Bug 742845 - Update to 0.9.1.90-git.. breaks VPN connections
Summary: Update to 0.9.1.90-git.. breaks VPN connections
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: NetworkManager
Version: 15
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Dan Williams
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-10-03 05:23 UTC by Amit Shah
Modified: 2012-08-06 20:03 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Amit Shah 2011-10-03 05:23:12 UTC
Description of problem:
1:NetworkManager-0.9.1.90-1.git20110927.fc15.x86_64 updates only NetworkManager and not the -openvpn and -vpnc packages.

After this update, vpn connections set to 'always ask' password don't show up the enter password dialog box.  I don't have vpn connections with a passwd set to check if it breaks them too.

/var/log/messages has this:

Oct  3 10:02:57 amit-x200 NetworkManager[838]: <info> Starting VPN service 'vpnc'...
Oct  3 10:02:57 amit-x200 NetworkManager[838]: <info> VPN service 'vpnc' started (org.freedesktop.NetworkManager.vpnc), PID 2552
Oct  3 10:02:57 amit-x200 NetworkManager[838]: <info> VPN service 'vpnc' appeared; activating connections
Oct  3 10:02:57 amit-x200 NetworkManager[838]: <info> VPN plugin state changed: 1
Oct  3 10:02:57 amit-x200 NetworkManager[838]: <error> [1317616377.436863] [nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2: (6) No agents 
were available for this request.


Oct  3 10:02:59 amit-x200 NetworkManager[838]: <error> [1317616379.345185] [nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2: (6) No agents 
were available for this request.


Oct  3 10:03:01 amit-x200 NetworkManager[838]: <info> VPN service 'openvpn' disappeared

Oct  3 10:03:01 amit-x200 NetworkManager[838]: <info> Starting VPN service 'openvpn'...
Oct  3 10:03:01 amit-x200 NetworkManager[838]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 2554
Oct  3 10:03:01 amit-x200 NetworkManager[838]: <info> VPN service 'openvpn' appeared; activating connections
Oct  3 10:03:01 amit-x200 NetworkManager[838]: <info> VPN plugin state changed: 1
Oct  3 10:03:01 amit-x200 NetworkManager[838]: <error> [1317616381.178317] [nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2: (6) No agents were available for this request.

Oct  3 10:03:05 amit-x200 NetworkManager[838]: <info> VPN service 'vpnc' disappeared
Oct  3 10:03:06 amit-x200 NetworkManager[838]: <info> VPN service 'openvpn' disappeared


Downgrading NetworkManager to 0.9.0-1.fc15.x86_64 from koji fixes this issue.

Comment 1 Jirka Klimes 2011-10-03 13:30:10 UTC
This is caused by crash of nm-applet and thus not providing secrets:
[nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2:
(6) No agents 
The bug is filed as bug 741448.

Update for F15 has been submitted, please test:
https://admin.fedoraproject.org/updates/NetworkManager-0.9.1.90-3.git20110927.fc15

Comment 2 Samuel Tauil 2011-10-04 23:29:25 UTC
I already updated my NetworkManager with:

yum --enablerepo=updates-testing update NetworkManager

and the same error happened again: 


Oct  4 20:21:36 localhost NetworkManager[9431]: <info> Starting VPN service 'vpnc'...
Oct  4 20:21:36 localhost NetworkManager[9431]: <info> VPN service 'vpnc' started (org.freedesktop.NetworkManager.vpnc), PID 9718
Oct  4 20:21:36 localhost NetworkManager[9431]: <info> VPN service 'vpnc' appeared; activating connections
Oct  4 20:21:36 localhost NetworkManager[9431]: <info> VPN plugin state changed: 1
Oct  4 20:21:36 localhost NetworkManager[9431]: <error> [1317770496.559358] [nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2: (6) No agents were available for this request.
Oct  4 20:21:36 localhost NetworkManager[9431]: <info> Policy set 'System eth0' (eth0) as default for IPv4 routing and DNS.
Oct  4 20:21:41 localhost NetworkManager[9431]: <info> VPN service 'vpnc' disappeared


[root@karranca ~]# NetworkManager --version
0.9.1.90-3.git20110927.fc15

Comment 3 Jirka Klimes 2011-10-05 12:25:41 UTC
(In reply to comment #2)
> I already updated my NetworkManager with:
> 
> yum --enablerepo=updates-testing update NetworkManager
> 

Did you restarted NetworkManager? And logged in/out or rebooted, so that new nm-applet is run.

