(work, life and not beeing on unraid).

    This should just be a "false/positive" since sendmail is installed, the messages you see would normaly go to the root user (but could prly fix it if the log is bothering ppl ;)

  4. Excellent tip, thanks!

     

    I got OpenVPN-AS working - I deleted the docker image, increased sized to 15GB (just to be safe), restarted and just re-added all the containers.

     

    I had 10gb and 8gb were full however it was still causing the error.  After re-install, it's still showing 6gb usage but no errors with OpenVPN.

     

    In addition to your tip aptalca, I installed cAdvisor before starting all of this which let me see that some dockers and templates I had removed were still taking up space...just tips for anyone else in the future that might have issues like this in the future.

     

    Ya that's what i had found as well on google but it didn't seem right necessarily given the situation, I've got 10GB allocated as a docker 8GB used so I would assume 2GB was enough.

     

    As an aside, what's the best way to 'clean' a docker image?  I don't believe the containers I have installed should take up 8GB but I have added/removed some over the course of time.

     

    Current:

    CouchPotato

    NZBGet

    OpenVPN-AS

    PlexMediaServer

    PlexPy

    PlexRequest

    Sonaar

     

    I'll try to start fresh, see what happens, and report back, thanks!

     

    The only thing I could find about that error seems to be that i can occur when disk is full.

     

    Hows the space of your docker.img?

     

    Other then that all I can sugest is to remove the image and config and see if that helps.

    See the first post on this thread, it might help: http://lime-technology.com/forum/index.php?topic=45249.0

     

    Nice too hear it worked out!

     

    I had to try to reproduce the "bug" and it was quite easy.

     

    A docker image of only 2gb and only openvpn-as installed reproduced the same error.

    So I installed an ubuntu vm and tried the same, when disk space got below 2gb I got the same error.

     

    Guess thats the limit =P

  5. 7. Went and did a connectivity test, all errors...

    8. Tried accessing https://externalIP:943 and got an 'Internal Server Error' with this "CPage error in CLogin/locateChild"

     

    The connectivity test will fail, due to it being behind nat(router). Will still work though.

     

    Have you tried connecting to your external ip from another network? lets say your phone on 3g/4g?

     

    Some routers dosent allow for connecting to your own external ip, due to a "nat loop" I know moast asus routers come with a function called nat-loopback to make this possible.

  6. Hi macester,

     

    I noticed that you bumped up the phusion baseimage to the latest only to revert it a day or two later. Just out of curiosity, was there an issue with the latest baseimage?

     

    I was considering updating my dockers but wanted to make sure it works fine.

     

    Thanks

     

    Heya,

     

    Due to this "https://github.com/phusion/baseimage-docker/issues/267" doing an apt-get upgrade fixes it i guess.

     

    Normally not a problem but had i client connected with the wrong user details and filled up syslog, my docker used about 4gigs of ram ;(

     

    //mace

     

     

  7. I have created an apps share inside which I have created a folder called VPN. When setting up the container, this is the directory i set for config. It is on disk 1. I have set it to be shared only over SMB to public. And I have not allowed the Apps share top directory to be split across disks.

     

    openvpnas.log - http://pastebin.com/ZHJLpMef

     

    I telnet ed in and entered the commands you suggested, I got the message that the password was successfully changed too. But I still cant log in using the new password. The error is the same. I can see this in the log - Admin UI access denied to user admin (not a superuser)

     

    I noticed that admin user is not properly set when it was installed,

    I had this happen when i used symlinks in traversed directories, I set up my share on disk1 as defualt the only thing I changed was just include disk1 then exlude all the other disks that worked for me.

     

    you could try that and reinstall it.

     

    You could also try and to as i posted before with ssh but add the command to make superuser admin.

     

    docker exec -it OpenVPN-AS bash (change OpenVPN-AS to the name of your docker)
    
    /usr/local/openvpn_as/scripts/sacli -u admin -k prop_superuser -v true UserPropPut
    /usr/local/openvpn_as/scripts/sacli -u admin --new_pass MyNewPassword123 SetLocalPassword (change MyNewPassword123 to your new pass)
    

     

    Then restart the docker.

