Dan Williams wrote: > On Tue, 2009-03-24 at 20:00 +0100, Patrick Steiner wrote: >> Dan Williams wrote: >>> On Tue, 2009-03-24 at 12:21 -0400, Dan Williams wrote: >>> >>>> On Tue, 2009-03-24 at 17:10 +0100, Patrick Steiner wrote: >>>> >>>>> On Mon, 23 Mar 2009 18:59:16 -0400, Dan Williams <[email protected]> wrote: >>>>> >>>>>> On Mon, 2009-03-23 at 21:27 +0100, Patrick Steiner wrote: >>>>>> >>>>>>> Dan Williams wrote: >>>>>>> >>>>>>>> On Mon, 2009-03-23 at 07:42 +0100, Patrick Steiner wrote: >>>>>>>> >>>>>>>> >>>>>>>>> Dan Williams wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>>> On Fri, 2009-03-13 at 09:15 +0100, Patrick Steiner wrote: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Hi, >>>>>>>>>>> >>>>>>>>>>> i have setup a openvpn tunnel and if i setup this via a simple >>>>>>>>>>> openvpn >>>>>>>>>>> config file all works fine. But if i try to import (or build >>>>>>>>>>> >>>>> from >>>>> >>>>>>>>>>> scratch) to the nm-connection-editor the Local IP Address gets >>>>>>>>>>> lost. It >>>>>>>>>>> also isnt saved into the gconf file. If I open the >>>>>>>>>>> nm-connection-editor >>>>>>>>>>> again I get the following error: >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>> I've just fixed that in the NM openvpn plugin upstream (r55 and >>>>>>>>>> 56), >>>>>>>>>> thanks for pointing it out. Does the static key file get imported >>>>>>>>>> correctly? If not, does it actually exist in the path that config >>>>>>>>>> file >>>>>>>>>> says it does? (ie, if no path is given it would need to be in the >>>>>>>>>> same >>>>>>>>>> directory as the config file, I think). >>>>>>>>>> >>>>>>>>>> Dan >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>> I have tested the latest upstream (r59) now I am able to save the >>>>>>>>> >>>>> the >>>>> >>>>>>>>> local ip. But there is now input field for a remote ip. >>>>>>>>> It also does not set the remote ip if I import a config file. >>>>>>>>> >>>>>>>>> >>>>>>>> Remote IP should map to the "Gateway" box at the top of the VPN page. >>>>>>>> >>>>>>>> Dan >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> No, the gateway is the official ip address and not the ip address of >>>>>>> the openvpn tunnel. >>>>>>> >>>>>> Fixed in openvpn trunk (63) and 0.7 (64). Please test and let me know >>>>>> if this works for you. >>>>>> >>>>> The remote and local ip gets saved now. But here is the next problem. >>>>> >>>>> I get the following error: >>>>> >>>>> WARNING **: <WARN> helper_failed(): nm-openvpn-service-openvpn-helper did >>>>> not receive a valid VPN Gateway from openvpn >>>>> >>>>> this error comes from: >>>>> >>>>> nm-openvpn-service-openvpn-helper.c line 303 (r66) >>>>> >>>>> getenv("trusted_ip") where should this be set? >>>>> >>>> trusted_ip *should* be the same thing you set "remote" to in the config >>>> file. is that not the case? >>>> >>> Erroneous manpages strike again. >>> >>> Looking at the code, it seems that trusted/untrusted may not be set when >>> not using TLS. In that case, can you get a dump of the environment >>> passed to the openvpn 'ipchange' script for your static key case for me >> Sure but I do not know how I can do this. >> >> Can you give me some hints? > > Move /usr/libexec/nm-openvpn-service-openvpn-helper > to /usr/libexec/nm-openvpn-service-openvpn-helper.ORIG, then > make /usr/libexec/nm-openvpn-service-openvpn-helper a short script: > > #!/bin/sh > env > /tmp/openvpn.env > /usr/libexec/nm-openvpn-service-openvpn-helper.ORIG $@ > > and chmod that to 0755, then run the VPN. Grab /tmp/openvpn.env and > mail it to me. Then we can see what openvpn is actually delivering to > the helper. Here is the output of the tmp file: ifconfig_remote=192.168.10.30 ifconfig_local=192.168.10.31 proto_1=udp tun_mtu=1500 script_type=up verb=1 local_port_1=0 dev=tun0 remote_port_1=0 PWD=/root daemon=0 SHLVL=1 script_context=init daemon_log_redirect=0 link_mtu=1545 _=/bin/env
so it looks like the trusted_ip environment variable is not set. patrick _______________________________________________ NetworkManager-list mailing list [email protected] http://mail.gnome.org/mailman/listinfo/networkmanager-list
