[Openvpn-users] windows 2003 service not starting

[Glen]

I have installed OpenVPN GUI 1.0 (2005-04-21) with OpenVPN 2.0 on
several XP boxes and a single 2003 server. The 2003 server is running
sp1 and the most recent updates.

I can start the openvpn service fine on the XP machines but I can't on
the 2003 server machine. I get the following error

<snip>
==> net start "openvpn service"
System error 1068 has occurred.

The dependency service or group failed to start.
</snip>

Any clues, suggestions on what I can do? It appears doesn't even try to
start teh openvpnsrv.exe. Openvpn runs fine when I use it via the
command line i.e. "openvpn.exe my-udp-conf.ovpn".

[Laurent Männlein]

Hi Glen,

I have exactly the same configuration on my site.
I have a Windows 2003 + SP1 and latest updates running as my OpenVPN Server.
All my clients are XP + SP2 and the latest updates too.

The OpenVPN Service is running fine on my Windows 2003 Server. I will have a
look at it tomorrow and will let you know if I can find something special to
configure on your side to make it work too.

FYI, I have installed at first the OpenVPN server 2.0 + GUI 1.0 from the
OpenVPN site. It was the final release and not an RC for both.
Now, due to some issues, I have installed, following James Yonan
recommendations, the latest release (2.0.1 RC3) and it even works better.

Did you try to install this release?
(http://openvpn.net/beta/openvpn-2.0.1_rc3-install.exe)

Laurent.

-----Message d'origine-----
De : openvpn-users-***@lists.sourceforge.net
[mailto:openvpn-users-***@lists.sourceforge.net] De la part de Glen
Envoyé : mercredi 15 juin 2005 20:24
À : openvpn-***@lists.sourceforge.net
Objet : [Openvpn-users] windows 2003 service not starting

I have installed OpenVPN GUI 1.0 (2005-04-21) with OpenVPN 2.0 on
several XP boxes and a single 2003 server. The 2003 server is running
sp1 and the most recent updates.

I can start the openvpn service fine on the XP machines but I can't on
the 2003 server machine. I get the following error

<snip>
==> net start "openvpn service"
System error 1068 has occurred.

The dependency service or group failed to start.
</snip>

Any clues, suggestions on what I can do? It appears doesn't even try to
start teh openvpnsrv.exe. Openvpn runs fine when I use it via the
command line i.e. "openvpn.exe my-udp-conf.ovpn".






-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click

[l***@free.fr]

Quoting Laurent Männlein <***@free.fr>:

Glen,

I have checked my Windows 2003 Server configuration for the OpenVPN
Service and
hereafter is what I have found that might help you:
- The service depends on the "Tap-Win32 Adapter V8".
- The registry values for this service are:
REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService]
"Type"=dword:00000010
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,4f,70,65,\
6e,56,50,4e,5c,62,69,6e,5c,6f,70,65,6e,76,70,6e,73,65,72,76,2e,65,78,65,00
"DisplayName"="OpenVPN Service"
"DependOnService"=hex(7):54,41,50,30,38,30,31,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,65,00,6e,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\Security]
"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,\
00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\Enum]
"0"="Root\\LEGACY_OPENVPNSERVICE\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

You can copy and merge the above reg file as I exported it in RegEdit4
version.

Laurent.

[Glen Marchesani]

Turns out I must have done an old install of openvpn because there is a
TAP service (which is not on any of my other boxes) and a tap0801 (which
is) service.

When I install the service the "DependOnService" points to TAP and not
tap0801. When I manually switch it I get this message when I try to run
the service

==> net start openvpnservice
System error 1075 has occurred.

The dependency service does not exist or has been marked for deletion.


Any ideas? I manually removed the TAP service from the registry
(current control set and all the ControlSet###) and I still get the
message. I get the sneak suspicion that the old TAP is still messing
things up.

Any ideas? Unfortunately this is my production server so I can't go
rebooting it or re-install win2003 :-(

Post by l***@free.fr
Glen,
I have checked my Windows 2003 Server configuration for the OpenVPN
Service and
- The service depends on the "Tap-Win32 Adapter V8".
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService]
"Type"=dword:00000010
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,4f,70,65,\
6e,56,50,4e,5c,62,69,6e,5c,6f,70,65,6e,76,70,6e,73,65,72,76,2e,65,78,65,00
"DisplayName"="OpenVPN Service"
"DependOnService"=hex(7):54,41,50,30,38,30,31,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,65,00,6e,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\Security]
"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,\
00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\Enum]
"0"="Root\\LEGACY_OPENVPNSERVICE\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
You can copy and merge the above reg file as I exported it in RegEdit4
version.
Laurent.
-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click
_______________________________________________
Openvpn-users mailing list
https://lists.sourceforge.net/lists/listinfo/openvpn-users

[l***@free.fr]

Hi Glen,

Ouch ! You touched the registry.... :-(

I hope you did not break something in there for the TapWin32 network adaptor.

