Network Manager unable to connect to PPTP VPN (bad NT-Domain escaping)

[Jim Ancona]

To verify:
 1. check that you cannot connect to pptp and you are using a NT-Domain in the conncetion config
 2. verify that this is your bug: leave the NT-Domain field empty; instead encode it in username like:
      NT_DOMAIN\USERNAME (e.g. mydomain\myuser)
 3. upgrade to fixed package and see that it works without the trick in 2.

Binary package hint: network-manager-pptp

Package version: 0.7~~svn20080818t061112-0ubuntu1~nm1~hardy1
uname -a: Linux jim-d620 2.6.24-19-generic #1 SMP Fri Jul 11 23:41:49 UTC 2008 i686 GNU/Linux

I am testing the SVN version of network-manager 0.7. I am attempting to connect to my employer's Windows PPTP VPN. Each time I try, the connection fails, displaying a pop-up message that says: The VPN connection 'Connection Name' failed because the VPN service stopped unexpectedly.

The relevant section of /var/log/syslog is:
Aug 18 15:15:13 jim-d620 NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 16601
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Aug 18 15:15:13 jim-d620 NetworkManager: nm_vpn_connection_activate: assertion `nm_vpn_connection_get_vpn_state (connection) == NM_VPN_CONNECTION_STATE_PREPARE' failed
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN plugin state changed: 3
Aug 18 15:15:13 jim-d620 pppd[16602]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
Aug 18 15:15:13 jim-d620 pppd[16602]: pppd 2.4.4 started by root, uid 0
Aug 18 15:15:13 jim-d620 pppd[16602]: Using interface ppp1
Aug 18 15:15:13 jim-d620 pppd[16602]: Connect: ppp1 <--> /dev/pts/1
Aug 18 15:15:13 jim-d620 pptp[16603]: nm-pptp-service-16601 log[main:pptp.c:267]: The synchronous pptp option is NOT activated
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN connection 'Connection Name' (Connect) reply received.
Aug 18 15:15:15 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:738]: Received Start Control Connection Reply
Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:772]: Client connection established.
Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Aug 18 15:15:17 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:857]: Received Outgoing Call Reply.
Aug 18 15:15:17 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:896]: Outgoing call established (call ID 0, peer's call ID 11881).
Aug 18 15:15:18 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:949]: PPTP_SET_LINK_INFO received from peer_callid 0
Aug 18 15:15:18 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:952]: send_accm is 00000000, recv_accm is FFFFFFFF
Aug 18 15:15:18 jim-d620 pptp[16607]: nm-pptp-service-16601 warn[ctrlp_disp:pptp_ctrl.c:955]: Non-zero Async Control Character Maps are not supported!
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:949]: PPTP_SET_LINK_INFO received from peer_callid 0
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:952]: send_accm is FFFFFFFF, recv_accm is FFFFFFFF
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 warn[ctrlp_disp:pptp_ctrl.c:955]: Non-zero Async Control Character Maps are not supported!
Aug 18 15:15:19 jim-d620 pppd[16602]: LCP terminated by peer (wM-(?"^@<M-Mt^@^@^BM-3)
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:911]: Received Call Clear Request.

Aug 18 15:15:22 jim-d620 pppd[16602]: Connection terminated.
Aug 18 15:15:22 jim-d620 pppd[16602]: Modem hangup
Aug 18 15:15:22 jim-d620 pptp[16603]: nm-pptp-service-16601 warn[decaps_hdlc:pptp_gre.c:197]: short read (-1): Input/output error
Aug 18 15:15:22 jim-d620 pptp[16603]: nm-pptp-service-16601 warn[decaps_hdlc:pptp_gre.c:209]: pppd may have shutdown, see pppd log
Aug 18 15:15:22 jim-d620 pptp[16607]: nm-pptp-service-16601 log[callmgr_main:pptp_callmgr.c:231]: Closing connection (unhandled)
Aug 18 15:15:22 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Aug 18 15:15:22 jim-d620 pptp[16607]: nm-pptp-service-16601 log[call_callback:pptp_callmgr.c:78]: Closing connection (call state)
Aug 18 15:15:22 jim-d620 pppd[16602]: Exit.
Aug 18 15:15:22 jim-d620 NetworkManager: <info> VPN plugin state changed: 6
Aug 18 15:15:22 jim-d620 NetworkManager: <WARN> connection_state_changed(): Could not process the request because no VPN connection was active.

My internet connection is via a Sierra AC 595 PCMCIA aircard, which is managed by Network Manager and seems to work fine. The VPN connection worked using wired and wireless connections and NM 0.6.6. I switched to 0.7 because I couldn't use the VPN with the aircard under 0.6.6, I think because of this bug: https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/145107

[Severin H (severinh)]

I'm trying to connect to my university's VPN and keep getting the same libnotify error message with Intrepid (up-to-date packages): "The VPN connection 'Connection Name' failed because the VPN service stopped unexpectedly."

Sep 4 12:23:45 newton NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.vpnc'...
Sep 4 12:23:45 newton NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' started (org.freedesktop.NetworkManager.vpnc), PID 8299
Sep 4 12:23:45 newton NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.vpnc' just appeared, activating connections
Sep 4 12:23:45 newton NetworkManager: <info> VPN plugin state changed: 1
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXsmpServer: accept_ice_connection()
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Setting up new connection
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: New client '0x8bd6298 []'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmStore: Adding object id /org/gnome/SessionManager/Client17 to store
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmManager: Client added: /org/gnome/SessionManager/Client17
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Initializing client 0x8bd6298 []
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Client '0x8bd6298 []' received RegisterClient(109202a053a1142db112205231434633900000063400022)
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmManager: Adding new client 109202a053a1142db112205231434633900000063400022 to session
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Sending RegisterClientReply to '0x8bd6298 [109202a053a1142db112205231434633900000063400022]'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Set properties from client '0x8bd6298 [109202a053a1142db112205231434633900000063400022]'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: CurrentDirectory = '/home/lantash'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Set properties from client '0x8bd6298 [109202a053a1142db112205231434633900000063400022]'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: ProcessID = '8302'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Set properties from client '0x8bd6298 [109202a053a1142db112205231434633900000063400022]'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Program = 'nm-vpnc-auth-dialog'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Set properties from client '0x8bd6298 [nm-vpnc-auth-dialog 109202a053a1142db112205231434633900000063400022]'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: CloneCommand = 'nm-vpnc-auth-dialog'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Set properties from client '0x8bd6298 [nm-vpnc-auth-dialog 109202a053a1142db112205231434633900000063400022]'
Sep 4 12:23:45 newton x-session-manager[6340]: DEBUG(+): GsmXSMPClient: Re...

[Morten Holmstrup (robotjox)]

just confirming this bug. Trying to connect to pptp vpn on intrepid - exactly the same errors.

[janrikard (janrikard)]

I think I have the same bug.

Pptp works when i connect to a win 2003 server.
And it does NOT work when i connect to a win 2000 server.

[f1anker (ianspigeon)]

Hey guys, Is there any further information I can supply to help get this bug confirmed? I can establish a connection successfully without NM via the command line just not using the new NM 0.7 Applet. syslog extract attached but is the same as reporter.

Client Configuration: MSCHAPv2/MPPE/Stateful enabled, all other options disabled.
network-manager-pptp version: 0.7~~svn20080908t183521-0ubuntu1
VPN Server: Win2k3 RAS/PPTP

[Christoph Burgdorf (christoph-burgdorf)]

Hello there,

can you tell me what commands to type in order to get it connected on
the command line. I would like to try if that works for me, too...

Bye

Christoph

Am Sonntag, den 14.09.2008, 17:42 +0000 schrieb f1anker:
> Hey guys, Is there any further information I can supply to help get this
> bug confirmed? I can establish a connection successfully without NM via
> the command line just not using the new NM 0.7 Applet. syslog extract
> attached but is the same as reporter.
>
> Client Configuration: MSCHAPv2/MPPE/Stateful enabled, all other options disabled.
> network-manager-pptp version: 0.7~~svn20080908t183521-0ubuntu1
> VPN Server: Win2k3 RAS/PPTP
>
> ** Attachment added: "syslog extract"
> http://launchpadlibrarian.net/17609793/syslog.log
>
> --
> Unable to connect to PPTP VPN
> https://bugs.launchpad.net/bugs/259168
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in “network-manager-pptp” source package in Ubuntu: New
>
> Bug description:
> Binary package hint: network-manager-pptp
>
> Package version: 0.7~~svn20080818t061112-0ubuntu1~nm1~hardy1
> uname -a: Linux jim-d620 2.6.24-19-generic #1 SMP Fri Jul 11 23:41:49 UTC 2008 i686 GNU/Linux
>
> I am testing the SVN version of network-manager 0.7. I am attempting to connect to my employer's Windows PPTP VPN. Each time I try, the connection fails, displaying a pop-up message that says: The VPN connection 'Connection Name' failed because the VPN service stopped unexpectedly.
>
> The relevant section of /var/log/syslog is:
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 16601
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
> Aug 18 15:15:13 jim-d620 NetworkManager: nm_vpn_connection_activate: assertion `nm_vpn_connection_get_vpn_state (connection) == NM_VPN_CONNECTION_STATE_PREPARE' failed
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN plugin state changed: 3
> Aug 18 15:15:13 jim-d620 pppd[16602]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
> Aug 18 15:15:13 jim-d620 pppd[16602]: pppd 2.4.4 started by root, uid 0
> Aug 18 15:15:13 jim-d620 pppd[16602]: Using interface ppp1
> Aug 18 15:15:13 jim-d620 pppd[16602]: Connect: ppp1 <--> /dev/pts/1
> Aug 18 15:15:13 jim-d620 pptp[16603]: nm-pptp-service-16601 log[main:pptp.c:267]: The synchronous pptp option is NOT activated
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN connection 'Connection Name' (Connect) reply received.
> Aug 18 15:15:15 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
> Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:738]: Received Start Control Connect...