> Oct  4 20:21:36 localhost NetworkManager[9431]: <error> [1317770496.559358]
> [nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2:
> (6) No agents were available for this request.

This indicated that there's no secret agent that could provide secrets.
What configuration do you use? GnomeShell, fallback mode with nm-applet, KDE, ...?
How did you configure your VPN connection - is the password "always ask"?
Would you paste /etc/NetworkManager/system-connections/<your_con_name>.

Comment 4 Samuel Tauil 2011-10-05 13:12:40 UTC
At this time mi Gnome shell was bricked by some update that I have no idea, I'll post the informations that you asked about.

Comment 5 Amit Shah 2011-10-05 17:11:51 UTC
(In reply to comment #3)
> Did you restarted NetworkManager? And logged in/out or rebooted, so that new
> nm-applet is run.

Of course, I had rebooted after the NM upgrade.

> > Oct  4 20:21:36 localhost NetworkManager[9431]: <error> [1317770496.559358]
> > [nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2:
> > (6) No agents were available for this request.
> 
> This indicated that there's no secret agent that could provide secrets.
> What configuration do you use? GnomeShell, fallback mode with nm-applet, KDE,
> ...?

GNOME Shell.

> How did you configure your VPN connection - is the password "always ask"?
> Would you paste /etc/NetworkManager/system-connections/<your_con_name>.

Yes, password is set to always ask.

[connection]
id=[redacted]
uuid=dea58b4a-6e2d-41f5-9d35-d111e5b7b985
type=vpn
permissions=user:amit:;
timestamp=1306165994

[vpn]
service-type=org.freedesktop.NetworkManager.openvpn
connection-type=password
password-flags=3
remote=[redacted]
cipher=AES-256-CBC
reneg-seconds=0
port=443
username=[redacted]
ca=[redacted]
tls-remote=[redacted]

[ipv4]
method=auto
never-default=true

Comment 6 Samuel Tauil 2011-10-05 19:00:51 UTC
After remove and reinstall my gnome shell I realized that the package gnome-shell-extension-mediaplayers have some problem with this patch and I reinstall my gnome-shell and VPN works fine now.

Thanks,
Samuel
samuel

Comment 7 Eric Brown 2011-10-05 22:24:01 UTC
(In reply to comment #1)
> This is caused by crash of nm-applet and thus not providing secrets:
> [nm-vpn-connection.c:882] get_secrets_cb(): Failed to request VPN secrets #2:
> (6) No agents 
> The bug is filed as bug 741448.
> 
> Update for F15 has been submitted, please test:
> https://admin.fedoraproject.org/updates/NetworkManager-0.9.1.90-3.git20110927.fc15

Having the same problem, although it seems to impact not only VPN connections requiring a password (we use RSA 2 factor auth), but also wireless connections requiring a password (also using RSA or any new network that prompts for a pass).  The above test packages seemed to work.

# yum --enablerepo=updates-testing update NetworkManager

From yum.log
Oct 05 17:53:28 Updated: 1:NetworkManager-glib-0.9.1.90-3.git20110927.fc15.x86_64
Oct 05 17:53:34 Updated: 1:NetworkManager-0.9.1.90-3.git20110927.fc15.x86_64
Oct 05 17:53:34 Updated: 1:NetworkManager-gtk-0.9.1.90-3.git20110927.fc15.x86_64
Oct 05 17:53:36 Updated: 1:NetworkManager-gnome-0.9.1.90-3.git20110927.fc15.x86_64

All is well again.  I'm prompted for passwords for both wireless and vpn connections as I was prior to the following packages getting updates this am:

Oct 05 09:55:43 Updated: 1:NetworkManager-glib-0.9.1.90-1.git20110927.fc15.x86_64
Oct 05 09:56:20 Updated: xulrunner-7.0-1.fc15.x86_64
Oct 05 09:56:22 Installed: 1:NetworkManager-gtk-0.9.1.90-1.git20110927.fc15.x86_64
Oct 05 09:56:33 Updated: 1:NetworkManager-0.9.1.90-1.git20110927.fc15.x86_64
Oct 05 09:56:39 Updated: 1:NetworkManager-gnome-0.9.1.90-1.git20110927.fc15.x86_64
Oct 05 09:57:28 Updated: xulrunner-devel-7.0-1.fc15.x86_64
Oct 05 09:57:37 Updated: firefox-7.0-1.fc15.x86_64
Oct 05 09:58:06 Updated: 1:perl-FCGI-0.74-1.fc15.x86_64

Here are the errors I was seeing on trying to connect to wireless:

