On 11/14/18 5:43 AM, Stephen Morris wrote:
> On 14/11/18 4:36 am, Samuel Sieb wrote:
>> On 11/13/18 3:07 AM, Ed Greshko wrote:
>>> On 11/13/18 12:39 PM, Samuel Sieb wrote:
>>>> Run "sudo journalctl -b -t openvpn" to find all the journal entries.
>>>
>>> That would actually be....
>>>
>>> journalctl -b -t nm-openvpn
>>
>> Thank you.  I've been running the openvpn client directly from the command 
>> line, so
>> what I wrote works for me.  But I see it might be different if run from 
>> NetworkManager.
>
> Thankyou. I issued the command and got the following output but I'm not sure 
> what it means.
>
>
> -- Logs begin at Wed 2016-01-06 07:29:31 AEDT, end at Wed 2018-11-14 08:36:39 
> AEDT. --
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: OpenVPN 2.4.6
> x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] 
> [MH/PKTINFO] [AEAD]
> built on Apr >
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: library versions: 
> OpenSSL
> 1.1.0i-fips  14 Aug 2018, LZO 2.08
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: the current
> --script-security setting may allow this configuration to call user-defined 
> scripts
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving 
> recently
> used remote address: [AF_INET]199.195.193.181:443
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link local: (not 
> bound)
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link remote:
> [AF_INET]199.195.193.181:443
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: UID/GID 
> downgrade will be
> delayed because of --client, --pull, or --up-delay
> Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu' 
> is used
> inconsistently, local='link-mtu 1558', remote='link-mtu 1557'
> Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo' 
> is present
> in local config but missing in remote config, local='comp-lzo'
> Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection 
> Initiated
> with [AF_INET]199.195.193.181:443
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: TUN/TAP device tun0 
> opened
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]:
> /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name
> org.freedesktop.NetworkManager.openvpn.Conn>
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: GID set to nm-openvpn
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: UID set to nm-openvpn
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: Initialization 
> Sequence Completed
> Nov 14 08:34:06 localhost.localdomain nm-openvpn[3877]: Bad LZO decompression 
> header
> byte: 42
> Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: [VPN] Inactivity 
> timeout
> (--ping-restart), restarting
> Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: 
> SIGUSR1[soft,ping-restart]
> received, process restarting
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: NOTE: the current
> --script-security setting may allow this configuration to call user-defined 
> scripts
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving 
> recently
> used remote address: [AF_INET]199.195.193.181:443
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link local: (not 
> bound)
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link remote:
> [AF_INET]199.195.193.181:443
> Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu' 
> is used
> inconsistently, local='link-mtu 1558', remote='link-mtu 1557'
> Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo' 
> is present
> in local config but missing in remote config, local='comp-lzo'
> Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection 
> Initiated
> with [AF_INET]199.195.193.181:443
> Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: Preserving previous 
> TUN/TAP
> instance: tun0
> Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]:
> /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name
> org.freedesktop.NetworkManager.openvpn.Conn>
> Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: NOTE: Pulled options 
> changed on
> restart, will need to close and reopen TUN/TAP device.
> Nov 14 08:34:22 localhost.localdomain nm-openvpn[3877]: ERROR: Cannot ioctl 
> TUNSETIFF
> tun: Operation not permitted (errno=1)
>
>

Sorry for not mentioning this before.  But I would actually use

journalctl -b -t nm-dispatcher -t nm-openvpn

Anyway, just looking at the above, I would edit my openvpn connection and under 
"Advanced"
I would set "Use LZO compression to "No" as well as unchecking the box.



-- 
Fedora Users - The place to go to beat OT dead horses :-) :-)
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org

Reply via email to