[Christoph Burgdorf (christoph-burgdorf)]

Is there anything I could supply to get this bug closed before the final release comes out?

[Alexander Sack (asac)]

please also attach the vpn log of a usccessful connect attempt.

[Christoph Burgdorf (christoph-burgdorf)]

Where can I find this log?

-----Ursprüngliche Nachricht-----
Von: <email address hidden> [mailto:<email address hidden>] Im Auftrag von Alexander Sack
Gesendet: Donnerstag, 25. September 2008 14:24
An: Christoph Burgdorf
Betreff: [Bug 259168] Re: Network Manager unable to connect to PPTP VPN

please also attach the vpn log of a usccessful connect attempt.

--
Network Manager unable to connect to PPTP VPN
https://bugs.launchpad.net/bugs/259168
You received this bug notification because you are a direct subscriber
of the bug.

Status in "network-manager-pptp" source package in Ubuntu: Confirmed

Bug description:
Binary package hint: network-manager-pptp

Package version: 0.7~~svn20080818t061112-0ubuntu1~nm1~hardy1
uname -a: Linux jim-d620 2.6.24-19-generic #1 SMP Fri Jul 11 23:41:49 UTC 2008 i686 GNU/Linux

I am testing the SVN version of network-manager 0.7. I am attempting to connect to my employer's Windows PPTP VPN. Each time I try, the connection fails, displaying a pop-up message that says: The VPN connection 'Connection Name' failed because the VPN service stopped unexpectedly.

The relevant section of /var/log/syslog is:
Aug 18 15:15:13 jim-d620 NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 16601
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Aug 18 15:15:13 jim-d620 NetworkManager: nm_vpn_connection_activate: assertion `nm_vpn_connection_get_vpn_state (connection) == NM_VPN_CONNECTION_STATE_PREPARE' failed
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN plugin state changed: 3
Aug 18 15:15:13 jim-d620 pppd[16602]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
Aug 18 15:15:13 jim-d620 pppd[16602]: pppd 2.4.4 started by root, uid 0
Aug 18 15:15:13 jim-d620 pppd[16602]: Using interface ppp1
Aug 18 15:15:13 jim-d620 pppd[16602]: Connect: ppp1 <--> /dev/pts/1
Aug 18 15:15:13 jim-d620 pptp[16603]: nm-pptp-service-16601 log[main:pptp.c:267]: The synchronous pptp option is NOT activated
Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN connection 'Connection Name' (Connect) reply received.
Aug 18 15:15:15 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:738]: Received Start Control Connection Reply
Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:772]: Client connection established.
Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Aug 18 15:15:17 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:857]: Received Outgoing Call Reply.
Aug 18 15:15:17 jim-d620 pptp[16607]: nm-pptp-s...

[Fernando Miguel (fernandomiguel)]

I failed to connect

Sep 25 16:50:01 blubug /USR/SBIN/CRON[13626]: (root) CMD (if [ -x /usr/bin/gsmsmsrequeue ]; then /usr/bin/gsmsmsrequeue; fi)
Sep 25 16:50:01 blubug /USR/SBIN/CRON[13627]: (root) CMD ([ -x /usr/sbin/update-motd ] && /usr/sbin/update-motd 2>/dev/null)
Sep 25 16:50:02 blubug NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
Sep 25 16:50:02 blubug NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 13670
Sep 25 16:50:02 blubug NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Sep 25 16:50:02 blubug NetworkManager: <info> VPN plugin state changed: 1
Sep 25 16:50:09 blubug NetworkManager: <info> VPN plugin state changed: 3
Sep 25 16:50:09 blubug NetworkManager: <info> VPN connection 'matir' (Connect) reply received.
Sep 25 16:50:09 blubug pppd[13712]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
Sep 25 16:50:09 blubug pppd[13712]: pppd 2.4.4 started by root, uid 0
Sep 25 16:50:09 blubug pptp[13714]: nm-pptp-service-13670 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Sep 25 16:50:09 blubug pppd[13712]: Using interface ppp0
Sep 25 16:50:09 blubug pppd[13712]: Connect: ppp0 <--> /dev/pts/3
Sep 25 16:50:09 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Sep 25 16:50:09 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Sep 25 16:50:09 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Sep 25 16:50:10 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Sep 25 16:50:10 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Sep 25 16:50:10 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 33548).
Sep 25 16:50:10 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Sep 25 16:50:10 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is 00000000, recv_accm is FFFFFFFF
Sep 25 16:50:10 blubug pptp[13721]: nm-pptp-service-13670 warn[ctrlp_disp:pptp_ctrl.c:956]: Non-zero Async Control Character Maps are not supported!
Sep 25 16:50:10 blubug pppd[13712]: CHAP authentication succeeded
Sep 25 16:50:10 blubug kernel: [27894.122099] PPP BSD Compression module registered
Sep 25 16:50:10 blubug kernel: [27894.221588] PPP Deflate Compression module registered
Sep 25 16:50:12 blubug pppd[13712]: LCP terminated by peer (,?8^Y^@<M-Mt^@^@^BM-f)
Sep 25 16:50:12 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Sep 25 16:50:12 blubug pptp[13721]: nm-pptp-service-13670 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is FFFFFFFF, recv_accm is FFFFFFFF
Sep 25 16:50:12 ...

[Fernando Miguel (fernandomiguel)]

Enabling P2P Encryption (MPPE) makes this work.

Sep 25 16:55:01 blubug /USR/SBIN/CRON[15697]: (root) CMD (if [ -x /usr/bin/gsmsmsrequeue ]; then /usr/bin/gsmsmsrequeue; fi)
Sep 25 16:55:11 blubug dhclient: DHCPREQUEST of 10.0.0.139 on eth0 to 10.0.0.138 port 67
Sep 25 16:55:11 blubug dhclient: DHCPACK of 10.0.0.139 from 10.0.0.138
Sep 25 16:55:11 blubug NetworkManager: <info> DHCP: device eth0 state changed bound -> renew
Sep 25 16:55:11 blubug NetworkManager: <info> address 10.0.0.XXX
Sep 25 16:55:11 blubug NetworkManager: <info> prefix 24 (255.255.255.0)
Sep 25 16:55:11 blubug NetworkManager: <info> gateway 10.0.0.XXX
Sep 25 16:55:11 blubug NetworkManager: <info> nameserver '10.0.0.XXX'
Sep 25 16:55:11 blubug NetworkManager: <info> domain name 'router.XXXXX'
Sep 25 16:55:11 blubug NetworkManager: <info> (eth0): removing resolv.conf from /sbin/resolvconf
Sep 25 16:55:11 blubug dhclient: bound to 10.0.0.139 -- renewal in 17542 seconds.
Sep 25 16:55:11 blubug avahi-daemon[6152]: Withdrawing address record for 10.0.0.139 on eth0.
Sep 25 16:55:11 blubug avahi-daemon[6152]: Leaving mDNS multicast group on interface eth0.IPv4 with address 10.0.0.139.
Sep 25 16:55:11 blubug avahi-daemon[6152]: Interface eth0.IPv4 no longer relevant for mDNS.
Sep 25 16:55:11 blubug avahi-daemon[6152]: Joining mDNS multicast group on interface eth0.IPv4 with address 10.0.0.139.
Sep 25 16:55:11 blubug avahi-daemon[6152]: New relevant interface eth0.IPv4 for mDNS.
Sep 25 16:55:11 blubug avahi-daemon[6152]: Registering new address record for 10.0.0.139 on eth0.IPv4.
Sep 25 16:55:12 blubug NetworkManager: <info> (eth0): writing resolv.conf to /sbin/resolvconf
Sep 25 16:55:12 blubug NetworkManager: <info> Policy set (eth0) as default device for routing and DNS.
Sep 25 16:58:57 blubug NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
Sep 25 16:58:57 blubug NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 17301
Sep 25 16:58:57 blubug NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Sep 25 16:59:03 blubug NetworkManager: <info> VPN plugin state changed: 3
Sep 25 16:59:03 blubug NetworkManager: <info> VPN connection 'XXXXX' (Connect) reply received.
Sep 25 16:59:03 blubug pppd[17344]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
Sep 25 16:59:03 blubug pppd[17344]: pppd 2.4.4 started by root, uid 0
Sep 25 16:59:03 blubug pptp[17346]: nm-pptp-service-17301 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Sep 25 16:59:03 blubug pppd[17344]: Using interface ppp0
Sep 25 16:59:03 blubug pppd[17344]: Connect: ppp0 <--> /dev/pts/3
Sep 25 16:59:03 blubug pptp[17353]: nm-pptp-service-17301 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Sep 25 16:59:03 blubug pptp[17353]: nm-pptp-service-17301 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Sep 25 16:59:03 blubug pptp[17353]: nm-pptp-service-17301 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Sep 25 16:59...

