Network-manager-openvpn connects but can not be used

Look the problem please.

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please answer these questions:

* What is the output of 'ip route list' after you connect to the VPN?
* Is your connection set to 'Available to all users'?

This will help us to find and resolve the problem.

Thanks

ip route list
83.133.127.104 via 192.168.1.1 dev eth0 proto static
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.14 metric 1
10.11.5.0/24 dev tun0 proto kernel scope link src 10.11.5.75
169.254.0.0/16 dev eth0 scope link metric 1000
default dev tun0 proto static

* Is your connection set to 'Available to all users'?
No, 1 single user, me.

ip route list
178.32.72.64 via 192.168.1.1 dev eth0 proto static
10.10.4.0/24 dev tun0 proto kernel scope link src 10.10.4.40
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.14 metric 1
169.254.0.0/16 dev eth0 scope link metric 1000
default dev tun0 proto static

If I tick the box "available for every user" network-manager does not save the password...

I not speak english very well, I made a video ^^
I also use debian squeeze and I have no problem with network-manager-openvpn 0.8.1-1.

You probably don't want to tick available to all users, it's not going to help you in this case.

If you go under the settings for your connection, then the IPv4 Settings tab and click the Routes button, and tick "Use this connection only for the resources on its network", can you then access the internet correctly?

(In French:)
Dans les paramètres de configuration de la connection, sous l'onglet Paramètres IPv4, puis le bouton Routes; si vous cochez "Utiliser cette connection uniquement ..." (la traduction complète m'échappe), est-ce que la connection VPN vous permet alors d'accéder aux sites internets une fois connectée?

I just check the option, I connect to VPN, but my IP is that of France.

(In French:)
Je viens de cocher l'option, je me connecte au VPN, mais mon IP est celle de la France hors je devrait être en Allemagne par exemple.

Do you get access to the internet as you're expecting though?

There is not much else that can be done. Internet access through the VPN depends on the provider and is outside of the control of Ubuntu or NetworkManager.

No, the problem does not come from my VPN supplier because the files are running debian lenny and I even do a test with another VPN.
The problem is that the team ubuntu put the packages from the GIT and should pose this problem: /

(In French:)
Non le problème ne vient pas de mon fournisseur VPN car les fichiers fonctionnent sous debian squeeze et j'ai même fais un test avec un autre VPN.
Le problème c'est que l'équipe de UBUNTU à mis les paquets du GIT et il doivent poser ce problème :/

I'm on Ubuntu 10.04 and got accepted this morning an update, and now I have the same problem as everyone: Unable to connect to the VPN!
Moreover, this one works very well because my other post ubuntu, which has not been updated to work perfectly.
Of course, I tested the option in the Route button IPv4, but that's exactly the same.

I've the same problem.

If "use this connection only for ressources on this network" is ticked, I can go on Internet but with my own IP (the one from my internet provider). Else, I can't go on Internet.

And in both of them, after a while, my vpn connection disconnected with an error message "VPN connection failed"

I confirm it

With NM in 10.10 if "use this connection only for ressources on this network" is ticked, I can go on Internet but with my own IP (the one from my internet provider). Else, I can't go on Internet.

And in both of them, after a while, my vpn connection disconnected with an error message "VPN connection failed"

It was working fine in 10.04

A user confirm what I have said, namely that there is a problem with the version that is in Ubuntu 10.10
He used an older version on Ubuntu 10.10 and everything works since.

(In French:)
Un utilisateur ma confimer ce que j'ai dit, à savoir qu'il y a bien un problème avec la version qui est dans ubuntu 10.10
Il a utilisé une ancienne version de network-manager sous ubuntu 10.10 et tout fonctionne depuis.

http://forum.ubuntu-fr.org/viewtopic.php?pid=3784446#p3784446

Bug confirm with my 10.10 desktop.

(Every think work fine when i connect to my VPNTunnel (OpenVPN) with 10.04.)

I am seeing the same issue with a new 10.10 build. I import my configs that have been working fine on the last couple Ubuntu versions and OpenVPN says that it connects to the remote server, but I am unable to ping anything on the remote network and after a few minutes (seems to be around 5 minutes) the connection will be terminated with the message "VPN connection failed".

I don't know much about how all this works, but it seems to be connecting. When I do ifconfig after connecting to the remote network I am getting a valid IP on tun0.

Can you guys attach a copy of /var/log/syslog so we can see what's happening in network-manager at the time?

I'm wondering if there wasn't a slight change in the way the config gets imported (e.g. what happens to compression or other settings). Were all the failures happening after importing files from a previous install, or also on upgrades (without reimporting).

For now I have two candidate fixes that were applied upstream: http://git.gnome.org/browse/network-manager-openvpn/commit/?h=NM_0_8&id=5e7a5ababcaa44f59f3844fc86c60d4980f41210 for import/export, and http://git.gnome.org/browse/network-manager-openvpn/commit/?h=NM_0_8&id=bfe5c793262837f3561a3cfbd9355bf00dd75793 for IP configuration. Just trying to determine which is the issue here.

