OpenWrt Forum Archive

Topic: openvpn igonres "user" and "group" options

The content of this topic has been archived on 15 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi, I have installed openvpn and anything seems to work fine except I set "user" and "group" to nobody/nogroup but according to ps openvpn still  runs under root. How can I run openvpn under nobody user? I quess I can alter init.d script and su to nobody prior running openvpn, but I think I will run in some problems with initializing tun. Thx.

I have find out so /etc/config/openvpn IS NOT openvpn config file, its config file for its init script and "user" and "group" options are probably not  implemented although some others are so its little confusing. If you want to use this options you have to pass config file to openvn like this:
option 'config' '/path/config_file

This way the "user" and "group" options works.

krotus wrote:

I have find out so /etc/config/openvpn IS NOT openvpn config file, its config file for its init script and "user" and "group" options are probably not  implemented although some others are so its little confusing

The config is handled through UCI, have a look at /etc/config/openvpn. If you want to enable the legacy config file, look under the custom_config section and set "enable" to 1. My advice, though, is to create a new config subsection to store your settings.

The discussion might have continued from here.