[Alexander Sack (asac)]

On Thu, Sep 25, 2008 at 04:11:46PM -0000, BUGabundo wrote:
> Enabling P2P Encryption (MPPE) makes this work.

OK, appears to be a config issue and not a bug then

 status invalid

 - Alexander

[kaman (kaman120)]

My ISP doesn't support MPPE encryption and I cannot connect to PPTP VPN using Network Manager. I posted logs at https://bugs.launchpad.net/ubuntu/+source/network-manager-pptp/+bug/273702 that was treated as duplicate to this bug.

[Fernando Miguel (fernandomiguel)]

Alex with previous versions it worked out of the box.
This is, the very least, a serious regressions, since the menu is very well hidden and deselect by default.

Either we enable it by default (i'm not sure what this option is used for), or make/visible it clear for users to enable it.

[f1anker (ianspigeon)]

MPPE is enabled on my connection so maybe i'm hitting a different issue. Having said that, if I disable MPPE via nm applet the change isnt saved so maybe all is not how it should be. gconf shows the MPPE option is enabled.

All is good if I downgrade to nm 0.6 in Intrepid. Network Manager 0.7 failure attempt below;

Sep 29 19:38:37 laptop pppd[9971]: Connect: ppp0 <--> /dev/pts/0
Sep 29 19:38:37 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Sep 29 19:38:37 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Sep 29 19:38:37 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 61078).
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is 00000000, recv_accm is FFFFFFFF
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 warn[ctrlp_disp:pptp_ctrl.c:956]: Non-zero Async Control Character Maps are not supported!
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is FFFFFFFF, recv_accm is FFFFFFFF
Sep 29 19:38:38 laptop pppd[9971]: LCP terminated by peer (^C^R2Q^@<M-Mt^@^@^BM-3)
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 warn[ctrlp_disp:pptp_ctrl.c:956]: Non-zero Async Control Character Maps are not supported!
Sep 29 19:38:38 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_disp:pptp_ctrl.c:912]: Received Call Clear Request.
Sep 29 19:38:41 laptop pppd[9971]: Connection terminated.
Sep 29 19:38:41 laptop pppd[9971]: Modem hangup
Sep 29 19:38:41 laptop pptp[9973]: nm-pptp-service-9963 warn[decaps_hdlc:pptp_gre.c:204]: short read (-1): Input/output error
Sep 29 19:38:41 laptop pptp[9973]: nm-pptp-service-9963 warn[decaps_hdlc:pptp_gre.c:216]: pppd may have shutdown, see pppd log
Sep 29 19:38:41 laptop pppd[9971]: Exit.
Sep 29 19:38:41 laptop pptp[9980]: nm-pptp-service-9963 log[callmgr_main:pptp_callmgr.c:234]: Closing connection (unhandled)
Sep 29 19:38:41 laptop pptp[9980]: nm-pptp-service-9963 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'

[Stef Walter (stefw)]

I've tried every combination of options (MPPE enabled etc...) and cannot get my VPN connection (which used to work under Hardy) to work with the new network manager.

Logs follow:

Sep 29 16:52:11 stef-laptop NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
Sep 29 16:52:11 stef-laptop NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 17649
Sep 29 16:52:11 stef-laptop NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Sep 29 16:52:11 stef-laptop NetworkManager: <info> VPN plugin state changed: 1
Sep 29 16:52:11 stef-laptop NetworkManager: <info> VPN plugin state changed: 3
Sep 29 16:52:11 stef-laptop NetworkManager: <info> VPN connection 'Home' (Connect) reply received.
Sep 29 16:52:11 stef-laptop pppd[17650]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
Sep 29 16:52:11 stef-laptop pppd[17650]: pppd 2.4.4 started by root, uid 0
Sep 29 16:52:11 stef-laptop pptp[17652]: nm-pptp-service-17649 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Sep 29 16:52:11 stef-laptop pppd[17650]: Using interface ppp0
Sep 29 16:52:11 stef-laptop pppd[17650]: Connect: ppp0 <--> /dev/pts/3
Sep 29 16:52:11 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Sep 29 16:52:11 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Sep 29 16:52:11 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Sep 29 16:52:12 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Sep 29 16:52:12 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Sep 29 16:52:12 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 19427).
Sep 29 16:52:12 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Sep 29 16:52:12 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is 00000000, recv_accm is FFFFFFFF
Sep 29 16:52:12 stef-laptop pptp[17659]: nm-pptp-service-17649 warn[ctrlp_disp:pptp_ctrl.c:956]: Non-zero Async Control Character Maps are not supported!
Sep 29 16:52:13 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:950]: PPTP_SET_LINK_INFO received from peer_callid 0
Sep 29 16:52:13 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_disp:pptp_ctrl.c:953]: send_accm is FFFFFFFF, recv_accm is FFFFFFFF
Sep 29 16:52:13 stef-laptop pptp[17659]: nm-pptp-service-17649 warn[ctrlp_disp:pptp_ctrl.c:956]: Non-zero Async Control Character Maps are not supported!
Sep 29 16:52:13 stef-laptop pppd[17650]: LCP terminated by peer (M@^MM-^Q^@<M-Mt^@^@^BM-3)
Sep 29 16:52:13 stef-laptop pptp[17659]: nm-pptp-service-17649 log[ctrlp_...

[Stef Walter (stefw)]

BTW, connecting via the command line works, using the following instructions:

http://www.cyberciti.biz/tips/howto-configure-ubuntu-fedora-linux-pptp-client.html

The command being executed by network-manager-pptp is as follows:

/usr/sbin/pppd pty /usr/sbin/pptp 10.10.10.10 --nolaunchpppd --logstring nm-pptp-service-18851 ipparam nm-pptp-service-18851 nodetach lock usepeerdns noipdefault require-mppe require-mppe-128 plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so

[Stef Walter (stefw)]

After looking at the source code, I got this to work by adding a gconf setting. This setting cannot be properly set from the new network-manager-pptp UI.

I added a string type gconf key called 'refuse-eap' under the gconf path of /system/networking/connections/1/vpn and set it to 'yes'

/system/networking/connections/1/vpn/refuse-eap = "yes"

Obviously the '1' number there may be different for different users.

[Christoph Burgdorf (christoph-burgdorf)]

This works for me, too!!! great!

Am Montag, den 29.09.2008, 22:35 +0000 schrieb Stef Walter:
> After looking at the source code, I got this to work by adding a gconf
> setting. This setting cannot be properly set from the new network-
> manager-pptp UI.
>
> I added a string type gconf key called 'refuse-eap' under the gconf path
> of /system/networking/connections/1/vpn and set it to 'yes'
>
> /system/networking/connections/1/vpn/refuse-eap = "yes"
>
> Obviously the '1' number there may be different for different users.
>
> --
> Network Manager unable to connect to PPTP VPN
> https://bugs.launchpad.net/bugs/259168
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in “network-manager-pptp” source package in Ubuntu: Confirmed
>
> Bug description:
> Binary package hint: network-manager-pptp
>
> Package version: 0.7~~svn20080818t061112-0ubuntu1~nm1~hardy1
> uname -a: Linux jim-d620 2.6.24-19-generic #1 SMP Fri Jul 11 23:41:49 UTC 2008 i686 GNU/Linux
>
> I am testing the SVN version of network-manager 0.7. I am attempting to connect to my employer's Windows PPTP VPN. Each time I try, the connection fails, displaying a pop-up message that says: The VPN connection 'Connection Name' failed because the VPN service stopped unexpectedly.
>
> The relevant section of /var/log/syslog is:
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 16601
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
> Aug 18 15:15:13 jim-d620 NetworkManager: nm_vpn_connection_activate: assertion `nm_vpn_connection_get_vpn_state (connection) == NM_VPN_CONNECTION_STATE_PREPARE' failed
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN plugin state changed: 3
> Aug 18 15:15:13 jim-d620 pppd[16602]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
> Aug 18 15:15:13 jim-d620 pppd[16602]: pppd 2.4.4 started by root, uid 0
> Aug 18 15:15:13 jim-d620 pppd[16602]: Using interface ppp1
> Aug 18 15:15:13 jim-d620 pppd[16602]: Connect: ppp1 <--> /dev/pts/1
> Aug 18 15:15:13 jim-d620 pptp[16603]: nm-pptp-service-16601 log[main:pptp.c:267]: The synchronous pptp option is NOT activated
> Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN connection 'Connection Name' (Connect) reply received.
> Aug 18 15:15:15 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
> Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:738]: Received Start Control Connection Reply
> Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:772]: Client connection established.
> Aug 18 15:15:16 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_rep:pp...

[f1anker (ianspigeon)]

Thanks Stef, adding the gconf key manually did the trick!. On a separate note, "ignore-auto-dns" doesnt seem to be taking affect.

[Billy Macdonald (billymacdonald)]

I would like to confirm that refuse-eap in the %gconf.xml worked for me as well. I had to restart the PC for it to take effect though as there appears to be some sort of caching of that file that caused my changes to not be recognized. This was verified by looking at the pppd string via ps. The options wouldn't change just by editing the file, I had to reboot too.

[Billy Macdonald (billymacdonald)]

Looking into this further it turns out that most of the options in the Advanced dialog do not set and unset properly. I've attached a patch that adds the EAP authentication option to the settings and also fixes the other options so they can be set and unset.

