http://bugzilla.novell.com/show_bug.cgi?id=538839 User delder@novacoast.com added comment http://bugzilla.novell.com/show_bug.cgi?id=538839#c2 Dan Elder changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |delder@novacoast.com --- Comment #2 from Dan Elder 2009-09-17 12:16:36 MDT --- I get the same error (with valid OpenVPN configuration): Sep 17 11:14:02 delder NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.openvpn'... Sep 17 11:14:02 delder NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 17238 Sep 17 11:14:02 delder NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections Sep 17 11:14:02 delder NetworkManager: <info> VPN plugin state changed: 1 Sep 17 11:14:02 delder NetworkManager: <info> VPN plugin state changed: 3 Sep 17 11:14:02 delder NetworkManager: <info> VPN connection 'Guthy-Renker' (Connect) reply received. Sep 17 11:14:02 delder nm-openvpn[17241]: OpenVPN 2.1_rc18 x86_64-suse-linux [SSL] [LZO2] [EPOLL] [PKCS11] built on Sep 7 2009 Sep 17 11:14:02 delder nm-openvpn[17241]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Sep 17 11:14:02 delder nm-openvpn[17241]: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables Sep 17 11:14:02 delder nm-openvpn[17241]: LZO compression initialized Sep 17 11:14:02 delder nm-openvpn[17241]: UDPv4 link local: [undef] Sep 17 11:14:02 delder nm-openvpn[17241]: UDPv4 link remote: 207.243.200.69:1194 Sep 17 11:14:02 delder nm-openvpn[17241]: [SPAM] Peer Connection Initiated with 207.243.200.69:1194 Sep 17 11:14:04 delder nm-openvpn[17241]: TUN/TAP device tun2 opened Sep 17 11:14:04 delder nm-openvpn[17241]: /bin/ip link set dev tun2 up mtu 1500 Sep 17 11:14:04 delder nm-openvpn[17241]: /bin/ip addr add dev tun2 local 172.16.50.10 peer 172.16.50.9 Sep 17 11:14:04 delder nm-openvpn[17241]: /usr/lib/nm-openvpn-service-openvpn-helper tun2 1500 1542 172.16.50.10 172.16.50.9 init Sep 17 11:14:04 delder nm-openvpn[17241]: openvpn_execve: external program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info. Sep 17 11:14:04 delder nm-openvpn[17241]: script failed: external program fork failed Sep 17 11:14:04 delder nm-openvpn[17241]: Exiting Sep 17 11:14:04 delder NetworkManager: <info> VPN plugin failed: 1 Sep 17 11:14:04 delder NetworkManager: <info> VPN plugin state changed: 6 Sep 17 11:14:04 delder NetworkManager: <info> VPN plugin state change reason: 0 Sep 17 11:14:04 delder NetworkManager: <WARN> connection_state_changed(): Could not process the request because no VPN connection was active. Sep 17 11:14:04 delder NetworkManager: <debug> [1253211244.076130] run_netconfig(): Spawning '/sbin/netconfig modify --service NetworkManager' Sep 17 11:14:04 delder NetworkManager: <debug> [1253211244.077282] write_to_netconfig(): Writing to netconfig: DNSSEARCH='theelderfamily.org theelderfamily.org'#012 Sep 17 11:14:04 delder NetworkManager: <debug> [1253211244.077329] write_to_netconfig(): Writing to netconfig: DNSSERVERS='172.16.99.1'#012 Sep 17 11:14:04 delder NetworkManager: <info> Clearing nscd hosts cache. Sep 17 11:14:04 delder NetworkManager: <info> Policy set 'System eth0' (eth0) as default for routing and DNS. I only get this far after I configure the OpenVPN connection and re-select the already selected certificates to use in the vpn configuration. My connection failure alternates between this and bug 502595. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=538839 User terje@nordland-teknikk.no added comment http://bugzilla.novell.com/show_bug.cgi?id=538839#c3 --- Comment #3 from Terje J. Hanssen 2009-10-01 17:09:03 MDT --- I just upgraded and tested 11.2 M8 x86_64 and i586: The NM OpenVPN import still fails in both cases. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=538839 User terje@nordland-teknikk.no added comment http://bugzilla.novell.com/show_bug.cgi?id=538839#c5 Terje J. Hanssen changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High --- Comment #5 from Terje J. Hanssen 2009-10-14 01:43:10 MDT --- As 11.2 RC1 is here and it looks like no-one has startet to look at this bug, I extend it's importance to HIGH. Tested just SLED 11 again, and the same import and use of OpenVPN certificates with NM worked as well as on 11.1. It's too bad if 11.2 goes one step back and cannot manage this usual task ;) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=538839 http://bugzilla.novell.com/show_bug.cgi?id=538839#c7 Li Bin changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |terje@nordland-teknikk.no --- Comment #7 from Li Bin 2009-12-02 09:22:31 UTC --- I thouth it was caused by below line. "openvpn_execve: external program may not be called unless '--script-security 2' or higher is enabled. Use '--script-security 3 system' for backward compatibility with 2.1_rc8 and earlier. See --help text or man page for detailed info. Now the script-security patch already removed. so this bug should be fixed(bnc #547573). Teje, Would mind try it again with the latest NetworkManager-openvpn? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=538839 http://bugzilla.novell.com/show_bug.cgi?id=538839#c9 Terje J. Hanssen changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|terje@nordland-teknikk.no | --- Comment #9 from Terje J. Hanssen 2009-12-02 19:09:40 UTC --- I've tested openVPN on 11.2-i686 and it works for me. Thank you. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.