Probleme openvpn Auth_Failed

bingo · 07. Nov 2015

Hallo an alle....

Habe folgendes Problem mit openvpn auf meine Synology Ds213j
Bekomme keine Verbindung über Internet....

als Client benutze ich galaxy s6 edge mit openvpn für Android.

Als erstes habe ich ein user"galaxy" angelegt mit pass und Privilegien für openvpn

openvpn aktiviert uns dann die Konfigurationsdatei auf pc gespeichert es sind 3 Dateien "ca.crt-openvpn.ovpn und eine txt Datei"
diese habe ich auf mein galaxy runtergeladen und im app openvpn importiert beim starten bekomme ich Fehlermeldung siehe log.

2015-11-07 20:30:25 offizielle Version 0.6.44 läuft auf samsung SM-G925F (universal7420), Android 5.1.1 (LMY47X) API 22, ABI arm64-v8a, (samsung/zeroltexx/zerolte:5.1.1/LMY47X/G925FXXU3COI9:user/release-keys)
2015-11-07 20:30:40 Generiere OpenVPN Konfiguration…
2015-11-07 20:30:42 key_direction = 0
2015-11-07 20:30:42 ciphername_defined = ENABLED
2015-11-07 20:30:42 ciphername = 'BF-CBC'
2015-11-07 20:30:42 authname_defined = ENABLED
2015-11-07 20:30:42 authname = 'SHA1'
2015-11-07 20:30:42 prng_hash = 'SHA1'
2015-11-07 20:30:42 prng_nonce_secret_len = 16
2015-11-07 20:30:42 keysize = 0
2015-11-07 20:30:42 engine = DISABLED
2015-11-07 20:30:42 replay = ENABLED
2015-11-07 20:30:42 mute_replay_warnings = DISABLED
2015-11-07 20:30:42 replay_window = 64
2015-11-07 20:30:42 replay_time = 15
2015-11-07 20:30:42 packet_id_file = '[UNDEF]'
2015-11-07 20:30:42 use_iv = ENABLED
2015-11-07 20:30:42 test_crypto = DISABLED
2015-11-07 20:30:42 tls_server = DISABLED
2015-11-07 20:30:42 tls_client = ENABLED
2015-11-07 20:30:42 key_method = 2
2015-11-07 20:30:42 ca_file = '[[INLINE]]'
2015-11-07 20:30:42 single_session = DISABLED
2015-11-07 20:30:42 push_peer_info = DISABLED
2015-11-07 20:30:42 tls_exit = DISABLED
2015-11-07 20:30:42 tls_auth_file = '[UNDEF]'
2015-11-07 20:30:42 client = ENABLED
2015-11-07 20:30:42 pull = ENABLED
2015-11-07 20:30:42 auth_user_pass_file = 'stdin'
2015-11-07 20:30:42 OpenVPN 2.4-icsopenvpn [git:icsopenvpn_644-31df9c7c9789981f] android-21-arm64-v8a [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH] [IPv6] built on Nov 2 2015
2015-11-07 20:30:42 library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.09
2015-11-07 20:30:42 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket
2015-11-07 20:30:42 MANAGEMENT: CMD 'hold release'
2015-11-07 20:30:42 MANAGEMENT: CMD 'username 'Auth' galaxy'
2015-11-07 20:30:42 MANAGEMENT: CMD 'bytecount 2'
2015-11-07 20:30:42 MANAGEMENT: CMD 'password [...]'
2015-11-07 20:30:42 MANAGEMENT: CMD 'state on'
2015-11-07 20:30:42 MANAGEMENT: CMD 'proxy NONE'
2015-11-07 20:30:42 Netzwerkstatus: CONNECTED LTE to MOBILE internet
2015-11-07 20:30:43 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
2015-11-07 20:30:43 LZO compression initializing
2015-11-07 20:30:43 Control Channel MTU parms [ L:1542 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2015-11-07 20:30:43 MANAGEMENT: >STATE:1446924643,RESOLVE,,,
2015-11-07 20:30:43 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:393 ET:0 EL:3 ]
2015-11-07 20:30:43 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
2015-11-07 20:30:43 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
2015-11-07 20:30:43 TCP/UDP: Preserving recently used remote address: [AF_INET]91.xxx.xxx.xxx:1194
2015-11-07 20:30:43 Socket Buffers: R=[229376->229376] S=[229376->229376]
2015-11-07 20:30:43 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2015-11-07 20:30:43 UDP link local (bound): [AF_INET][undef]:1194
2015-11-07 20:30:43 UDP link remote: [AF_INET]91.xxx.xxx.xxx:1194
2015-11-07 20:30:43 MANAGEMENT: >STATE:1446924643,WAIT,,,
2015-11-07 20:30:43 MANAGEMENT: >STATE:1446924643,AUTH,,,
2015-11-07 20:30:43 TLS: Initial packet from [AF_INET]91.xxx.xxx.xxx:1194, sid=dcce1cfd 55496e7f
2015-11-07 20:30:43 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2015-11-07 20:30:44 VERIFY OK: depth=1, C=DE, ST=nrw, L=bonn, O=meine, OU=nix, CN=bingo, emailAddress=bingo@com.net
2015-11-07 20:30:44 VERIFY OK: depth=0, C=DE, ST=nrw, L=bonn, O=meine, OU=nix, CN=bingo.com, emailAddress=bingo@com.net
2015-11-07 20:30:45 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
2015-11-07 20:30:45 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-11-07 20:30:45 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
2015-11-07 20:30:45 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-11-07 20:30:45 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
2015-11-07 20:30:45 [bingo.com] Peer Connection Initiated with [AF_INET]91.xxx.xxx.xxx:1194
2015-11-07 20:30:46 MANAGEMENT: >STATE:1446924646,GET_CONFIG,,,
2015-11-07 20:30:46 SENT CONTROL [bingo.com]: 'PUSH_REQUEST' (status=1)
2015-11-07 20:30:46 AUTH: Received control message: AUTH_FAILED
2015-11-07 20:30:46 TCP/UDP: Closing socket
2015-11-07 20:30:46 SIGTERM[soft,auth-failure] received, process exiting
2015-11-07 20:30:46 MANAGEMENT: >STATE:1446924646,EXITING,auth-failure,,

wenn ich wlan einschalte auf mein galaxy bekomme ich eine Verbindung über DDNS nicht am router ist udp port 1194 freigegeben

Danke im voraus......