To remove this virtual network card you have a tool in the OpenVPN
folder which
is done to help you remove this adaptor. The uninstallation can be done by
typing this:
"C:\Program Files\OpenVPN\bin\tapinstall.exe" remove tap0801

This is the best way to remove all the TapWin32 stuff correctly without
breaking
something in the registry.
If you have saved the registry values you have deleted manualy, I would
recommend you to merge them back and then to uninstall using the sentence I
give you above to uninstall it correctly.

tap0801 is the "driver" or smart name for the TapWin32 adaptor. So this is
normal that the service depends on TAP like on my Windows Server 2003 and not
on tap0801.

The best for you would be to uninstall the TapWin32 adaptor correctly, then to
install the latest version of OpenVPN (2.0.1 RC3) which you can find here:
http://openvpn.net/beta/openvpn-2.0.1_rc3-install.exe

On my site I have installed this version and am using a bridge
connection for my
users.
James Yonan is fixing an issue with the "fragment" option however all
works very
fine.

Laurent.

Post by Glen Marchesani
Turns out I must have done an old install of openvpn because there is
a TAP service (which is not on any of my other boxes) and a tap0801
(which is) service.
When I install the service the "DependOnService" points to TAP and
not tap0801. When I manually switch it I get this message when I try
to run the service
==> net start openvpnservice
System error 1075 has occurred.
The dependency service does not exist or has been marked for deletion.
Any ideas? I manually removed the TAP service from the registry
(current control set and all the ControlSet###) and I still get the
message. I get the sneak suspicion that the old TAP is still messing
things up.
Any ideas? Unfortunately this is my production server so I can't go
rebooting it or re-install win2003 :-(

[Glen Marchesani]

I removed the TAP entry and then added it back when that didn't solve
anything...

I will go about uninstalling everything as you mentioned and install the
latest version...

Post by Laurent Männlein
Hi Glen,
Ouch ! You touched the registry.... :-(
I hope you did not break something in there for the TapWin32 network adaptor.
To remove this virtual network card you have a tool in the OpenVPN
folder which
is done to help you remove this adaptor. The uninstallation can be done by
"C:\Program Files\OpenVPN\bin\tapinstall.exe" remove tap0801
This is the best way to remove all the TapWin32 stuff correctly without
breaking
something in the registry.
If you have saved the registry values you have deleted manualy, I would
recommend you to merge them back and then to uninstall using the sentence I
give you above to uninstall it correctly.
tap0801 is the "driver" or smart name for the TapWin32 adaptor. So this is
normal that the service depends on TAP like on my Windows Server 2003 and not
on tap0801.
The best for you would be to uninstall the TapWin32 adaptor correctly, then to
http://openvpn.net/beta/openvpn-2.0.1_rc3-install.exe
On my site I have installed this version and am using a bridge
connection for my
users.
James Yonan is fixing an issue with the "fragment" option however all
works very
fine.
Laurent.

Post by Glen Marchesani
Turns out I must have done an old install of openvpn because there is
a TAP service (which is not on any of my other boxes) and a tap0801
(which is) service.
When I install the service the "DependOnService" points to TAP and not
tap0801. When I manually switch it I get this message when I try to
run the service
==> net start openvpnservice
System error 1075 has occurred.
The dependency service does not exist or has been marked for deletion.
Any ideas? I manually removed the TAP service from the registry
(current control set and all the ControlSet###) and I still get the
message. I get the sneak suspicion that the old TAP is still messing
things up.
Any ideas? Unfortunately this is my production server so I can't go
rebooting it or re-install win2003 :-(

[James Yonan]

Turns out I must have done an old install of openvpn because there is a=

=20

TAP service (which is not on any of my other boxes) and a tap0801 (which=

=20

is) service.

Older version of OpenVPN (1.x and some of the very early 2.0 betas) used a=
=20
"TAP" service. This was renamed to TAP0801 to work around the "TAP Icon=20
missing from XP SP2 bug".

The OpenVPN 2.0 installer tries to delete the old TAP adapter before=20
installing the TAP0801 adapter.

When I install the service the "DependOnService" points to TAP and not=20
tap0801. When I manually switch it I get this message when I try to run=

=20

the service

The OpenVPN 2.0 service lists TAP0801 as a dependency, not TAP:

In service.h:

// list of service dependencies - "dep1\0dep2\0\0"
#define SZDEPENDENCIES "TAP0801\0\0"

The OpenVPN 2.0 installer also tries to delete the older 1.x service=20
wrapper which listed TAP as a dependency.