Lucid = good syslog

Maverick = bad syslog

HacKurx,

Please make sure in your config that LZO Compression is enabled (checked) under Advanced. That is, in the French locale: "Utiliser la compression LZO", under "Avancé" in the VPN connection's settings.

Oct 15 20:20:08 Admin nm-openvpn[1613]: WARNING: 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'

This basically means the server expects compression but your VPN connection is not set to do it. It will *always* cause such an issue: the VPN will connect fine but crash after a minute or two.

The vpn connection works fine if I activate LZO Compression, thanks !

In French :
La connexion VPN fonctionne très bien si j'active la compression LZO, merci !

Mathieu,

Checking Use LZO Compression seems to have done the trick for me. I haven't been connected long enough to see if the connection will terminate itself, but I am able to access remote resources.

As stated previously, my problems came after importing the config files on a fresh install. I didn't try to establish a connection on a machine that had been upgraded to 10.10.

Thanks for your work on this! Helps me out a lot!!

why it works in lucid without LZO Compression?

Is that not checked in lucid? I don't have a lucid machine at the moment... I was assuming that Mathieu's assumption was correct that something has changed slightly on the import process.

I can't think of why it would work without LZO compression in Lucid. I'd say it doesn't, that it just gets properly imported (assuming you're importing config files, but so far it looks like that's what's been done in all cases).

There *is* as mentioned above, an issue introduced in Maverick with importing, and it affects precisely comp-lzo, mssfix and auth-user-pass, so that would explain exactly why imported configs would fail to connect. Now that we've figured this out, building a package for the fixes.

Could someone attach a copy of the exported config from Lucid (after removing personal information) so that we have a good test case for SRU testing?

requires creating a free account at:
http://www.ultravpn.fr/account.htm

HacKurx

The vpn connection works fine if I activate LZO Compression, thanks !

yes works fine with me too thanks a lot :D

Mathieu,

I don't have anything that I exported out of Lucid, but I could share the .ovpn file that I imported from. It is the same file that I used for Lucid.

It's all good, we already have one. Now only to upload a package (I will do this on my "tomorrow")

Thanks ^^

This bug was fixed in the package network-manager-openvpn - 0.8.1+git.20100810t173015.1711d04-0ubuntu2

---------------
network-manager-openvpn (0.8.1+git.20100810t173015.1711d04-0ubuntu2) natty; urgency=low

  * Correct the import mechanism to properly handle importing the comp-lzo,
    mssfix and auth parameters which expected an extra space that isn't always
    in an imported config (LP: #655124)
    - add debian/patches/00git-lp655124-import-extra-spaces-5e7a5ab.patch
    - update debian/patches/series
 -- Mathieu Trudel-Lapierre <email address hidden> Tue, 19 Oct 2010 10:18:05 -0400

Accepted network-manager-openvpn into maverick-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

In 0.8.1+git.20100810t173015.1711d04-0ubuntu1.1 :
LZO Compression is still necessary for the connection works in maverick.

In french :
Dans le paquet 0.8.1+git.20100810t173015.1711d04-0ubuntu1.1, on à encore besoin d'activer la compression LZO pour que la connexion VPN puisse fonctionner.

For me the problem also still exists with the package from maverick-proposed. After the import the LZO-Compression isn't enabled as it should like in the import file.

I'm using

0.8.1+git.20100810t173015.1711d04-0ubuntu

and this happened to me. Turning on LZO has fixed the problem on multiple computers.

Setting the maverick task to 'In progress' and tag to v-failed due to the comments 34 and 35.

Looking at this again, but the connection seems to import correctly once I install 0.8.1+git.20100810t173015.1711d04-0ubuntu1.1... I import the client.ovpn file in the attached ultravpn tarball, enter a username and password and save, then going back to it the checkbox is checked (and on initialization NM mentions initializing LZO compression). There has to be some other thing at play.

Reverted farther back to 0.8.1+git.20100810t173015.1711d04-0ubuntu1 even on Natty (so with the latest possible NM), and the LZO compression checkbox doesn't get checked...

HacKurx, could you please try again with version ...-0ubuntu1.1 as it is in maverick-proposed (while it's still there) and attach the logs you get in /var/log/syslog when the connection tries to be established? Please simply import the .ovpn file as is attached to this bug and make no change except for adding your username and password to the imported connection before clicking "Save". Thanks!

Failed SRU in -proposed for three months, removed package.

I can't seem to get this to work at all from here: none of the ports or servers from UltraVPN seem to work. Is anyone able to get this working properly from NM or simply openvpn?

HacKurx, why did you set this task Fix Released for Maverick? Is this working for you now?

For me it works fine now.

I know this is late - but just for clarity this is still not working 100% in Maverick. The fix as mentioned above in disparate places is easy, and I summarise:

1-Go into "Edit connections" and highlight your VPN connection.
2-"VPN Tab", "Advanced" and set "Use LZO compression" to on.
3-"OK"
4-"Ipv4 Settings" Tab, "Routes" and check "Use this connection only for resources on it's network"

You should now be good to go. This took me 2 days trying to fix things server side before I checked it on a Windows box and discovered the server was 100%.

DOH!!!

It would be good if this worked out of the box as many people are stuck on 10.10 until Unity settles down.