Oct  5 15:22:55 USER NetworkManager[978]: <info> Activation (wlan0/wireless): access point 'BLAH' has security, but secrets are required.
Oct  5 15:22:55 USER NetworkManager[978]: <info> (wlan0): device state change: config -> need-auth (reason 'none') [50 60 0]
Oct  5 15:22:55 USER NetworkManager[978]: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) complete.
Oct  5 15:22:55 ebrown NetworkManager[978]: <warn> No agents were available for this request.
Oct  5 15:22:55 USER NetworkManager[978]: <info> (wlan0): device state change: need-auth -> failed (reason 'no-secrets') [60 120 7]
Oct  5 15:22:55 USER NetworkManager[978]: <warn> Activation (wlan0) failed for access point (Red Hat)
Oct  5 15:22:55 USER NetworkManager[978]: <info> Marking connection 'BLAH' invalid.
Oct  5 15:22:55 USER NetworkManager[978]: <warn> Activation (wlan0) failed.
Oct  5 15:22:55 USER NetworkManager[978]: <info> (wlan0): device state change: failed -> disconnected (reason 'none') [120 30 0]
Oct  5 15:22:55 USER NetworkManager[978]: <info> (wlan0): deactivating device (reason 'none') [0]

Other logs of nm-applet crashing during the connection attempt:

Oct  5 15:22:44 USER kernel: [ 1974.042637] nm-applet[4237]: segfault at 0 ip 0000003bed20f6ad sp 00007fff564fd440 error 4 in libgobject-2.0.so.0.2800.8[3bed200000+4c000]
Oct  5 15:22:44 USER abrt[4239]: invalid number '/var/spool/abrt'
Oct  5 15:22:44 USER NetworkManager[978]: dbus_g_proxy_cancel_call: assertion `!DBUS_G_PROXY_DESTROYED (proxy)' failed
Oct  5 15:22:44 USER NetworkManager[978]: dbus_g_proxy_call_no_reply: assertion `!DBUS_G_PROXY_DESTROYED (proxy)' failed

Comment 8 Scott Haines 2011-10-07 18:26:43 UTC
Chandra Kannan and I ran into the same problem.  He pointed out if you just restart the applet, it works again.  I gave it a try.

[shaines@shaines-lap ~]$ nm-applet &
[1] 9583
[shaines@shaines-lap ~]$ ** Message: applet now removed from the
notification area
** Message: applet now embedded in the notification area
[shaines@shaines-lap ~]$ 

All works as expected again.  Short term workaround at least.

Comment 9 Eric Brown 2011-10-10 18:04:49 UTC
(In reply to comment #8)
> Chandra Kannan and I ran into the same problem.  He pointed out if you just
> restart the applet, it works again.  I gave it a try.
> 
> [shaines@shaines-lap ~]$ nm-applet &
> [1] 9583
> [shaines@shaines-lap ~]$ ** Message: applet now removed from the
> notification area
> ** Message: applet now embedded in the notification area
> [shaines@shaines-lap ~]$ 
> 
> All works as expected again.  Short term workaround at least.

I was not able to get this to work, as nm-applet would crash with a sig11 at the time, thus me going w/ the testing pkgs.  I did not, however, save any output from the nm-applet crash, nor any trace info (sorry).  That said, so far so good on the testing pkgs.

Comment 10 Fedora End Of Life 2012-08-06 20:03:20 UTC
This message is a notice that Fedora 15 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 15. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained.  At this time, all open bugs with a Fedora 'version'
of '15' have been closed as WONTFIX.

(Please note: Our normal process is to give advanced warning of this 
occurring, but we forgot to do that. A thousand apologies.)

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, feel free to reopen 
this bug and simply change the 'version' to a later Fedora version.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we were unable to fix it before Fedora 15 reached end of life. If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora, you are encouraged to click on 
"Clone This Bug" (top right of this page) and open it against that 
version of Fedora.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 11 Fedora End Of Life 2012-08-06 20:03:21 UTC
This message is a notice that Fedora 15 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 15. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained.  At this time, all open bugs with a Fedora 'version'
of '15' have been closed as WONTFIX.

(Please note: Our normal process is to give advanced warning of this 
occurring, but we forgot to do that. A thousand apologies.)

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, feel free to reopen 
this bug and simply change the 'version' to a later Fedora version.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we were unable to fix it before Fedora 15 reached end of life. If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora, you are encouraged to click on 
"Clone This Bug" (top right of this page) and open it against that 
version of Fedora.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping


Note You need to log in before you can comment on or make changes to this bug.