Bug 2432442 - NetworkManager has started requiring user auth before starting vpns
Summary: NetworkManager has started requiring user auth before starting vpns
Keywords:
Status: CLOSED DUPLICATE of bug 2437985
Alias: None
Product: Fedora
Classification: Fedora
Component: NetworkManager
Version: rawhide
Hardware: aarch64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Lubomir Rintel
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-01-23 17:45 UTC by Kevin Fenzi
Modified: 2026-02-16 17:56 UTC (History)
11 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-02-16 17:56:19 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Kevin Fenzi 2026-01-23 17:45:28 UTC
I am not sure when this happened, it's been going on a while now, but finally filing this. 

It used to be from inside a local desktop session if you selected a vpn it would just start and ask you for any creds needed for the connection.

Now it asks for the local user password before allowing the connection. After entering the local user password it asks for any creds needed by the connection. 

This happens in both gnome and kde so I don't think it's a desktop related issue.

Happy to gather logs or try things.

Reproducible: Always

Comment 1 Vít Ondruch 2026-02-06 11:33:54 UTC
Same here. This is reproducible also from command line. This asks for elevated privileges:

~~~
$ nmcli connection up 1\ -\ Red\ Hat\ Global\ VPN --ask 
You need to authenticate to access the Virtual Private Network “1 - Red Hat Global VPN”.
Password (vpn.secrets.password): ••••••••••••••
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/21)
~~~

While the dialog can be workaround by using `sudo`


This is what can be seen in the log:

~~~
úno 06 12:30:29 vondruch-thinkpadx1carbongen13.tpbc.csb NetworkManager[1649]: <info>  [1770377429.0569] agent-manager: agent[5c8d84d5a89f72df,:1.504/nmcli-connect/16025]: agent registered
úno 06 12:30:29 vondruch-thinkpadx1carbongen13.tpbc.csb NetworkManager[1649]: <info>  [1770377429.0584] audit: op="connection-activate" uuid="e69b124b-50a8-4458-8859-5e68c3f19460" name="1 - Red Hat Global VPN" pid=45491 uid=16025 result="fail" reason="Connection '1 - Red Hat Global VPN' is already active"
úno 06 12:30:37 vondruch-thinkpadx1carbongen13.tpbc.csb polkit-agent-helper-1[45464]: pam_sss(polkit-1:auth): authentication success; logname=vondruch uid=16025 euid=0 tty= ruser=vondruch rhost= user=vondruch
úno 06 12:30:37 vondruch-thinkpadx1carbongen13.tpbc.csb audit[45464]: AUDIT1100 pid=45464 uid=16025 auid=16025 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_usertype,pam_usertype,pam_sss acct="vondruch" exe="/usr/lib/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
úno 06 12:30:37 vondruch-thinkpadx1carbongen13.tpbc.csb audit[45464]: AUDIT1101 pid=45464 uid=16025 auid=16025 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_sss,pam_permit acct="vondruch" exe="/usr/lib/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success'
úno 06 12:30:41 vondruch-thinkpadx1carbongen13.tpbc.csb NetworkManager[1649]: <warn>  [1770377441.4063] vpn[0x5603ffe1b370,e69b124b-50a8-4458-8859-5e68c3f19460,"1 - Red Hat Global VPN"]: secrets: failed to request VPN secrets #3: User canceled the secrets request.
~~~

Testing with:

~~~
$ rpm -qf `which nmcli`
NetworkManager-1.55.91-3.fc44.x86_64
~~~

Comment 2 Kevin Fenzi 2026-02-16 17:29:14 UTC
So, is this the same thing as 2437985 ?

Comment 3 Beniamino Galvani 2026-02-16 17:56:19 UTC
yes, closing as duplicate

*** This bug has been marked as a duplicate of bug 2437985 ***


Note You need to log in before you can comment on or make changes to this bug.