I'm not sure how to default to EAP off on a new connection, so it's not the best fix as that should usually default to off as it's for smart cards I believe.

[Billy Macdonald (billymacdonald)]

Upstream seems to have fixed most the options not saving properly. Attached is a patch to just add EAP as an authentication option to the Advance dialog (if I made the patch properly). I'm not sure how to directly submit this to upstream.

[Alexander Sack (asac)]

On Tue, Oct 14, 2008 at 12:44:09AM -0000, Billy Macdonald wrote:
> Upstream seems to have fixed most the options not saving properly.
> Attached is a patch to just add EAP as an authentication option to the
> Advance dialog (if I made the patch properly). I'm not sure how to
> directly submit this to upstream.
>
> ** Attachment added: "EAP.patch"
> http://launchpadlibrarian.net/18515790/EAP.patch
>

openvpn package was updated to latest a few days ago. is that fixed there?

 - Alexander

[Billy Macdonald (billymacdonald)]

On Wed, Oct 15, 2008 at 12:52 PM, Alexander Sack <email address hidden> wrote:
> On Tue, Oct 14, 2008 at 12:44:09AM -0000, Billy Macdonald wrote:
>> Upstream seems to have fixed most the options not saving properly.
>> Attached is a patch to just add EAP as an authentication option to the
>> Advance dialog (if I made the patch properly). I'm not sure how to
>> directly submit this to upstream.
>>
>> ** Attachment added: "EAP.patch"
>> http://launchpadlibrarian.net/18515790/EAP.patch
>>
>
> openvpn package was updated to latest a few days ago. is that fixed
> there?
>
> - Alexander
>

Yes, I just verified that I'm updated to the latest
network-manager-pptp for intrepid and EAP is tried by default, causing
the connection to fail. The EAP.patch applies to
network-manager-pptp-0.7~~svn20081008t224042 to add EAP checkbox to
the authentication section of the configuration so that it can be
disabled.

I can submit this to upstream, if I knew where that was, but I've been
unable to determine where this package comes from.

Billy

[Alexander Sack (asac)]

On Thu, Oct 16, 2008 at 12:09:29AM -0000, Billy Macdonald wrote:
> On Wed, Oct 15, 2008 at 12:52 PM, Alexander Sack <email address hidden> wrote:
> > On Tue, Oct 14, 2008 at 12:44:09AM -0000, Billy Macdonald wrote:
> >> Upstream seems to have fixed most the options not saving properly.
> >> Attached is a patch to just add EAP as an authentication option to the
> >> Advance dialog (if I made the patch properly). I'm not sure how to
> >> directly submit this to upstream.
> >>
> >> ** Attachment added: "EAP.patch"
> >> http://launchpadlibrarian.net/18515790/EAP.patch
> >>
> >
> > openvpn package was updated to latest a few days ago. is that fixed
> > there?
> >
> > - Alexander
> >
>
> Yes, I just verified that I'm updated to the latest
> network-manager-pptp for intrepid and EAP is tried by default, causing
> the connection to fail. The EAP.patch applies to
> network-manager-pptp-0.7~~svn20081008t224042 to add EAP checkbox to
> the authentication section of the configuration so that it can be
> disabled.
>
> I can submit this to upstream, if I knew where that was, but I've been
> unable to determine where this package comes from.

So its not fixed in the build i uploaded today?

 - Alexander

[Billy Macdonald (billymacdonald)]

Correct, still not fixed in the one that installed this afternoon via update manager.

pulling the current source and recompiling with the EAP.patch allows me to disable EAP auth so that I can connect.

[Fernando Miguel (fernandomiguel)]

I'm experience a different thing now:
Before, I needed to enable MPPE, but now, not even turning that on will connect to a VPN PPTP server.
Tried again yesterday on two laptops (one ubuntu and one Kubuntu) will all updates and both failed.
Not even sure that this a bug on NM, but on PPTP, since that even with kvpn it failed to connect.

[Fernando Miguel (fernandomiguel)]

$ apt-cache show network-manager
Package: network-manager
Priority: optional
Section: net
Installed-Size: 2044
Maintainer: Ubuntu Core Dev Team <email address hidden>
Original-Maintainer: Riccardo Setti <email address hidden>
Architecture: amd64
Version: 0.7~~svn20081015t224738-0ubuntu1

$ apt-cache show network-manager-pptp
Package: network-manager-pptp
Priority: optional
Section: universe/net
Installed-Size: 1052
Maintainer: Ubuntu MOTU Developers <email address hidden>
Original-Maintainer: Craig Box <email address hidden>
Architecture: amd64
Version: 0.7~~svn20081015t024626-0ubuntu1

$ apt-cache show pptp-linux
Package: pptp-linux
Priority: optional
Section: net
Installed-Size: 192
Maintainer: Ubuntu Core Developers <email address hidden>
Original-Maintainer: Ola Lundqvist <email address hidden>
Architecture: amd64
Version: 1.7.2-1

Attaching a syslog of a failed attempt WITHOUT MPPE

[Fernando Miguel (fernandomiguel)]

Same syslog with extra attempt, but now WITH MPPE

[Tim (tim-barlotta)]

@BUGabundo
The problem you are seeing (in my opinion) is a problem with NetworkManager trying to get the password from the keyring. In this post someone mentions that clearing tha password gets you passed this "secrets" issue.
http://ubuntuforums.org/showpost.php?p=5979168&postcount=14

However, if you read on in the thread there are still other issues...in particular someone opened a new bug about the CHAP format:
https://bugs.launchpad.net/ubuntu/+source/network-manager-pptp/+bug/283376

[Fernando Miguel (fernandomiguel)]

Thanks for the sugestion

Not saving the password also seems to fail, on a quick test:

Oct 17 16:26:00 blubug NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
Oct 17 16:26:00 blubug NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 29879
Oct 17 16:26:00 blubug NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Oct 17 16:26:00 blubug NetworkManager: <info> VPN plugin state changed: 1
Oct 17 16:26:01 blubug NetworkManager: <WARN> get_secrets_cb(): Couldn't get connection secrets: vpn-password-dialog.c.299 (nma_vpn_request_password): canceled.
Oct 17 16:26:01 blubug NetworkManager: <info> (eth0): writing resolv.conf to /sbin/resolvconf
Oct 17 16:26:01 blubug NetworkManager: <info> Policy set 'Auto eth0' (eth0) as default for routing and DNS.
Oct 17 16:26:12 blubug NetworkManager: <info> VPN plugin state changed: 3
Oct 17 16:26:12 blubug NetworkManager: <info> VPN connection 'DEI MSVPN' (Connect) reply received.
Oct 17 16:26:12 blubug pppd[29888]: Plugin /usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded.
Oct 17 16:26:12 blubug kernel: [37163.021096] PPP generic driver version 2.4.2
Oct 17 16:26:12 blubug pppd[29888]: pppd 2.4.4 started by root, uid 0
Oct 17 16:26:12 blubug pptp[29903]: nm-pptp-service-29879 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Oct 17 16:26:12 blubug pppd[29888]: Using interface ppp0
Oct 17 16:26:12 blubug pppd[29888]: Connect: ppp0 <--> /dev/pts/1
Oct 17 16:26:12 blubug pptp[29916]: nm-pptp-service-29879 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Oct 17 16:26:12 blubug pptp[29916]: nm-pptp-service-29879 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Oct 17 16:26:12 blubug pptp[29916]: nm-pptp-service-29879 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Oct 17 16:26:13 blubug pptp[29916]: nm-pptp-service-29879 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Oct 17 16:26:13 blubug pptp[29916]: nm-pptp-service-29879 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Oct 17 16:26:13 blubug pptp[29916]: nm-pptp-service-29879 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 58112).
Oct 17 16:26:23 blubug pppd[29888]: MS-CHAP authentication failed:
Oct 17 16:26:23 blubug pppd[29888]: CHAP authentication failed
Oct 17 16:26:23 blubug pppd[29888]: Connection terminated.
Oct 17 16:26:23 blubug NetworkManager: <info> VPN plugin failed: 1
Oct 17 16:26:23 blubug pptp[29916]: nm-pptp-service-29879 log[pptp_read_some:pptp_ctrl.c:544]: read returned zero, peer has closed
Oct 17 16:26:23 blubug pptp[29916]: nm-pptp-service-29879 log[callmgr_main:pptp_callmgr.c:258]: Closing connection (shutdown)
Oct 17 16:26:23 blubug pptp[29916]: nm-pptp-service-29879 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Oct 17 16:26:23 blubug pptp[29916]: nm-pptp-service-29879 log[pptp_read_some:pptp_ctrl.c:544]: read returned z...

[houstonbofh (leesharp)]

Another "Me Too..."

This is connecting to m0n0wall VPN's. They have worked from Dapper on with default settings, and are very stable. With Intrepid, no joy. (This is after deleting the password from the keyring)

Enclosed are the syslogs from a Intrepid box failing, and logs from m0n0wall with a failed Intrepid, and a successful Gutsy.

[Alexander Sack (asac)]

I made a test package out of the proposed patch from https://bugs.edge.launchpad.net/ubuntu/+source/network-manager-pptp/+bug/259168/comments/23.

Its currently building in the NM team PPA: https://edge.launchpad.net/~network-manager/+archive. The version is: 0.7~~svn20081015t024626-0ubuntu2~nm1

Thanks for testing.

