Carlos F Lange wrote:

On Sat November 10 2007 19:08, James Knott wrote:

...

Does KNetworkManager actually work with OpenVPN. I've installed the OpenVPN part of KnetworkManager and trying everything I can think of, I cannot get it to connect. I get an error message:

I would be interested to know, if you get it to work. I tried it before (see messages under Subject "user-level GUI for openVPN" on Nov. 4), but I ended up writing a script, as Theo suggested, and allowing everyone to run rcopenvpn with sudo without password. The script looks like this:

I also wrote my own script quite a while ago. One thing it does, is check to see if it can find my WiFi router. If so, it uses one configuration. If not, it assumes it's away from home and uses another. I guess this is another "feature" of KNetworkManager. One thing I'd like to see in it, is the ability to configure static addresses for ethernet, instead of using only DHCP. -- Use OpenOffice.org http://www.openoffice.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Carlos F Lange wrote:

On Sun November 11 2007 18:12, James Knott wrote:

...

I also wrote my own script quite a while ago. One thing it does, is check to see if it can find my WiFi router. If so, it uses one configuration. If not, it assumes it's away from home and uses another. I guess this is another "feature" of KNetworkManager. One thing I'd like to see in it, is the ability to configure static addresses for ethernet, instead of using only DHCP.

If you mean a behaviour that depends on the server or LAN that we attach to, I am with you.

My script pings the IP address of my WiFi router and checks if the valid MAC address is in the arp cache. If successful, it selects the config file for that IP address. If not, it uses the config file for my internet access IP.

KNetworkManager does allow you to setup static address on a per-card basis. For example, I set a static address for the wired Ethernet, since I expect to use it mostly at home, and I left the wireless card as DHCP. But ideally I would like the wireless card to have a static address also at home, and DHCP everywhere else.

How do you configure a static ethernet connection? It doesn't appear to be available on the configuration panel. -- Use OpenOffice.org http://www.openoffice.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Carlos F Lange wrote:

On Mon November 12 2007 11:48, James Knott wrote:

...

...

KNetworkManager does allow you to setup static address on a per-card basis. For example, I set a static address for the wired Ethernet, since I expect to use it mostly at home, and I left the wireless card as DHCP. But ideally I would like the wireless card to have a static address also at home, and DHCP everywhere else.

How do you configure a static ethernet connection? It doesn't appear to be available on the configuration panel.

You are right, it can't be set in KNetworkManager. But I set it up in YaST/Network Devices/Network Card. I set the ethernet card as static IP and the wireless as DHCP. NetworkManager honours the static IP, whenever I am plugged into the network.

Therein lies the problem. I prefer to use static IP at home and DHCP elsewhere. While I can use DHCP at home I prefer static, as I have different addresses for when the computer is running Linux or Windows. -- Use OpenOffice.org http://www.openoffice.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 David C. Rankin wrote:

James Knott wrote:

...

Carlos F Lange wrote:

...

On Mon November 12 2007 11:48, James Knott wrote:

<snip>

Why? I use statics for servers and dhcp for all others. For dual boot boxes where the potential for wins/dhcp lease conflicts exist, I simply configure dhcp to assign a certain address to each particular box by including the following in the dhcpd.conf:

# # We want Rankin-P35a to appear at the same fixed address regardless of which OS is booted # to prevent multiple dhcp leases belonging to the same hardware address # host Rankin-P35a.3111skyline.com { hardware ethernet 00:11:f5:15:2d:83; fixed-address 192.168.6.120; }

I'm not sure if that addresses the concerns you have, but it works wonderfully and is another option for assigning a known IP in a dhcp environment. It eliminates client config and when used with dns dynamic updates, eliminates name resolution problems as well.

Why not? (no pun intended :-) ) avoids having to run and configure a DHCP server. I use the same approach; static local; DHCP when required away... BTW prefer to use traditional ip/ipconfig anyway... client config is a one off, and a cache DNS with local domain deals with any name resolution issues... Additional work for no tangible benefit for a small setup IMHO... - -- ============================================================================== I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone. Bjarne Stroustrup ============================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFHOcsKasN0sSnLmgIRAsFQAJwPlXSw7VZwgobqMx72fbKUPQkw1ACg+U2Q AYhwjJxziJtCfvNkPkF9l8E= =MLlz -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

On Nov 13, 2007 6:26 AM, James Knott wrote:

...

You are right, it can't be set in KNetworkManager. But I set it up in YaST/Network Devices/Network Card. I set the ethernet card as static IP and the wireless as DHCP. NetworkManager honours the static IP, whenever I am plugged into the network.

