[Pkg-utopia-maintainers] Bug#524989: network-manager-openvpn is unable to connect to an openvpn server because of an openvpn bug

[Mathieu Goessens]

Package: network-manager-openvpn
Version: 0.7.1-1
Severity: important

Hi,

Because of the bug #524979 , network-manager may be unable to connect to 
an openvpn server.


You should see this line in logs:
NetworkManager: <info>  VPN connection 'VPN 1' (IP Config Get) timeout 
exceeded.
(despite openvpn establish the connection)


Workaround (dirty) :

earth% LANG=C; sudo dpkg-divert 
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper
Adding `local diversion of 
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper to 
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper.distrib'
earth% sudo cat <<EOF >> 
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper
#!/bin/sh
export trusted_ip=your.server.ip.address
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper.distrib $@
exit 0;
EOF
earth% sudo chmod 755 
/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper

If you are using many hosts you can use:

if [ ifconfig_remote='192.168.10.1 ]; then
   export trusted_ip=your.server.ip.address
fi;

if [ ifconfig_remote='10.23.0.1 ]; then
   export trusted_ip=your.2nd_server.ip.address
fi;

etc...



If you want to see what vars you can access, you can put:
set > /tmp/nm-debug
in the script

Note that the testing version was also unable to connect but i upgraded 
to sid version
before finding the workaround. It May work, but use at your own risk :)
(directory is different, something like /usr/lib/network-manager-openvpn)

Regards,
Mathieu


-- System Information:
Debian Release: squeeze/sid
 APT prefers testing
 APT policy: (990, 'testing'), (990, 'stable'), (500, 'unstable'), (99, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.29-1-686 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages network-manager-openvpn depends on:
ii  libc6                         2.9-4      GNU C Library: Shared 
libraries
ii  libdbus-1-3                   1.2.12-1   simple interprocess 
messaging syst
ii  libdbus-glib-1-2              0.80-3     simple interprocess 
messaging syst
ii  libglib2.0-0                  2.20.0-2   The GLib library of C routines
ii  libnm-glib-vpn0               0.7.1-1    network management 
framework (GLib
ii  libnm-glib0                   0.7.1-1    network management 
framework (GLib
ii  libnm-util1                   0.7.1-1    network management 
framework (shar
ii  openvpn                       2.1~rc11-1 virtual private network daemon

network-manager-openvpn recommends no packages.

network-manager-openvpn suggests no packages.

-- no debconf information