Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm getting the following error (client side) when connecting to my OpenVPN server:

AUTH: Received AUTH_FAILED control message

and on the server I get thefollowing error message in teh openvpn logs:

AUTH-PAM: BACKGROUND: user 'myUsername' failed to authenticate: Module is unknown

The system was configured by another sysadmin (who is now gone) and I need to resolve this problem. So I'm not sure how this is configured, but I was told that our openvpn is authenticating against the active directory that we have using winbind.

We've recently moved our active directory server and so this is likely the problem.


  1. How can I confirm that openvpn is using winbind to authenticate users against our active directory?
  2. If I've changed the location (ip address) of the active directory server, where would I need to look to update openvpn/winbind to make this work again?
  3. What other information do I need to look for or provide to debug this issue?
share|improve this question
up vote 2 down vote accepted

My coworker resolved this. The issue was that we had old data in the winbind cache. We cleared the cache at /var/lib/samba and /var/cache/samba then restarted winbind and everything is working again.

share|improve this answer
Yes WinBIND is a POS. Check out this script it can help you push dynamic routes to your clients… – hellomynameisjoel Mar 2 '11 at 4:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.