Therein lies the problem. I prefer to use static IP at home and DHCP elsewhere. While I can use DHCP at home I prefer static, as I have different addresses for when the computer is running Linux or Windows.

Then use different profiles for home, work and everywhere else. Look at SCP. You can set every profile with different settings, incl. if you want your network controlled by network manager or ifup/down system. So in every profile you can set which card gets static IP, which one DHCP, etc. Then, upon boot, or later you can change the profiles. Cheers -- Svetoslav Milenov (Sunny) Even the most advanced equipment in the hands of the ignorant is just a pile of scrap. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Sunny wrote:

...

On Nov 13, 2007 6:26 AM, James Knott wrote:

...

...

You are right, it can't be set in KNetworkManager. But I set it up in YaST/Network Devices/Network Card. I set the ethernet card as static IP and the wireless as DHCP. NetworkManager honours the static IP, whenever I am plugged into the network.

Therein lies the problem. I prefer to use static IP at home and DHCP elsewhere. While I can use DHCP at home I prefer static, as I have different addresses for when the computer is running Linux or Windows.

Then use different profiles for home, work and everywhere else. Look at SCP. You can set every profile with different settings, incl. if you want your network controlled by network manager or ifup/down system. So in every profile you can set which card gets static IP, which one DHCP, etc.

Then, upon boot, or later you can change the profiles.

Cheers

I have used profile manager in the past and found it had issues with KNetworkManager. The online docs also say there are issues with using both. But instead of all this, the question is why is it so difficult to get a simple feature included in KNetworkMananger? Even Windows lets you default to a static address, if DHCP is not available.

I agree on this, that it misses some functionality. I often have to go to customers to configure adsl-modems/routers/accesspoints, that have fixed IP's outside of the dhcp range used in the network (especially the AP's and wireless bridges). In windows I can easily use a fixed address, and configure a DNS by hand, changing back to dhcp with a few clicks to test if it works. I can even use fixed IP on the eth-adapter and dhcp on the wireless at the same time. In suse I have to do a lot more to reach that. I would vote for a possibility in NetworkManager to use a fixed address, fixed dns, fixed gateway, etc. on a per-adapter basis.

-- Use OpenOffice.org http://www.openoffice.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-- L. de Braal BraHa Systems NL - Terneuzen T +31 115 649333 F +31 115 649444 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Helmut Schaa wrote:

Hi,

Am Sonntag, 11. November 2007 03:08:18 schrieb James Knott:

...

Does KNetworkManager actually work with OpenVPN. I've installed the OpenVPN part of KnetworkManager and trying everything I can think of, I cannot get it to connect. I get an error message:

"VPN Connect Failure Could not start the VPN connection 'Home' because the VPN server did not return an adequate network configuration. The VPN login failed because the VPN program received an invalid configuration from the VPN server."

Please post the appropriate part of your NetworkManager-log (/var/log/NetworkManager). I assume some options are not correct.

...

I can, however, start the VPN manually and get access to my home network, so the VPN does work. I assume the "Gateway" refers to the IP address of my firewall, where the other end of the VPN terminates, the local IP refers to my notebook computer and remote IP refers to the firewall ends of the tunnel. I have even tried reversing the local and remote IP's. I use the same static key as when I set it up manually.

