Bug 790361 - Cannot use my PPTP connection as a user, only root
Summary: Cannot use my PPTP connection as a user, only root
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: NetworkManager-pptp
Version: 16
Hardware: x86_64
OS: Unspecified
unspecified
urgent
Target Milestone: ---
Assignee: Dan Williams
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-14 10:37 UTC by Hervé Rilos
Modified: 2012-02-16 19:48 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-02-16 19:48:46 UTC
Type: ---


Attachments (Terms of Use)

Description Hervé Rilos 2012-02-14 10:37:53 UTC
Description of problem:
I can connect to my VPN server, but I can't route any traffic by my PPP0 interface as a user. Only root can.

Version-Release number of selected component (if applicable):
0.9.0

How reproducible:


Steps to Reproduce:

1. Add a PPPT connection via NetworkManager in a desktop session (opened by a lambda user)

2. Connect to the VPN => Connection successful

3. Open a terminal and ping a remote host in the VPN network


Actual results:
As user, the ping doesn't answer. tcpdump -i ppp0 doesn't show any traffic.
I can't connect to any host.

Expected results:
I should be able to ping any host as user. It works with the root account.

Additional info:
My firewall is disabled, SELinux, too.
]# /usr/libexec/nm-pptp-service --debug
** Message: nm-pptp-service (version 0.9.0) starting...
connection
	name : "connection"
	id : "ISI" (s)
	uuid : "19835a90-3877-4ec0-b361-fd9ec7d573cd" (s)
	type : "vpn" (s)
	permissions : [] (sd)
	autoconnect : FALSE (s)
	timestamp : 1329212460 (s)
	read-only : FALSE (sd)


vpn
	name : "vpn"
	service-type : "org.freedesktop.NetworkManager.pptp" (s)
	user-name : "herve" (s)
	data : [ { 'lcp-echo-interval': 30 }, { 'password-flags': 1 }, { 'require-mppe': yes }, { 'user': USER }, { 'refuse-eap': yes }, { 'refuse-chap': yes }, { 'nobsdcomp': yes }, { 'lcp-echo-failure': 5 }, { 'gateway': XX.XX.XX.XX }, { 'nodeflate': yes }, { 'refuse-pap': yes }, ] (s)
	secrets : [ { 'password': PASSWORD }, ] (s)


ipv4
	name : "ipv4"
	method : "auto" (s)
	dns : [] (s)
	dns-search : [] (sd)
	addresses : [] (s)
	routes : [{ dst = 192.168.200.0, px = 24, nh = 192.168.200.100, mt = 0 }] (s)
	ignore-auto-routes : FALSE (sd)
	ignore-auto-dns : TRUE (s)
	dhcp-client-id : NULL (sd)
	dhcp-send-hostname : TRUE (sd)
	dhcp-hostname : NULL (sd)
	never-default : TRUE (s)
	may-fail : FALSE (sd)


** Message: pppd started with pid 4866
Plugin /usr/lib64/pppd/2.4.5/nm-pptp-pppd-plugin.so loaded.
** Message: nm-pptp-ppp-plugin: (plugin_init): initializing
** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 3 / phase 'serial connection'
using channel 12
Using interface ppp0
Connect: ppp0 <--> /dev/pts/0
** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 5 / phase 'establish'
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x1d03ba3d> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x1d03ba3d> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x1d03ba3d> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x98e16abf> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x98e16abf> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x1d03ba3d> <pcomp> <accomp>]
sent [LCP EchoReq id=0x0 magic=0x1d03ba3d]
** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 6 / phase 'authenticate'
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x1d03ba3d> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x1d03ba3d> <pcomp> <accomp>]
rcvd [LCP EchoReq id=0x0 magic=0x98e16abf]
sent [LCP EchoRep id=0x0 magic=0x1d03ba3d]
rcvd [CHAP Challenge id=0x1 <83e90ecf70ae75b06a1881e663cad58d>, name = "RV082"]
** Message: nm-pptp-ppp-plugin: (get_credentials): passwd-hook, requesting credentials...
** Message: nm-pptp-ppp-plugin: (get_credentials): got credentials from NetworkManager-pptp
sent [CHAP Response id=0x1 <912370c636eb55677d4bf4e918d1c4540000000000000000df8ee865ca0682b54b0582103e06bc296c97b74845744a9e00>, name = "HR"]
rcvd [LCP EchoRep id=0x0 magic=0x98e16abf]
rcvd [CHAP Success id=0x1 "S=4473103A1ED1C9C8D45346EC8F83F6A9C61C251B"]
CHAP authentication succeeded
** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 8 / phase 'network'
sent [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]
rcvd [IPCP ConfReq id=0x1 <addr 192.168.200.100> <compress VJ 0f 01>]
sent [IPCP TermAck id=0x1]
rcvd [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]
sent [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
rcvd [IPCP ConfRej id=0x1 <ms-dns2 0.0.0.0>]
sent [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0>]
rcvd [IPCP ConfNak id=0x2 <addr 192.168.200.111> <ms-dns1 192.168.200.100>]
sent [IPCP ConfReq id=0x3 <compress VJ 0f 01> <addr 192.168.200.111> <ms-dns1 192.168.200.100>]
rcvd [IPCP ConfAck id=0x3 <compress VJ 0f 01> <addr 192.168.200.111> <ms-dns1 192.168.200.100>]
rcvd [IPCP ConfReq id=0x1 <addr 192.168.200.100> <compress VJ 0f 01>]
sent [IPCP ConfAck id=0x1 <addr 192.168.200.100> <compress VJ 0f 01>]
local  IP address 192.168.200.111
remote IP address 192.168.200.100
primary   DNS address 192.168.200.100
** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 9 / phase 'running'
** Message: nm-pptp-ppp-plugin: (nm_ip_up): ip-up event
** Message: nm-pptp-ppp-plugin: (nm_ip_up): sending Ip4Config to NetworkManager-pptp...
** Message: PPTP service (IP Config Get) reply received.
Script /etc/ppp/ip-up started (pid 4876)
Script /etc/ppp/ip-up finished (pid 4876), status = 0x0


when pinging from root :
** Message: PPTP service (IP Config Get) reply received
rcvd [Compressed data] 10 01 45 59 73 fb 9c 81 ...
sent [CCP ResetReq id=0x3]
rcvd [CCP ResetAck id=0x3]
rcvd [Compressed data] 10 03 59 41 27 73 b0 88 ...
sent [CCP ResetReq id=0x4]
rcvd [Compressed data] 10 04 da 42 57 52 09 bb ...
rcvd [CCP ResetAck id=0x4]

Comment 1 Hervé Rilos 2012-02-16 19:48:46 UTC
I updated to kernel 3.2.6 and things got better. 
I could connect as a user but I was losing half of my tcp/ip packets.
I disabled MPPE and everything is OK now.
I'm closing the bug.


Note You need to log in before you can comment on or make changes to this bug.