You are not logged in.

#1 2009-10-28 20:51:55

darose
Member
Registered: 2004-04-13
Posts: 158

Can't get networkmanager working with openvpn (using static key)

I'm trying to configure networkmanager to open up my VPN connection - using the static/preshared key method - but no dice.  (Although I'm able to connect just fine using openvpn from the command line)  Anyone been able to get this to work and/or have some suggestions?

I've installed the packages networkmanager, networkmanager-openvpn, and nm-applet.  I run nm-applet, and configure the connection, but when I try to launch the connection, it fails.  Log file reads as follows:

Oct 28 16:43:56 daroselin NetworkManager: <info>  Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 19131
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN plugin state changed: 1
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN plugin state changed: 3
Oct 28 16:43:56 daroselin nm-openvpn[19133]: OpenVPN 2.1_rc20 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] built on Oct 18 2009
Oct 28 16:43:56 daroselin nm-openvpn[19133]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Oct 28 16:43:56 daroselin nm-openvpn[19133]: LZO compression initialized
Oct 28 16:43:56 daroselin kernel: tun0: Disabled Privacy Extensions
Oct 28 16:43:56 daroselin nm-openvpn[19133]: TUN/TAP device tun0 opened
Oct 28 16:43:56 daroselin nm-openvpn[19133]: /sbin/ifconfig tun0 10.1.0.2 pointopoint 10.1.0.1 mtu 1500
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN connection 'DARSYS VPN' (Connect) reply received.
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN plugin failed: 2
Oct 28 16:43:56 daroselin nm-openvpn[19133]: /usr/libexec/nm-openvpn-service-openvpn-helper tun0 1500 1545 10.1.0.2 10.1.0.1 init
Oct 28 16:43:56 daroselin nm-openvpn[19133]: Exiting
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN plugin failed: 1
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN plugin state changed: 6
Oct 28 16:43:56 daroselin NetworkManager: <info>  VPN plugin state change reason: 0
Oct 28 16:43:56 daroselin NetworkManager: <WARN>  connection_state_changed(): Could not process the request because no VPN connection was active.
Oct 28 16:43:56 daroselin NetworkManager: <info>  Policy set 'Auto eth0' (eth0) as default for routing and DNS.

Suspiciously, it never seems to try to open a connection to the gateway.  (Note that the gateway's IP address never appears in the log entries.)

I've configured the connection in nm-applet as follows:

Gateway:  <internet IP address of the gateway/server I'm trying to VPN into>
Type:  Static Key
Static Key:  <the static key file>
Key direction:  none
Remote IP address:  10.1.0.1
Local IP address:  10.1.0.2


When I launch openvpn from the command line, the conf file reads as follows:

[darose@daroselin ca]$ cat /etc/openvpn/static-client.conf 
#
# Sample OpenVPN configuration file for
# office using a pre-shared static key.
#
# '#' or ';' may be used to delimit comments.

# Use a dynamic tun device.
# For Linux 2.2 or non-Linux OSes,
# you may want to use an explicit
# unit number such as "tun1".
# OpenVPN also supports virtual
# ethernet "tap" devices.
dev tun

remote <internet IP address of the gateway/server I'm trying to VPN into>

# 10.1.0.1 is our local VPN endpoint (office).
# 10.1.0.2 is our remote VPN endpoint (home).
ifconfig 10.1.0.2 10.1.0.1

# Our up script will establish routes
# once the VPN is alive.
; up ./office.up
#up ./client.up
route 10.0.0.0 255.255.255.0 10.1.0.1

# Our pre-shared static key
secret static.key

# OpenVPN 2.0 uses UDP port 1194 by default
# (official port assignment by iana.org 11/04).
# OpenVPN 1.x uses UDP port 5000 by default.
# Each OpenVPN tunnel must use
# a different port number.
# lport or rport can be used
# to denote different ports
# for local and remote.
; port 1194

# Downgrade UID and GID to
# "nobody" after initialization
# for extra security.
#user nobody
#group nobody

# If you built OpenVPN with
# LZO compression, uncomment
# out the following line.
comp-lzo

# Send a UDP ping to remote once
# every 15 seconds to keep
# stateful firewall connection
# alive.  Uncomment this
# out if you are using a stateful
# firewall.
; ping 15

# Uncomment this section for a more reliable detection when a system
# loses its connection.  For example, dial-ups or laptops that
# travel to other locations.
; ping 15
ping 10
; ping-restart 45
ping-restart 120
;keepalive 10 60
ping-timer-rem
persist-tun
persist-key

# Verbosity level.
# 0 -- quiet except for fatal errors.
# 1 -- mostly quiet, but display non-fatal network errors.
# 3 -- medium output, good for normal operation.
# 9 -- verbose, good for troubleshooting
verb 3
#verb 9

Anyone have any idea what the problem might be here?

Offline

#2 2010-01-14 16:50:47

darose
Member
Registered: 2004-04-13
Posts: 158

Re: Can't get networkmanager working with openvpn (using static key)

Bump.

Anybody?  Bueller?

Offline

#3 2010-01-20 20:11:06

darose
Member
Registered: 2004-04-13
Posts: 158

Re: Can't get networkmanager working with openvpn (using static key)

If anyone's curious, I opened an upstream bug about this:

https://bugzilla.gnome.org/show_bug.cgi?id=606998

Offline

Board footer

Powered by FluxBB