[Andrey Beljakov (andvalb)]

I have tested given on "https://edge.launchpad.net/~network-manager/+archive" package update - and it works (pptp+mppe) but only with empty "NT Domain" field in network manager configuration (in win2k3 server logs i can see that server use short form of user name to check- "ELEKS\andrey" if this field empty). if set field "NT Domain" to ("eleks.local" or just "eleks" - server domain name) - authentification fails (in server logs "eleks.local\\andrey" - connected but authentification fail" ).
In configuration options selected only MSCHAPv2, MPPE (statefull or stateless with no sense) PPP headers compression and echo.

if only EAP selected network manager use client host name as user name and fail authentification with wrong password message on server side (I can add this user (with host name login) on server side). if with EAP i select other options (PAP CHAP ... etc) authentification success but connection continue using client host name as user name and this connection without MPPE.

Sorry for bad English.

In Russian:

Я попробовал предоставленное на "https://edge.launchpad.net/~network-manager/+archive" исправление и обнаружил что оно работает (PPTP + MPPE) но только в случае если оставить поле "NT Domain" пустым (сервер в этом случае использует имя домена по умолчанию для проверки) в случае же если я указываю в этом поле имя домена явно - в полной или краткой форме - происходит ошибка аутентификации и (на стороне сервера я могу видеть сообщение об этом )

Если же указать использование EAP, то в качестве имени пользователя нетворк менеджер использует имя хоста (пользователь с таким логином (с именем хоста) был мною специально добавлен на сервер) но если кроме EAP ничего не выбрано то все равно получаем ошибку аутентификации - но уже по причине неверного пароля - если же выбрать вместе с EAP другие методы, то аутентификация проходит успешно но все равно продолжает использовать имя хоста в качестве имени кользователя (что собственно и было до патча отключения EAP).
Ну и естественно в брелке пароли не сохраняются. Ошибка уже старая и когда ее поправят неизвестно.
Да и собственно хоть в логах клиента и появляется сообщение о том что 128битное сжатие MPPE включено на стороне сервера в состоянии соединения процент сжатия все равно 0 - не работает?

[Fernando Miguel (fernandomiguel)]

On Monday 27 October 2008 18:24:13 andvalb wrote:
> I have tested given on "https://edge.launchpad.net/~network-manager/+archive" package update - and it works (pptp+mppe) but only with empty "NT Domain" field in network manager configuration
> In configuration options selected only MSCHAPv2, MPPE (statefull or stateless with no sense) PPP headers compression and echo.

Lastest updates from LP~NM and PPTP fails with and without MPPE

--
BUGabundo :o)

[Fernando Miguel (fernandomiguel)]

This is what I get when I connect to a PPTP VPN:

*** glibc detected *** /usr/lib/network-manager-pptp/nm-pptp-auth-dialog: free(): invalid pointer: 0x00007f4e8faa0098 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f4e88d38938]
/lib/libc.so.6(cfree+0x76)[0x7f4e88d3af86]
/usr/lib/network-manager-pptp/nm-pptp-auth-dialog[0x402fde]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f4e88cdd466]
/usr/lib/network-manager-pptp/nm-pptp-auth-dialog[0x402cc9]
======= Memory map: ========
00400000-00407000 r-xp 00000000 08:01 326914 /usr/lib/network-manager-pptp/nm-pptp-auth-dialog
00606000-00607000 r--p 00006000 08:01 326914 /usr/lib/network-manager-pptp/nm-pptp-auth-dialog
00607000-00608000 rw-p 00007000 08:01 326914 /usr/lib/network-manager-pptp/nm-pptp-auth-dialog
0243f000-02505000 rw-p 0243f000 00:00 0 [heap]
7f4e7c000000-7f4e7c021000 rw-p 7f4e7c000000 00:00 0
7f4e7c021000-7f4e80000000 ---p 7f4e7c021000 00:00 0
7f4e820c4000-7f4e820da000 r-xp 00000000 08:01 204227 /lib/libgcc_s.so.1
7f4e820da000-7f4e822da000 ---p 00016000 08:01 204227 /lib/libgcc_s.so.1
7f4e822da000-7f4e822db000 r--p 00016000 08:01 204227 /lib/libgcc_s.so.1
7f4e822db000-7f4e822dc000 rw-p 00017000 08:01 204227 /lib/libgcc_s.so.1
7f4e822dc000-7f4e822eb000 r-xp 00000000 08:01 294195 /usr/lib/libpanel-applet-2.so.0.2.46
7f4e822eb000-7f4e824ea000 ---p 0000f000 08:01 294195 /usr/lib/libpanel-applet-2.so.0.2.46
7f4e824ea000-7f4e824eb000 r--p 0000e000 08:01 294195 /usr/lib/libpanel-applet-2.so.0.2.46
7f4e824eb000-7f4e824ec000 rw-p 0000f000 08:01 294195 /usr/lib/libpanel-applet-2.so.0.2.46
7f4e824ec000-7f4e824f2000 r-xp 00000000 08:01 359128 /usr/lib/gtk-2.0/modules/libgail-gnome.so
7f4e824f2000-7f4e826f1000 ---p 00006000 08:01 359128 /usr/lib/gtk-2.0/modules/libgail-gnome.so
7f4e826f1000-7f4e826f2000 r--p 00005000 08:01 359128 /usr/lib/gtk-2.0/modules/libgail-gnome.so
7f4e826f2000-7f4e826f3000 rw-p 00006000 08:01 359128 /usr/lib/gtk-2.0/modules/libgail-gnome.so
7f4e826f3000-7f4e826f8000 r-xp 00000000 08:01 295181 /usr/lib/libXtst.so.6.1.0
7f4e826f8000-7f4e828f8000 ---p 00005000 08:01 295181 /usr/lib/libXtst.so.6.1.0
7f4e828f8000-7f4e828f9000 rw-p 00005000 08:01 295181 /usr/lib/libXtst.so.6.1.0
7f4e828f9000-7f4e8294e000 r-xp 00000000 08:01 294613 /usr/lib/libspi.so.0.10.11
7f4e8294e000-7f4e82b4e000 ---p 00055000 08:01 294613 /usr/lib/libspi.so.0.10.11
7f4e82b4e000-7f4e82b53000 r--p 00055000 08:01 294613 /usr/lib/libspi.so.0.10.11
7f4e82b53000-7f4e82b5f000 rw-p 0005a000 08:01 294613 /usr/lib/libspi.so.0.10.11
7f4e82b5f000-7f4e82b66000 r-xp 00000000 08:01 326565 /usr/lib/gtk-2.0/modules/libatk-bridge.so
7f4e82b66000-7f4e82d65000 ---p 00007000 08:01 326565 /usr/lib/gtk-...

[Alexander Sack (asac)]

On Mon, Oct 27, 2008 at 10:17:05PM -0000, BUGabundo wrote:
> This is what I get when I connect to a PPTP VPN:

please install the -dbgsym packages to get a symbolized backtrace.

 - Alexander

[Fernando Miguel (fernandomiguel)]

I would like to do that asac, but following https://wiki.ubuntu.com/DebuggingNetworkManager i get:

$ sudo apt-get install network-manager-dbgsym
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.

Since you only requested a single operation it is extremely likely that
the package is simply not installable and a bug report against
that package should be filed.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
  network-manager-dbgsym: Depends: network-manager (= 0.7~~svn20081018t105859-0ubuntu1) but 0.7~~svn20081018t105859-0ubuntu2~nm3 is to be installed
E: Broken packages

[Alexander Sack (asac)]

On Wed, Oct 29, 2008 at 02:14:21PM -0000, BUGabundo wrote:
> I would like to do that asac, but following
> https://wiki.ubuntu.com/DebuggingNetworkManager i get:

unfortunately, there are no -dbgsym packages for versions installed
from PPA. you need to downgrade to the "official" intrepid version to
make this work.

Sorry for the confusion.

 - Alexander

[Alberto (apedraza)]

I have to admit that 0.7 has many bugs that should have been addressed before release. I do use 0.7 since hardy because I depend on my sprint card to connect and 0.7 handles it very well. As nm 0.7 pptp is kind of broken, I can see how people are upset. I myself, am surprised that pptp still has bugs. Maybe the developers are underestimating the amount of people that use pptp. I don't know.

There are two ways to make pptp work today:

A. Install kvpnc, configure and you are good to go. I used this myself when I was testing 0.7 in Hardy and pptp was non-existant. It works very solidly.

or

B. Force pptp to work in nm 0.7 via hacks & teaks via the gconfig editor.

here are workarounds for these problems.

1. You need to add a refuse-eap key in gconfig and set it to yes. If you don't do this, the pptp client will send the host-name instead of your user name to the server. This will cause your connection to be rejected.

2. If you are using a domain name to log in, don't put it in the domain box. Instead, put your domain name and your user-name together in the name field. domain\login

3. This is my gconf setup:

gateway xxx.xxx.xxx.xxx -- put in the ip of your server here
lcp-echo-failure 5
lcp-echo-interval 30
mppe-stateful yes
no-vj-comp yes
refuse-chap yes
refuse-eap yes -- new key you must put in.
refuse-mschap yes
refuse-pap yes
require-mppe yes
require-mppe-128 yes
service-type org.freedesktop.NetowrkManager.pptp
user domain\userlogin -- you have to do it like this otherwise it won't work. on the gui, leave the domain name blank.

