setenv CLIENT_CERT 0 client dev tun proto tcp remote 121.43.121.194 1194 resolv-retry infinite nobind persist-key persist-tun auth-user-pass ns-cert-type server comp-lzo verb 3 auth-nocache reneg-sec 0
以上的×××是我之前搭建的,可以正常连接。
client dev tun proto tcp remote 121.196.197.97 1194 resolv-retry infinite nobind # Downgrade privileges after initialization (non-Windows only) ;user nobody ;group nobody persist-key persist-tun ;htp-proxy-retry # retry on connection failures ;http-proxy [proxy server] [proxy port #] ;mute-replay-warnings remote-cert-tls serve tls-auth ta.key 1 comp-lzo verb 3
这段是另一个×××的配置,然而MAC连接不上,报Connection reset, restarting 之类的错误
废话不多说,直接给解决方案:
# Downgrade privileges after initialization (non-Windows only) user nobody group nobody persist-key persist-tun
user nobody
group nobody
两行开启即可,应该是降级权限解决了问题,但是之前的没有这一行也可以连接,具体原因还没搞清楚。
转载于:https://blog.51cto.com/daydayyiday/1877740