Authentification Failed

[hot22shot]

Hello,

I can't connect anymore with my vpn provider (nordvpn).
My credentials are OK (tested with the mobile app on my phone).
But since 1/2 days all I have is :

---Checking for optional scripts---
---No optional script found, continuing---
---Taking ownership of data...---
---Starting...---
The use of ROUTE or -r may no longer be needed, try it without!
2023-06-29 16:23:42 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2023-06-29 16:23:42 WARNING: file '/vpn/vpn.auth' is group or others accessible
2023-06-29 16:23:42 OpenVPN 2.5.1 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on May 14 2021
2023-06-29 16:23:42 library versions: OpenSSL 1.1.1n  15 Mar 2022, LZO 2.10
2023-06-29 16:23:42 WARNING: --ping should normally be used with --ping-restart or --ping-exit
2023-06-29 16:23:42 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-06-29 16:23:42 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
2023-06-29 16:23:42 TCP/UDP: Preserving recently used remote address: [AF_INET]<redacted>
2023-06-29 16:23:42 Socket Buffers: R=[212992->212992] S=[212992->212992]
2023-06-29 16:23:42 UDP link local: (not bound)
2023-06-29 16:23:42 UDP link remote: [AF_INET]<redacted>
2023-06-29 16:23:42 TLS: Initial packet from [AF_INET]<redacted>:1194, sid=5d0bbbd0 2458ebc8
2023-06-29 16:23:42 VERIFY OK: depth=2, C=PA, O=NordVPN, CN=NordVPN Root CA
2023-06-29 16:23:42 VERIFY OK: depth=1, O=NordVPN, CN=NordVPN CA8
2023-06-29 16:23:42 VERIFY KU OK
2023-06-29 16:23:42 Validating certificate extended key usage
2023-06-29 16:23:42 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2023-06-29 16:23:42 VERIFY EKU OK
2023-06-29 16:23:42 VERIFY OK: depth=0, CN=<redacted>.nordvpn.com
2023-06-29 16:23:42 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, 4096 bit RSA
2023-06-29 16:23:42 [<redacted>.nordvpn.com] Peer Connection Initiated with [AF_INET]<redacted>:1194
2023-06-29 16:23:43 SENT CONTROL [<redacted>.nordvpn.com]: 'PUSH_REQUEST' (status=1)
2023-06-29 16:23:48 SENT CONTROL [<redacted>.nordvpn.com]: 'PUSH_REQUEST' (status=1)
2023-06-29 16:23:48 AUTH: Received control message: AUTH_FAILED
2023-06-29 16:23:48 SIGTERM[soft,auth-failure] received, process exiting

Does anyone have a clue how to solve this ?

[ich777]

2023-06-29 16:23:48 AUTH: Received control message: AUTH_FAILED

It seems that the authentication fails, please make sure that your credentials up to date and maybe check the file for the credentials.
I have now a few reports that this container isn't working anymore that great with NordVPN.

[hot22shot]

Yeah I checked the vpn.auth file and it's good, I also tried to pass the credentials directly with VPN_AUTH and got the same result.
Maybe it's time to look for another provider.

[ich777]

I only can tell you that privado.io still works fine.

[hot22shot]

I sent a mail to the support team, I'll see what they answers.
Is there any way to have more details, debug verbose, or anything that could tell me why the authentification fails ?

[ich777]

This is as verbose as it gets. You can try to install the OpenVPN client somewhere locally and try to connect, it should fail with the same message.
I don't know why NordVPN isn't working anymore since I don't have an account to test, I can only assume that they changed anything how they connect or in their ovpn file.

[hot22shot]

Problem solved, I actually got an answer from the support :

Due to the recent change in the authentication process, using your email and password for the manual connection method will no longer work.
 
You will need to use the service credentials.
 
You can find your service credentials by following these steps:
 
1. Please log in to your Nord Account by following this link: https://my.nordaccount.com/dashboard/nordvpn/ 
2. Click on the NordVPN tab on the left panel which is under the Services tab.
3. Scroll down and locate the Manual Setup tab, then click on Set up NordVPN manually:
4. Verify your email by entering the one-time code you will receive in your registered email inbox. If you are unable to find the email, please make sure to also check your spam/junk folder.
5. Copy your service credentials by using the buttons on the right.

And it worked !

[ich777]

Thank you for keeping me up to date and the response!