And finally, the keys must be added in system\networking\connections\yourvpnpptpconnectio n\vpn.

The refuse-eap key trick was found by somebody else so I don't take credit for it.

Hope this helps....

[lordfoul (lordfoul)]

As Alberto says just use kvpnc until this is really fixed it works flawlessly.

[gergul (gokhan-ergul)]

Just a small reminder for those using the gconf hack: every time you use the NM VPN config gui and save changes, you'll need to re-add refuse-eap key in gconf again, since NM GUI will wipe out existing keys.

As for the regressions in Intrepid, I should say that the sheer number of them and the fact that most regressions are around basic stuff that should just work is, to say the least, alarming. I've been using ubuntu since 6.04, and I've never seen a dist upgrade break so many things. The only reason I've upgraded was to get suspend/resume working on my MacBook Pro after hearing (admittedly) rumors that *.27 kernel was much better at it, I ended up spending countless hours reading launchpad & working around things just to get it up and running. And now, suspend/resume still doesn't work, and my session is not restored after boot/login due to gnome session restore regression (https://bugs.launchpad.net/ubuntu/+source/gnome-session/+bug/249373). The irony ;)

[Alexander Sack (asac)]

we use this bug to track the bogus NT-Domain encoding. The lack of essential ppp options part is tracked in bug 268667.

If you have other issues, we need a new bug.

[Alexander Sack (asac)]

this means: if it still doesnt work for you with the current network-manager PPA packages, we need a new/different bug.

[Alexander Sack (asac)]

initiating intrepid sru.

[Alexander Sack (asac)]

uploading network-manager-pptp_0.7~~svn20081015t024626-0ubuntu1.8.10.1_source.changes to ubuntu/intrepid-proposed

uploading network-manager-pptp_0.7~~svn20081015t024626-0ubuntu2_source.changes to ubuntu/jaunty

[Launchpad Janitor (janitor)]

This bug was fixed in the package network-manager-pptp - 0.7~~svn20081015t024626-0ubuntu2

---------------
network-manager-pptp (0.7~~svn20081015t024626-0ubuntu2) jaunty; urgency=low

  * LP: #259168 Network Manager unable to connect to PPTP VPN (bad NT-Domain
    escaping); we improve ppp domain in username encoding
    - add debian/patches/lp259168_ppp_nt_domain_escaping.patch
  * LP: #268667 MASTER - not all required ppp options get set on command line
    which makes ppp use bad values from /etc/ppp/options*; we explicitly set
    good values for: nodefaultroute, lcp-echo-failure and lcp-echo-interval
    - add debian/patches/lp268667_ppp_default_options.patch
  * LP: #292681 crash when running auth-dialog and secret in keyring;
    we use the proper memory functions in this patch (dupe-of LP: #284212
    VPN connection fails: "unable to find valid VPN secrets")
    - add debian/patches/lp_292681_keyring_memory_free.patch
  * LP: #290468 VPN fails, "/usr/bin/nm-ppp-starter missing"; we remove
    obsolete conffiles in .preinst now
    - add debian/network-manager-pptp.preinst

 -- Alexander Sack <email address hidden> Thu, 30 Oct 2008 00:22:51 +0100

[Martin Pitt (pitti)]

Accepted into intrepid-proposed, please test and give feedback here. Please see https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[neilyalowitz (neilyalowitz)]

Any fix for this?

Many users have experienced this bug, Google around and see the numerous forums. VPN connections were working fine until I upgraded from Ubuntu 8.04 to 8.10.

VERY disappointing to find bugs for important services after an upgrade.

I have the exact same output in /var/log/syslog as in this bug description:

Aug 18 15:15:18 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:949]: PPTP_SET_LINK_INFO received from peer_callid 0
Aug 18 15:15:18 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:952]: send_accm is 00000000, recv_accm is FFFFFFFF
Aug 18 15:15:18 jim-d620 pptp[16607]: nm-pptp-service-16601 warn[ctrlp_disp:pptp_ctrl.c:955]: Non-zero Async Control Character Maps are not supported!
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:949]: PPTP_SET_LINK_INFO received from peer_callid 0
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:952]: send_accm is FFFFFFFF, recv_accm is FFFFFFFF
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 warn[ctrlp_disp:pptp_ctrl.c:955]: Non-zero Async Control Character Maps are not supported!
Aug 18 15:15:19 jim-d620 pppd[16602]: LCP terminated by peer (wM-(?"^@<M-Mt^@^@^BM-3)
Aug 18 15:15:19 jim-d620 pptp[16607]: nm-pptp-service-16601 log[ctrlp_disp:pptp_ctrl.c:911]: Received Call Clear Request.
Aug 18 15:15:22 jim-d620 pppd[16602]: Connection terminated.
Aug 18 15:15:22 jim-d620 pppd[16602]: Modem hangup

[houstonbofh (leesharp)]

1longtime wrote:
> Any fix for this?
>
> Many users have experienced this bug, Google around and see the numerous
> forums. VPN connections were working fine until I upgraded from Ubuntu
> 8.04 to 8.10.
>
> VERY disappointing to find bugs for important services after an upgrade.

While I agree, we do have a fix in "proposed" and it could use a lot of
testing. Grab it and post back. (Under Software Sources, enable
"proposed" and find the update. Update only it {unless you want to test
everything} and disable proposed to make normal updates easier.)

[neilyalowitz (neilyalowitz)]

Excuse me, I just read the comments RE: package fix, but it does not fix the problem.. As a separate forum suggestion, I previously added to my sources.list (but this did not fix the bug):

deb http://ppa.launchpad.net/network-manager/ubuntu intrepid main

...and after reading the above comments, I also added the intrepid-proposed to sources.list (but I did not see network-manager updated, I assume the above network-manager source entry already did that?).

THIS BUG STILL EXISTS. What can I provide to help fix this? This VPN connection worked for half a year until I updated to 8.04 to 8.10. It should be marked with high importance, I suspect that many users are affected.

[Martin Pitt (pitti)]

Sorry, the update isn't built yet, our buildds are clogged. I bumped the priority of this now, it should be available on archive.ubuntu.com in about 3 hours, and on the mirrors some hours later.

[Bill Loucks (biloucks)]

We have been asked that if we are having troubles other than "Bad NT-Domain escaping", to create another bug. I am fully willing to do that, because I do indeed have other problems, but I see there are 4 duplicates of THIS bug, plus at least half a dozen other bugs for network-manager-pptp in Intrepid, so by way of attempting to NOT create another bug for my problems if one already exists, I spent the time, below, to create a text-format description of network-manager-pptp version 0.6.5's dialog, "Edit VPN Connection", which worked fine for me in Hardy, most notably, in my case, for "refuse-eap" and the custom routing. I have not yet found an already-existing bug for Intrepid's network-manager-pptp which matches my problems, but if anyone knows of THE bug which matches my problems (specifically "refuse-eap" and the custom routing), then please let me know its number. I will then wait awhile and see if anyone has found such an already-existing bug for Intrepid, and if so, then I will PROMPTLY subscribe to it; otherwise, I'll create the new bug. Now on with the show. Below is a TEXT FORMAT translation of the 0.6.5 GUI "Edit VPN Connection":

network-manager-pptp 0.6.5 in Hardy
The Dialog window labeled "Edit VPN Connection", a multi-tabbed dialog:

Tab labeled "Connection"
  Free-form text entry labeled "Connection Name"
  Checkbox: "Requires existing network connection"
  Drop-down list with only one entry: "Windows VPN (PPTP)"
  Free-form text entry labeled "Gateway"
Tab labeled "Authentication"
  Checkbox: "Authenticate Peer"
  Checkbox: "Refuse EAP"
  Checkbox: "Refuse CHAP"
  Checkbox: "Refuse MS CHAP"
Tab labeled "Compression & Encryption"
  Group labeled "Compression"
    Checkbox: "Require MPPC Compression"
    Checkbox: "Allow Deflate compression"
    Checkbox: "Allow BSD Compression"
  Group labeled "Encryption"
    Checkbox: "Require MPPE encryption"
    Checkbox: "Require 128 bit MPPE encryption"
    Checkbox: "Enable stateful MPPE"
Tab labeled "PPP Options"
  Free-form text entry labeled "Custom PPP options"
  Group labeled "IP Options"
    Checkbox: "Use Peer DNS"
    Checkbox: "Require explicit IP Addr"
    Checkbox: "Exclusive device access (UUCP-style lock)"
    Checkbox: "Debug output"
  Group labeled "Packet Parameters"
    Drop-down list with up/down arrows AND free-form text entry labeled "MTU"
    Drop-down list with up/down arrows AND free-form text entry labeled "MRU"
  Group labeled "Delays and TImeouts"
    Drop-down list with up/down arrows AND free-form text entry labeled "connect-delay"
    Drop-down list with up/down arrows AND free-form text entry labeled "lcp-echo-failure"
    Drop-down list with up/down arrows AND free-form text entry labeled "lcp-echo-interval"
Tab labeled "Routing"
  Checkbox: "Peer DNS through tunnel"
  Checkbox: "Only use VPN connections for these addresses"
    Free-form text entry below which is the text, "example: 172.16.0.0/16 10.11.12.0/24"

[Alexander Sack (asac)]

1longtime, your issue is most likely bug 268667 ... the proposed fix should be available in intrepid-proposed. please test that package and report bug (at best in the bug above). Also double check that you have MPPE encryption enabled.

