Public bug reported:

I use network-manager to connect to openVPN servers.

First, when adding a new VPN config, entering a login is required, and
we are unable to save if we do not enter a username. This is a security
flaw as we need the ability to enter login and password each and every
time as an option.

Second, I enter a login username, but not a password. On first
connection it asks for a password, but never again. I have never been
asked for a password on the same VPN after entering it the first time.
This persists across reboots also. This is a substantial security flaw,
and this should be an option, not the default behaviour.

ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: network-manager 1.2.6-0ubuntu1.1
ProcVersionSignature: Ubuntu 4.8.0-53.56-generic 4.8.17
Uname: Linux 4.8.0-53-generic x86_64
ApportVersion: 2.20.3-0ubuntu8.3
Architecture: amd64
CurrentDesktop: Unity
Date: Sat May 27 21:35:10 2017
IfupdownConfig:
 # interfaces(5) file used by ifup(8) and ifdown(8)
 auto lo
 iface lo inet loopback
InstallationDate: Installed on 2017-02-18 (99 days ago)
InstallationMedia: Ubuntu 16.10 "Yakkety Yak" - Release amd64 (20161012.2)
NetworkManager.state:
 [main]
 NetworkingEnabled=true
 WirelessEnabled=true
 WWANEnabled=true
SourcePackage: network-manager
UpgradeStatus: No upgrade log present (probably fresh install)
nmcli-dev:
 DEVICE   TYPE      STATE        DBUS-PATH                                  
CONNECTION  CON-UUID                              CON-PATH                      
                     
 tun0     tun       connected    /org/freedesktop/NetworkManager/Devices/4  
tun0        3337e7b3-7794-4539-a5a3-0a534f60800f  
/org/freedesktop/NetworkManager/ActiveConnection/6 
 wlp3s0   wifi      connected    /org/freedesktop/NetworkManager/Devices/0  
notforyou   e8f5ba42-91e9-4755-b1b7-0c030961f69e  
/org/freedesktop/NetworkManager/ActiveConnection/1 
 enp0s25  ethernet  unavailable  /org/freedesktop/NetworkManager/Devices/1  --  
        --                                    --                                
                 
 lo       loopback  unmanaged    /org/freedesktop/NetworkManager/Devices/2  --  
        --                                    --
nmcli-nm:
 RUNNING  VERSION  STATE      STARTUP  CONNECTIVITY  NETWORKING  WIFI-HW  WIFI  
   WWAN-HW  WWAN    
 running  1.2.6    connected  started  full          enabled     enabled  
enabled  enabled  enabled

** Affects: network-manager (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug yakkety

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1694093

Title:
  VPN passwords save when they shouldn't

Status in network-manager package in Ubuntu:
  New

Bug description:
  I use network-manager to connect to openVPN servers.

  First, when adding a new VPN config, entering a login is required, and
  we are unable to save if we do not enter a username. This is a
  security flaw as we need the ability to enter login and password each
  and every time as an option.

  Second, I enter a login username, but not a password. On first
  connection it asks for a password, but never again. I have never been
  asked for a password on the same VPN after entering it the first time.
  This persists across reboots also. This is a substantial security
  flaw, and this should be an option, not the default behaviour.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.10
  Package: network-manager 1.2.6-0ubuntu1.1
  ProcVersionSignature: Ubuntu 4.8.0-53.56-generic 4.8.17
  Uname: Linux 4.8.0-53-generic x86_64
  ApportVersion: 2.20.3-0ubuntu8.3
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Sat May 27 21:35:10 2017
  IfupdownConfig:
   # interfaces(5) file used by ifup(8) and ifdown(8)
   auto lo
   iface lo inet loopback
  InstallationDate: Installed on 2017-02-18 (99 days ago)
  InstallationMedia: Ubuntu 16.10 "Yakkety Yak" - Release amd64 (20161012.2)
  NetworkManager.state:
   [main]
   NetworkingEnabled=true
   WirelessEnabled=true
   WWANEnabled=true
  SourcePackage: network-manager
  UpgradeStatus: No upgrade log present (probably fresh install)
  nmcli-dev:
   DEVICE   TYPE      STATE        DBUS-PATH                                  
CONNECTION  CON-UUID                              CON-PATH                      
                     
   tun0     tun       connected    /org/freedesktop/NetworkManager/Devices/4  
tun0        3337e7b3-7794-4539-a5a3-0a534f60800f  
/org/freedesktop/NetworkManager/ActiveConnection/6 
   wlp3s0   wifi      connected    /org/freedesktop/NetworkManager/Devices/0  
notforyou   e8f5ba42-91e9-4755-b1b7-0c030961f69e  
/org/freedesktop/NetworkManager/ActiveConnection/1 
   enp0s25  ethernet  unavailable  /org/freedesktop/NetworkManager/Devices/1  
--          --                                    --                            
                     
   lo       loopback  unmanaged    /org/freedesktop/NetworkManager/Devices/2  
--          --                                    --
  nmcli-nm:
   RUNNING  VERSION  STATE      STARTUP  CONNECTIVITY  NETWORKING  WIFI-HW  
WIFI     WWAN-HW  WWAN    
   running  1.2.6    connected  started  full          enabled     enabled  
enabled  enabled  enabled

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1694093/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to