Created attachment 722204 [details]
nm-strongswan-service.conf from Leap 42.2 install

I just did a fresh install of Tumbleweed and configured a StrongSwan connection
using the KDE NetworkManager applet.  

When trying to connect I get the following errors in journalctl:

Apr 21 14:49:08 rocinante charon-nm[5129]: 00[DMN] Starting charon
NetworkManager backend (strongSwan 5.3.5)
Apr 21 14:49:08 rocinante charon-nm[5129]: 00[LIB] openssl FIPS mode(0) -
disabled
Apr 21 14:49:08 rocinante charon-nm[5129]: 00[LIB] created TUN device: tun0
Apr 21 14:49:08 rocinante NetworkManager[1142]: <info>  [1492807748.3880]
manager: (tun0): new Tun device (/org/freedesktop/NetworkManager/Devices/7)
Apr 21 14:49:08 rocinante charon-nm[5129]: Failed to initialize VPN plugin:
Connection ":1.77" is not allowed to own the service
"org.freedesktop.NetworkManager.strongswan" due to security policies in the
configuration file
Apr 21 14:49:08 rocinante charon-nm[5129]: object NMStrongswanPlugin 0xbb9220
finalized while still in-construction
Apr 21 14:49:08 rocinante charon-nm[5129]: Custom constructor for class
NMStrongswanPlugin returned NULL (which is invalid). Please use GInitable
instead.
Apr 21 14:49:08 rocinante charon-nm[5129]: 00[CFG] DBUS binding failed
Apr 21 14:49:08 rocinante charon-nm[5129]: 00[LIB] feature
CUSTOM:NetworkManager backend in critical plugin 'nm-backend' failed to load
Apr 21 14:49:08 rocinante charon-nm[5129]: 00[LIB] failed to load 1 critical
plugin feature
Apr 21 14:49:08 rocinante charon-nm[5129]: 00[DMN] initialization failed -
aborting charon-nm

The relevant piece seems to be:  Connection ":1.77" is not allowed to own the
service "org.freedesktop.NetworkManager.strongswan" due to security policies in
the configuration file

This worked on my Leap 42.2 (upgraded from 42.1) system.

I discovered that the file /etc/dbus-1/system.d/nm-strongswan-service.conf was
present on Leap 42.2, but absent on Tumbleweed.  Copying this file from my 42.2
system resolved the issue.

Can this file be added to the appropriate package (NetworkManager-strongswan or
strongswan-nm)?