[Jeremy Cantrell (jmcantrell)]

I just updated from proposed. I'm not sure what I'm supposed to be seeing. The EAP option is still missing from the list, as well.

[Bill Loucks (biloucks)]

Mr. Sack,

You wrote, "Longtime, your issue is most likely bug 268667". I mean no disrespect, but when I point my browser at https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/268667 and search within the page for the 3-character string, "eap", THE SEARCH FAILS. So I ask: How can you possibly in your wildest imagination suggest that bug 268667 is my issue?

Let me state my issue as clearly as I can: (My issue is both eap and custom routing, but I'll just state the most critical of the two):

network-manager-pptp 0.7 in Intrepid does not allow refuse-eap to be set, which results in eap being enabled, which results in the following in /var/log/syslog :

Nov 21 08:35:10 hostname pppd[5949]: EAP: peer reports authentication failure

[Jeremy Cantrell (jmcantrell)]

I have a patch for the EAP interface bug. I'm trying to figure out the MPPE
interface bug, as well. I'll post here when I'm done.

--
:wq

On Fri, Nov 21, 2008 at 10:40, William Loucks <email address hidden> wrote:

> Mr. Sack,
>
> You wrote, "Longtime, your issue is most likely bug 268667". I mean no
> disrespect, but when I point my browser at
> https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/268667
> and search within the page for the 3-character string, "eap", THE SEARCH
> FAILS. So I ask: How can you possibly in your wildest imagination
> suggest that bug 268667 is my issue?
>
> Let me state my issue as clearly as I can: (My issue is both eap and
> custom routing, but I'll just state the most critical of the two):
>
> network-manager-pptp 0.7 in Intrepid does not allow refuse-eap to be
> set, which results in eap being enabled, which results in the following
> in /var/log/syslog :
>
> Nov 21 08:35:10 hostname pppd[5949]: EAP: peer reports authentication
> failure
>
> --
> Network Manager unable to connect to PPTP VPN (bad NT-Domain escaping)
> https://bugs.launchpad.net/bugs/259168
> You received this bug notification because you are a direct subscriber
> of the bug.
>

[Jeremy Cantrell (jmcantrell)]

This patch fixes the EAP interface bug for me. I'm still looking at the MPPE interface bug. I would add the package itself to my PPA, but I'm not sure how. If anyone can help me with that, I'd be glad to upload it.

[Jeremy Cantrell (jmcantrell)]

I should also mention that this patch was done against the latest package from proposed.

[Jeremy Cantrell (jmcantrell)]

This patch fixes both the EAP and MPPE interface bugs for me. Again, if someone can help me get familiar with working with my PPA, I'll upload a package. Until then, here's the patch.

[Bill Loucks (biloucks)]

I'm so desperate, that I just installed Jaunty Alpha 1 to see if there's any improvement in network-manager-pptp; Jaunty has the same piece of feces network-manager-pptp 0.7~~svn20081015t024626-0ubuntu3 . Please pardon my colorful language, but this is unacceptable. I did some poking around on debian.org, and I see that even Debian EXPERIMENTAL, which is out there beyond UNSTABLE, has network-manager-pptp 0.6.6, not 0.7 !! I give up. I'll keep the Jaunty Alpha 1 on a non-critical machine, and keep an eye on what happens, if anything, with network-manager-pptp in Jaunty. But at this point, I'm not holding my breath.

[Jeremy Cantrell (jmcantrell)]

@William Loucks:

I'm assuming you didn't even try my patch. I'm not sure what made you think that installing Jaunty would improve anything. If a fix was available, don't you think someone would have mentioned it somewhere?

The bottom line is that your whining isn't helping anything. People are aware that there's a problem. Like I've said before, if stability was anywhere near as critical an issue as you're proclaiming, then you should have stuck with an LTS version.

Maybe it's time for you to whip out your editor and start contributing something other than noise.

[Tim (tim-barlotta)]

@Alexander Sack
Finally installed the network-manager-pptp from intrepid-proposed. I needed to add refuse-eap via gconf-editor, not remember the password and put the domain on the username - however, it is all working now and I can easily connect to my corporate VPN once again. Thanks for looking into the issue and getting a fix out there.

With all the complaining going on here, just wanted to thank you for the hard work.

[bim (mng-kingston)]

FYI

Similarly, (even though I don't know what PPTP is
- only that I can't understand how to get a wired
connection to a router with intrepid) -----

I have now given up on Intrepid and am starting
my Linux experience with Hardy.

"bim"

At 2008/11/22 15:32, you wrote:
>I'm so desperate, that I just installed Jaunty Alpha 1 to see if there's
>any improvement in network-manager-pptp; Jaunty has the same piece of
>feces network-manager-pptp 0.7~~svn20081015t024626-0ubuntu3 . Please
>pardon my colorful language, but this is unacceptable. I did some poking
>around on debian.org, and I see that even Debian EXPERIMENTAL, which is
>out there beyond UNSTABLE, has network-manager-pptp 0.6.6, not 0.7 !! I
>give up. I'll keep the Jaunty Alpha 1 on a non-critical machine, and
>keep an eye on what happens, if anything, with network-manager-pptp in
>Jaunty. But at this point, I'm not holding my breath.
>
>--
>Network Manager unable to connect to PPTP VPN (bad NT-Domain escaping)
>https://bugs.launchpad.net/bugs/259168
>You received this bug notification because you are a direct subscriber
>of the bug.
>
>Status in “network-manager-pptp” source package in Ubuntu: Fix Released
>Status in “pptp-linux” source package in Ubuntu: Invalid
>Status in network-manager-pptp in Ubuntu Intrepid: Fix Committed
>Status in pptp-linux in Ubuntu Intrepid: Invalid
>
>Bug description:
>To verify:
> 1. check that you cannot connect to pptp and
> you are using a NT-Domain in the conncetion config
> 2. verify that this is your bug: leave the
> NT-Domain field empty; instead encode it in username like:
> NT_DOMAIN\USERNAME (e.g. mydomain\myuser)
> 3. upgrade to fixed package and see that it works without the trick in 2.
>
>
>Binary package hint: network-manager-pptp
>
>Package version: 0.7~~svn20080818t061112-0ubuntu1~nm1~hardy1
>uname -a: Linux jim-d620 2.6.24-19-generic #1
>SMP Fri Jul 11 23:41:49 UTC 2008 i686 GNU/Linux
>
>I am testing the SVN version of network-manager
>0.7. I am attempting to connect to my employer's
>Windows PPTP VPN. Each time I try, the
>connection fails, displaying a pop-up message
>that says: The VPN connection 'Connection Name'
>failed because the VPN service stopped unexpectedly.
>
>The relevant section of /var/log/syslog is:
>Aug 18 15:15:13 jim-d620 NetworkManager:
><info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
>Aug 18 15:15:13 jim-d620 NetworkManager:
><info> VPN service
>'org.freedesktop.NetworkManager.pptp' started
>(org.freedesktop.NetworkManager.pptp), PID 16601
>Aug 18 15:15:13 jim-d620 NetworkManager:
><info> VPN service
>'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
>Aug 18 15:15:13 jim-d620 NetworkManager:
><info> VPN service
>'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
>Aug 18 15:15:13 jim-d620 NetworkManager:
>nm_vpn_connection_activate: assertion
>`nm_vpn_connection_get_vpn_state (connection) ==
>NM_VPN_CONNECTION_STATE_PREPARE' failed
>Aug 18 15:15:13 jim-d620 NetworkManager: <info> VPN plugin state changed: 3
>Aug 18 15:15:13 jim-d620 pppd[16602]: Plugin
>/usr/lib/pppd/2.4.4/nm-pptp-pppd-plugin.so loaded....

[neilyalowitz (neilyalowitz)]

@Alexander Sack RE: "1longtime, your issue is most likely bug 268667"

This was the first one I tried and bug 268667 fixed my problem. Thanks Alexander. After trying the suggested fix in that bug, my VPN connects successfully.

Oddly, when I tried to "undo" the fix, it continued to connect properly.

@Martin Pitt RE: intrepid-proposed updates

I did an "apt-get upgrade" with entrepid-proposed sources several days ago, before verified the source had updated (and accidentally updated quite a bit more than I expected... oops). I just did another apt-get update/upgrade and found updates for a number of packages, including a couple of pptp packages.

The VPN problem is still fixed, but because I couldn't rollback the fixes from bug 268667 we can't be certain that the updates fixed my issue.

@jmcantrell

Could not find advanced-dialog.c. I'm not sure how to apply your patch.

Another side-note: manually adding "refuser-eap" to ppp options fixed ONE of my Ubuntu boxes but not the other (the one I've been fighting with in this thread). Strange.

Thanks all for the help, but it was a very disruptive bug. Kinda shakes the faith a bit...

[Jeremy Cantrell (jmcantrell)]

To build your own version of network-manager-pptp with this patch:

    apt-get source network-manager-pptp
    apt-get install autotools-dev fakeroot dh-make build-essential
    apt-get build-dep network-manager-pptp
    cd network-manager-pptp-0.7*
    patch -p0 </path/to/my/patch/file
    dpkg-buildpackage -rfakeroot -uc -b

Assuming all went well, the deb should be in the parent directory.
I've attached a patch with the corrected paths so patch will recognize it.