  8. Apologies for the incorrect information.

     

    The second server on which I am installing does not have a cache drive. The docker image and apps folder both reside on disk 1 which is an array drive. Is this a problem?

     

    That looks as it should, I tried setting this up on my own disk1 to see if something messed up the symlinks and it is working booth trough "/mnt/user/disk1" and "/mnt/disk1/.

     

    How have you setup the "appdata" share?

     

    Could you paste the log from the appdata directory "/config/logs/openvpnas.log"

     

    Can you try to set the admin password to see if there are eny permission issues:

     

    ssh to your server

    docker exec -it OpenVPN-AS bash (change OpenVPN-AS to the name of your docker)
    
    /usr/local/openvpn_as/scripts/sacli -u admin --new_pass MyNewPassword123 SetLocalPassword (change MyNewPassword123 to your new pass)
    

     

  9. I will get the logs tomorrow.

     

    My config directory is /mnt/user/Apps/openVPN

     

    Apps is a cache-only share.

     

    I am using the same folder on first server also and that's fine.

     

    I dont think I have any prior install on the box. I just downloaded and installed it afresh.

     

    Try "/mnt/cache/Apps/openVPN" thought i had these issues solved but maby not...

  10. I am setting up Open VPN on the second box. On first start, when I try to login using admin and openvpn as the user:pass, it accepts it but does not take me to the web UI. Instead it gives me an error -

     

    Permission Denied

     

    You are not authorized to use the Admin UI

     

    You do not have Administrative permission

    Retry Login

     

    Could you paste the logs?

     

    Have you used openvpn before on this box? cleared the old config?

     

    Tried useing /mnt/cache/ instead of /mnt/cache/user for config directory?

  11. -Got to your server with your browser and login with your credentials, when you see the page on a windows computer to download the client instead hit the  refresh button in your browser and alot more options will be avaible

     

    -At the bottom there will be an option "Yourself (user-locked profile)" download that .opvn file. (rename it to something like office.ovpn)

     

    -Next download the full openvpn client at https://openvpn.net/index.php/open-source/downloads.html

     

    -Copy your office.ovpn file to "C:\Program Files\OpenVPN\config"

     

    -And ofc copy the .ovpn file from your home setup to

     

    -Restart the client

     

    -Havent tested it but should be the way its done

     

     

    No idea about the duckdns stuff dont use it myself.

     

  12. 3. You always have forward a port for vpn (unless your gateway is running it) and that's considered safe as long as that is the only port open

    It's only as safe as the VPN server that answers on that port. If a flaw in the VPN package is found and you don't update to patch it, then it's no longer safe.

     

    However, it's by far safer than opening things up in general, and you only have one application to audit for security flaws and updates.

     

    I'm assuming the docker automatically updates itself! Is that adequate security?

     

    And that's not the only open port. In fact there are 3 for Open VPN itself, right? And plus I have another open for Plex, one more for transmission etc. How does that affect the scenario?

     

    I´m updating the docker as soon as there are updates, booth for the "os" base-docker and "openvpn-as", as for security moore secure the alot of home routers and businesses out there with that update scheme.

     

    Well it all depends on plex and transmissions in this case...

  13. I just installed this too, and it was a breeze! Thanks for the super work!

     

    Just a few questions since this is the first time I have done this ever:

     

    1. Currently I am entering my external ip address as the server address, but this is gonna change at some point. So I need DDNS also to be set up. Now where do I do this? Does it have to be on my router or on the server? Cos I see a no-ip docker too.

     

    2. What are the advantages or disadvantages of having open vpn on my server rather than the router?

     

    3. I have read a lot that port forwarding is very dangerous. And that VPNs are relatively much safer. But we did have to forward a few ports to get the VPN working. So where does this leave us on the safety front?

