Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1641174

Summary: VPN connection cannot be activated with nm-applet
Product: Red Hat Enterprise Linux 7 Reporter: Laszlo Ersek <lersek>
Component: NetworkManagerAssignee: Beniamino Galvani <bgalvani>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: unspecified Docs Contact:
Priority: high    
Version: 7.6-AltCC: amarecek, atragler, bgalvani, blueowl, dcbw, extras-qa, fgiudici, lersek, lkundrak, lrintel, rkhan, salmy, sukulkar, thaller, toneata, vbenes, zkabelac
Target Milestone: rcKeywords: Regression
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: NetworkManager-1.12.0-7.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1608851
: 1641742 1641748 (view as bug list) Environment:
Last Closed: 2019-08-06 13:16:24 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1641742, 1641748    

Description Laszlo Ersek 2018-10-19 19:13:00 UTC
+++ This bug was initially created as a clone of Bug #1608851 +++

* Description:
Attempting to log in to the VPN (openvpn) with nm-applet produces the following error message in the terminal:

> (nm-applet:5103): nm-applet-WARNING **: 20:58:04.836: VPN Connection
> activation failed: (org.freedesktop.NetworkManager.UnknownDevice) Cannot
> specify device when activating VPN

and the local nm-applet menu (on the tray) simply disappears.

* Version-Release number of selected component (if applicable):
NetworkManager-1.12.0-6.el7.aarch64

* How reproducible:
100%

* Steps to Reproduce:
1. start nm-applet from a terminal
2. click the icon on the tray
3. select VPN Connections | <your favorite VPN>

* Actual results:
Error message as described above, and the connection menu simply disappears.

* Expected results:
The VPN connection should be initiated and the password entry dialog should pop up.

* Additional info:

In <https://bugzilla.redhat.com/show_bug.cgi?id=1608851#c2>, Beniamino Galvani wrote that the upstream commit that fixes this is e205664ba8c2, part of NM 1.12.2. Backporting e205664ba8c2 to RHEL-7.6, which is currently based on 1.12.0, looks necessary therefore. (I've checked the RPM changelog up to 1.12.0-6.el7; the commit doesn't appear mentioned.)

Comment 2 Laszlo Ersek 2018-10-19 19:17:33 UTC
Marking this issue as a regression, because I ran into it after upgrading from RHEL-7.5.z to RHEL-7.6:

- 1.10.2-16.el7_5.aarch64 (before)
- 1.12.0-6.el7.aarch64    (after)

Comment 8 Oneata Mircea Teodor 2018-10-22 15:37:45 UTC
This bug has been copied as 7.5 z-stream (EUS) bug #1641742 and now must be
resolved in the current update release, set blocker flag.

--------------------------------------------------------------------------------

                    This bug is a 0day bug. A fix for this bug must be committed to ystream before
                    the fix is delivered via zstream.
                    
                    It is probable there is no git branch on ystream yet. If this is the case,
                    please contact RCM team using Request Tracker tool
                    https://engineering.redhat.com/rt/Ticket/Create.html?Queue=7 and provide them
                    with the following information:
                    * Name of the git repository on Dist-Git
                    * Component
                    * Requested ystream branch
                    * ID of this bug (BZ 1641174)

Comment 9 Beniamino Galvani 2018-10-22 16:30:30 UTC
Reproducer with nmcli:

$ nmcli connection up my-vpn ifname eth0
Error: Connection activation failed: Cannot specify device when activating VPN

Comment 10 Beniamino Galvani 2018-10-22 16:50:13 UTC
CI test could look like:

    @rhbz1641174
    @openvpn @openvpn4
    @openvpn_ipv4_with_device
    Scenario: nmcli - openvpn - add and connect IPv4 connection with device
    * Add a connection named "openvpn" for device "\*" to "openvpn" VPN
    * Use certificate "sample-keys/client.crt" with key "sample-keys/client.key" and authority "sample-keys/ca.crt" for gateway "127.0.0.1" on OpenVPN connection "openvpn"
    * Execute "nmcli connection up openvpn ifname eth0"
    Then "VPN.VPN-STATE:.*VPN connected" is visible with command "nmcli c show openvpn"
    Then "IP4.ADDRESS.*172.31.70.*/32" is visible with command "nmcli c show openvpn"
    Then "IP6.ADDRESS" is not visible with command "nmcli c show openvpn"
     And "default" is visible with command "ip r |grep -v eth0"

Comment 14 Vladimir Benes 2019-05-28 07:30:31 UTC
as covered by zstream bug, no need to verify again, 
https://github.com/NetworkManager/NetworkManager-ci/blob/master/nmcli/features/openvpn.feature#L27

Comment 16 errata-xmlrpc 2019-08-06 13:16:24 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2302