[Bill Loucks (biloucks)]

Regarding refuse-eap: As I stated 2008-11-04 , the manual workaround of using your favorite text editor to add "refuse-eap" to the file ~/.gconf/system/networking/connections/n/vpn/%gconf.xml works for me (makes me able to establish the vpn). (As an aside, gconf-editor can be used, instead of a text editor, to add the refuse-eap.) I am very grateful to the author of the patch which adds refuse-eap as a configurable item in the gui (but then again, the manual workaround works fine too). But this is like nibbling at the edges of a much larger problem, for example:

1. In 0.7, if you use the gui again, it overwrites your manual workarounds, like refuse-eap.

2. I still cannot modify routes so that only some traffic goes through the vpn while all other traffic goes through my internet gateway.

3. There are still dozens of other parameters which were configurable in 0.6.5 but which are not in 0.7. I don't know how many people here have ever used 0.6.5 under Hardy, but that is why, in my previous post, I showed a text equivalent of the gui for 0.6.5.

Does anyone know where 0.7 came from, and why it was the version which was put in Intrepid, given the fairly large amount of bugs in 0.7, and given the fact (please correct me if I'm wrong) that, according to my understanding, each new release of Ubuntu starts with the latest Debian "unstable", and if I search within Unstable at debian.org ( http://packages.debian.org/search?keywords=network-manager&searchon=names&suite=unstable&section=all ) I get the following versions:

network-manager: 0.6.6-2
network-manager-gnome: 0.6.6-2
network-manager-pptp: 0.6.5+svnhead2574+dfsg-2
network-manager-pptp-gnome: 0.6.5+svnhead2574+dfsg-2

and if I search within Experimental (http://packages.debian.org/search?keywords=network-manager&searchon=names&suite=experimental&section=all ) I get the following versions:

network-manager: 0.7.0~svn4191-1
network-manager-gnome: 0.7.0~svn953-1
network-manager-pptp: 0.6.6+dfsg-2
network-manager-pptp-gnome: 0.6.6+dfsg-2

I'm wondering if network-manager-pptp 0.7 in Intrepid was simply a mistake (a rather large one, if so), I also wonder if what Anthony Mercatante said has any bearing: see https://launchpad.net/ubuntu/intrepid/+source/network-manager-pptp/0.6.5+svnhead2574-0ubuntu1 . I quote Anthony as follows:

"* Due to misscomprehension with original maintainer, my previous svn sync was a regression, as I synched with 0.6.5 branch while he did with 0.7 beta and backported the sources for 0.6.x.
Reverting the packaging for the moment as we are late in the dev cycle to resync from svn and get potentially something unstable.
* Applyed patch 01_no_icon.dpatch
* Removed network-manager-gnome dependancy
* Added missing build-dep libnm-util-dev"

Final note: I used aptitude, in Intrepid, to downgrade the five related packages (network-manager, network-manager-gnome, network-manager-pptp, libnm-glib0, libnm-util0) to what they were in Hardy, and mark them as held at the older 0.6.6/0.6.5 version, and it works fine, just like the good old days in Hardy. But I would not recommend the downgrade to anyone unless you are willing to put up with the fact that the gui update-manager and s...

[kalyp (kalyp)]

@jmcantrell: I just followed your instructions, I've been able to build the package and it works perfectly fine now, thank you so much! I don't know why but I couldn't make it work even by setting refuse-eap in gconf-editor. But with the patched version it worked at first try. Thanks!!

[Alexander Sack (asac)]

jmcantrell, I moved your refulse-eap issue to bug 301593 ... lets continue discussion there. will subscribe you.

[Bill Loucks (biloucks)]

For those of you who can answer "yes" to all five of the following questions:

* Are you still using Intrepid?
* Do you neither use nor require the new features of NetworkManager 0.7 such as "Mobile Broadband" and "DSL"?
* Do you want to stay with Intrepid?
* Do you want to revert Intrepid's network-manager-pptp to be as it was in Hardy?
* Are you willing to take risks and not blame me if something goes wrong?

I've created "new" versions of the five related packages with version numbers such that they are "newer" than 0.7, but are actually the same packages and versions which were in Hardy. These are only for the i386 architecture. I've tested them as well as I can and would like volunteers for additional testing. I did not sign these packages, so you will have to understand what that means. To become a volunteer tester, do these steps:

1. Add the following to Software Sources:
deb http://www2.nau.edu/wal2/NetworkManager/ ./

2. Use update-manager or synaptic to check the software channels for new updates or reload the package information.

3. For your information, the "new" versions of the five packages are:
libnm-glib0 0.7+0.6.6
libnm-util0 0.7+0.6.6
network-manager 0.7+0.6.6
network-manager-gnome 0.7+0.6.6
network-manager-pptp 0.7+0.6.5

4. Install all five of the packages shown in #3 above, after verifying that the "new" version is as listed in #3 above.

5. Reboot, just be safe

6. If you previously used network-manager-pptp under Hardy, it should look exactly like it did in Hardy. If you had not previously used network-manager-pptp under Hardy, take a look at the configuration dialogs.

7. Set up your favorite pptp connection and test it.

[ironfisher (dgvalde)]

Everything work for me now without doing anything special. I just tried choosing others protocols and parameters (and not those which my university said me)

Sorry for my bad English.

[Bill Loucks (biloucks)]

Bug 278309 is, so far, the most inclusive of all the various bugs I've found yet for network-manager-pptp version 0.7. Its title or description is "intrepid network-manager-pptp does not have essential options"

[Alexander Sack (asac)]

On Thu, Nov 27, 2008 at 01:46:14AM -0000, William Loucks wrote:
> For those of you who can answer "yes" to all five of the following
> questions:

Please display a big warning: when you instlal these packages you will
never upgrade to any NetworkManager 0.7 ... if you provide these
packages, please do so outside of bugs. Thanks!

 - Alexander

[Bill Loucks (biloucks)]

@Mr. Sack: the updated document is here: http://www2.nau.edu/wal2/NetworkManager/Readme.html and please note, you CAN go back to 0.7; just follow the instructions in the aforementioned document.

My sincere apologies for any trouble this may have caused.

[Launchpad Janitor (janitor)]

This bug was fixed in the package network-manager-pptp - 0.7~~svn20081015t024626-0ubuntu1.8.10.1

---------------
network-manager-pptp (0.7~~svn20081015t024626-0ubuntu1.8.10.1) intrepid-proposed; urgency=low

  * LP: #259168 Network Manager unable to connect to PPTP VPN (bad NT-Domain
    escaping); we improve ppp domain in username encoding
    - add debian/patches/lp259168_ppp_nt_domain_escaping.patch
  * LP: #268667 MASTER - not all required ppp options get set on command line
    which makes ppp use bad values from /etc/ppp/options*; we explicitly set
    good values for: nodefaultroute, lcp-echo-failure and lcp-echo-interval
    - add debian/patches/lp268667_ppp_default_options.patch
  * LP: #292681 crash when running auth-dialog and secret in keyring;
    we use the proper memory functions in this patch (dupe-of LP: #284212
    VPN connection fails: "unable to find valid VPN secrets")
    - add debian/patches/lp_292681_keyring_memory_free.patch
  * LP: #290468 VPN fails, "/usr/bin/nm-ppp-starter missing"; we remove
    obsolete conffiles in .preinst now
    - add debian/network-manager-pptp.preinst

 -- Alexander Sack <email address hidden> Thu, 30 Oct 2008 00:22:51 +0100

[Craig (candrews-integralblue)]

Network manager upstream's bug tracker is http://bugzilla.gnome.org/ I've seen comments that people do not know where to submit patches or report issues with upstream - I would think this is the place.

[Alexander Sack (asac)]

On Mon, Nov 03, 2008 at 11:35:34PM -0000, chadeldridge wrote:
> After doing the refuse-eap and upgrading to the module above I am also
> working. I assume that the final fix will include the refuse-eap as a
> check option in the pptp config?
>

Yes, next update round will fix that. we have bug 301593 for
this. There are also some routing issues I want to sort out before
that upload. So please be just a bit more patient. Thanks!

 - Alexander

[Alexander Sack (asac)]

On Tue, Nov 04, 2008 at 03:28:28PM -0000, mklebel wrote:
> Works now. upgrading to the PPA version fixed it.
>
> Another issue,
> but I'm not sure if this is a bug or I'm uneducated with network-manager but it rewrites my /etc/resolv.conf to use the remote VPN gateway instead of my local gateway. I tail syslog and it sets ppp0 as default for routing and DNS, I want it to go all through eth1.
>

You should be able to configure your pptp IP4Settings to not use the
DNS server that ppp gives you ... just look in connection editor.

But remember that we have bug 303165 ... so in case that doesnt work
also be a bit patient. The fix for that is in the pipelin for the
network-manager package.

 - Alexander

[Alexander Sack (asac)]

jmcantrell wrote:
> This patch fixes both the EAP and MPPE interface bugs for me. Again, if
> someone can help me get familiar with working with my PPA, I'll upload a
> package. Until then, here's the patch.
>
> ** Attachment added: "Fix for EAP and MPPE interface bugs"
> http://launchpadlibrarian.net/19840800/advanced-dialog.c.patch
>
>
can yo uplease post this to the proper bug?