James

=3D=3D> net start openvpnservice
System error 1075 has occurred.
=20
The dependency service does not exist or has been marked for deletion.
=20
=20
Any ideas? I manually removed the TAP service from the registry=20
(current control set and all the ControlSet###) and I still get the=20
message. I get the sneak suspicion that the old TAP is still messing=20
things up.
=20
Any ideas? Unfortunately this is my production server so I can't go=20
rebooting it or re-install win2003 :-(
=20
=20

=20
Glen,
=20
I have checked my Windows 2003 Server configuration for the OpenVPN=20
Service and
- The service depends on the "Tap-Win32 Adapter V8".
REGEDIT4
=20
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService]
"Type"=3Ddword:00000010
"Start"=3Ddword:00000002
"ErrorControl"=3Ddword:00000001
"ImagePath"=3Dhex(2):43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c=

,4f,70,65,\=20

=20
6e,56,50,4e,5c,62,69,6e,5c,6f,70,65,6e,76,70,6e,73,65,72,76,2e,65,78,6=

5,00

"DisplayName"=3D"OpenVPN Service"
"DependOnService"=3Dhex(7):54,41,50,30,38,30,31,00,00
"DependOnGroup"=3Dhex(7):00
"ObjectName"=3D"LocalSystem"
"FailureActions"=3Dhex:00,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,=

65,00,6e,\=20

=20
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,0=

0,00

=20
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\Se=

curity]=20

=20
"Security"=3Dhex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,=

00,00,02,\=20

=20
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,0=

0,00,\=20

=20
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,0=

0,00,\=20

=20
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,0=

0,00,\=20

=20
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,0=

0,00,\=20

=20
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,0=

0,01,\=20

=20
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,0=

2,00,\=20

=20
00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,0=

0,00,\=20

=20
01,01,00,00,00,00,00,05,12,00,00,00
=20
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\En=

um]

"0"=3D"Root\\LEGACY_OPENVPNSERVICE\\0000"
"Count"=3Ddword:00000001
"NextInstance"=3Ddword:00000001
=20
You can copy and merge the above reg file as I exported it in RegEdit4=

=20

version.
=20
Laurent.
=20
=20
-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id=16492&op=3Dclick
_______________________________________________
Openvpn-users mailing list
https://lists.sourceforge.net/lists/listinfo/openvpn-users

=20
=20
=20
-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=3D7477&alloc_id=3D16492&op=3Dclic=

k

_______________________________________________
Openvpn-users mailing list
https://lists.sourceforge.net/lists/listinfo/openvpn-users
=20

[Glen Marchesani]

I uninstalled OpenVPN GUI 2.0 then re-installed OpenVPN 2.0 and the
service starts fine and everything works great. Also the strange
registry entries I mentioned previously are now gone.

I am wondering if the OpenVPN GUI installer does the uninstalling that
the OpenVPN installer does.

Post by James Yonan

Post by Glen Marchesani
Turns out I must have done an old install of openvpn because there is a
TAP service (which is not on any of my other boxes) and a tap0801 (which
is) service.

Older version of OpenVPN (1.x and some of the very early 2.0 betas) used a
"TAP" service. This was renamed to TAP0801 to work around the "TAP Icon
missing from XP SP2 bug".
The OpenVPN 2.0 installer tries to delete the old TAP adapter before
installing the TAP0801 adapter.

Post by Glen Marchesani
When I install the service the "DependOnService" points to TAP and not
tap0801. When I manually switch it I get this message when I try to run
the service

// list of service dependencies - "dep1\0dep2\0\0"
#define SZDEPENDENCIES "TAP0801\0\0"
The OpenVPN 2.0 installer also tries to delete the older 1.x service
wrapper which listed TAP as a dependency.
James

Post by Glen Marchesani
==> net start openvpnservice
System error 1075 has occurred.
The dependency service does not exist or has been marked for deletion.
Any ideas? I manually removed the TAP service from the registry
(current control set and all the ControlSet###) and I still get the
message. I get the sneak suspicion that the old TAP is still messing
things up.
Any ideas? Unfortunately this is my production server so I can't go
rebooting it or re-install win2003 :-(

Post by l***@free.fr
Glen,
I have checked my Windows 2003 Server configuration for the OpenVPN
Service and
- The service depends on the "Tap-Win32 Adapter V8".
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService]
"Type"=dword:00000010
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,4f,70,65,\
6e,56,50,4e,5c,62,69,6e,5c,6f,70,65,6e,76,70,6e,73,65,72,76,2e,65,78,65,00
"DisplayName"="OpenVPN Service"
"DependOnService"=hex(7):54,41,50,30,38,30,31,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,65,00,6e,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\Security]
"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,\
00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OpenVPNService\Enum]
"0"="Root\\LEGACY_OPENVPNSERVICE\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
You can copy and merge the above reg file as I exported it in RegEdit4
version.
Laurent.
-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click
_______________________________________________
Openvpn-users mailing list
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Openvpn-users mailing list
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click
_______________________________________________
Openvpn-users mailing list
https://lists.sourceforge.net/lists/listinfo/openvpn-users