     

    1. In this case if you mean you enter you externatl ip in the server configuration, it dosent mather beacuse this is only for the certificate and since it is selfsigned the address really dosent mather. then what aptalca said.

     

    2. What aptalca said, however the "openvpn procces" is single threaded so moore GHZ in this case is prfered, also if you have a modern cpu with "aes-ni" instruction you might wanna change the encryption to "AES" fo a little speed boost and better encryption.

     

    3. Port forwarding isent dangerous at all, it all depends what you can reach on them and if you run a vpn on the gateway the ports are still "forwarded" or rather open in the firewall. With these home routers things like certificates/openvpn dont have the best update scheme.

  14. So I have the VPN running, I can connect from my phone and I can access transmission using 192.168.0.10:9091 or couchpotato using 5050 but I can't open plex on :32400/manage or 192.168.0.10 which is the unRAID web UI?!? Why this selective behaviour?

     

    Also, I assumed that I would be able to access the SMB shares on the server just as I can when at home but I cannot connect to \\192.168.0.10 from within Windows explorer. Is this normal?

     

    Dont think that is the right address for plex (/web/index.html), no idea about unraid ui.

     

    Have you routed your home lan in the route section? Do the remote lan happen to also be "192.168.0.0/24"?. (this might also be the cause on unraid ip not responding)

     

    With questions like theese you will probably always get a better response from the openvpn forums. (due to openvpn-as has comercial support they tend to answear thoose questions a tad quicker).

  15. Well,

     

    I guess docker is better in the case of beeing more portable with the settings "configuration" could easily be moved.

     

    As for unRAID you will not "clutter" up the system with installing a docker and depencencies wont break things as other plugins.

     

     

    As for the differnece I cant say havent tried the plugin but guess its an install of "openvpn" the open source kind...

    This is the "enterprise" kind with two free license that comes with openvpns webui, the main thing I use it for is that it´s very easy to get working with different clients.

     

    Has an client webui, that works with android, ios(ipad works like a charm), and all sorts of clients...

     

    However only comes with two licences or rather two user can be connected at the same time, as for reaching your lan and recources i made i quick guide in the first post is a mather of 2-3 clicks..

     

    //mace

  16. Openvpn-AS

     

    2015.10.07

    - Fix error that "/mnt/user/(appdata) coulden´t be used.

    Can you elaborate on that? A few of my dockers have the same problem and I'd love to know how to fix it.

     

    Thanks

     

    I´m not 100% sure but it´s only on unRAID this issue exist tried on ubuntu, debian(omv) and centos with a volume on an nfs share.

     

    The issue was for me that i had a directory "/config/etc/socks" (that is symlinked inside the docker) and when openvpn starts it creates some files in the folder and when ever I used /mnt/user/ it couldent write to it (I could however create files manually on host and inside the docker).

     

    If I used /mnt/disk/ it would work,  so I then noticed that while doing this if I exexuted a simple "ls -la" on the share /mnt/user/appdata/openvpn/socks and it would just output that the files dident exists and question marks on the user permissions.

     

    So i did the simple thing since the files in question here dident need permanent storage  and I moved them to a /tmp folder inside the container.

     

    But the only thing I can think of that is causing this is that the /mnt/user share runs through samba? and has an issue with traversing symlinks.

     

     

     

  17. Think I'm the first person to ask a question about the cloudflare DNS container.

     

    Is there anyway to update several subdomains with this?

     

    For instance @, www, owncloud, music, photos?

     

    Tried just about every permutation I can think of with no success.

     

    Contacting the Cloudflare API to determine DNS zone
    DNS zone server.com found
    Trying to determine DNS record ID
    No DNS A record for server.com,www.server.com,requests.server.com,music.server.com,owncloud.server.com,photos.server.com found on 1878709

     

    It's not desparate as I have found another solution, but would prefer to use your container as it's a fair bit more lightweight.

     

    Thanks

     

    No it´s not havent found a good sulution for it, (other then makeing all the other sybdomains a "cname" of the one updated).

     

    //mace

×
×
  • Create New...