challenge-response issue when upgrading from 1.10.2 to 1.10.4
When starting VPN connection using command line:
nmcli con up id myvpnname --ask
I noticed that after the upgrade, I was able to connect the first time, but not the second time.
The reason was that the following lines were added to /etc/NetworkManager/system-connections/myvpnname
after being connected:
[vpn-secrets]
challenge-response=xxxxx
I fixed it by removing the challenge-response
line and by adding this new flag to the configuration file: challenge-response-flags=2
.
So with this modified configuration, I am able to connect using nmcli
.
But when I try to connect using KDE plasma-nm GUI (with or without the added challenge-response-flags=2
line), when I try to connect:
- The popup asking for the challenge is displayed,
- I enter the challenge,
- The following lines are added to
/etc/NetworkManager/system-connections/myvpnname
[vpn-secrets]
x-dynamic-challenge-echo:challenge-response=xxxxx
-
nm-openvpn
show the following error after 30s (very approximately):
NetworkManager[....]: <warn> [....] vpn[0x.............,"myvpnname"]: connect timeout exceeded
nm-openvpn[....]: ERROR: could not read Auth username/password/ok/string from management interface
nm-openvpn[....]: Exiting due to fatal error
Edited by Benjamin ROBIN