tnx jk

Regards, Helmut

Here it is. Nov 12 10:45:04 thinkpad NetworkManager: <debug> [1194882304.307554] nm_dbus_signal_filter(): NetworkManagerInfo triggered update of VPN connection 'Home' Nov 12 10:45:04 thinkpad NetworkManager: <debug> [1194882304.308474] nm_dbus_signal_filter(): NetworkManagerInfo triggered update of VPN connection 'Remote' Nov 12 10:45:06 thinkpad NetworkManager: <debug> [1194882306.152827] nm_dbus_signal_filter(): NetworkManagerInfo triggered update of VPN connection 'Home' Nov 12 10:45:06 thinkpad NetworkManager: <debug> [1194882306.154246] nm_dbus_signal_filter(): NetworkManagerInfo triggered update of VPN connection 'Remote' Nov 12 10:45:12 thinkpad NetworkManager: <info> Will activate VPN connection 'Remote', service 'org.freedesktop.NetworkManager.openvpn', user_name 'jknott', vpn_data 'connection-type / shared-key / remote / home.jknott.net / ca / / cert / / key / / shared-key / /etc/openvpn/static.key / username / / local-ip / 10.1.0.2 / remote-ip / 10.1.0.1 / dev / tun / proto / udp / ta-dir / none', route ''. Nov 12 10:45:12 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 1 of 4 (Connection Prepare) scheduled... Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 1 of 4 (Connection Prepare) ran VPN service daemon org.freedesktop.NetworkManager.openvpn (PID 4344) Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 1 of 4 (Connection Prepare) complete. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 2 of 4 (Connection Prepare Wait) scheduled... Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 1 -> 6. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 2 of 4 (Connection Prepare Wait) waiting... Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 2 of 4 (Connection Prepare Wait) complete. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 3 of 4 (Connect) scheduled... Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 3 of 4 (Connect) sending connect request. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 3 of 4 (Connect) request sent, waiting for reply... Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 6 -> 3. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 3 of 4 (Connect) reply received. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 4 of 4 (IP Config Get) timeout scheduled... Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN Activation (Remote) Stage 3 of 4 (Connect) complete, waiting for IP configuration... Nov 12 10:45:13 thinkpad NetworkManager: <WARN> nm_vpn_service_process_signal(): VPN failed for service 'org.freedesktop.NetworkManager.openvpn', signal 'IPConfigBad', with message 'The VPN login failed because the VPN program received an invalid configuration from the VPN server.'. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 3 -> 5. Nov 12 10:45:13 thinkpad NetworkManager: <WARN> nm_vpn_service_stop_connection(): (VPN Service org.freedesktop.NetworkManager.openvpn): could not stop connection 'Remote' because service was 5. Nov 12 10:45:13 thinkpad NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.openvpn' signaled state change 5 -> 6. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

On Freitag 16 November 2007, Helmut Schaa wrote:

Hi,

Hi Helmut, i saw your mail address in Bug 332691 and here now. I have a similar problem: I've got an openVPN configuration file out of Astaros Firewall software and i am not able to setup the same thing with knetworkmanager. openvpn from command line with these files and kvpnc with importing is also working fine. But i don't like to do this with root permissions, so i want to use knetworkmanager. And kvpnc does not run without, i think, i've tried. I've tested a long time with the openvpn command issued by the networkmanager and need to add/remove these entries: add: --auth MD5 (listbox with [SHA1|MD5]) --tls-remote "" (textfield without entering "") remove: --ns-cert-type server (listbox with [none|server|client], with "none" the parameter must not be inserted!) "tls-remote" i need because "ns-cert-type server" does not work with the gateways! I cannot see these entries in ~/kde3/share/config/knetworkmanagerrc so i think they are hardcoded in /usr/bin/nm-openvpn-service, that's really bad! Could you help, please? Regards! Frank -- Frank Fiene / IT-Services Fon: +49 2526 29-6200 Fax: +49 2526 29-16-6200 mailto: ffiene@veka.com www.veka.com VEKA AG Dieselstr. 8 48324 Sendenhorst Deutschland/Germany Vorstand: Andreas Hartleif (Vorsitzender), Dr. Andreas W. Hillebrand Bonifatius Eichwald, Elke Hartleif, Dr. Werner Schuler Vorsitzender des Aufsichtsrates: Heinrich Laumann HRB 8282 AG Münster -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Helmut Schaa wrote:

Hi,

Am Montag, 12. November 2007 16:51:21 schrieb James Knott:

...

Helmut Schaa wrote:

...

Am Sonntag, 11. November 2007 03:08:18 schrieb James Knott:

<snip>

...

...

...

"VPN Connect Failure Could not start the VPN connection 'Home' because the VPN server did not return an adequate network configuration. The VPN login failed because the VPN program received an invalid configuration from the VPN server."

Please post the appropriate part of your NetworkManager-log (/var/log/NetworkManager). I assume some options are not correct.

<snip>

...

Here it is.

connection 'Remote', service 'org.freedesktop.NetworkManager.openvpn', user_name 'jknott', vpn_data 'connection-type / shared-key / remote / home.jknott.net / ca / / cert / / key / / shared-key / /etc/openvpn/static.key / username / / local-ip / 10.1.0.2 / remote-ip / 10.1.0.1 / dev / tun / proto / udp / ta-dir / none', route ''.

Do these options match the ones your OpenVPN connection needs?

Regards, Helmut

Yes. -- Use OpenOffice.org http://www.openoffice.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Helmut Schaa wrote:

Am Freitag, 16. November 2007 20:19:55 schrieb James Knott:

...

Helmut Schaa wrote:

...

...

connection 'Remote', service 'org.freedesktop.NetworkManager.openvpn', user_name 'jknott', vpn_data 'connection-type / shared-key / remote / home.jknott.net / ca / / cert / / key / / shared-key / /etc/openvpn/static.key / username / / local-ip / 10.1.0.2 / remote-ip / 10.1.0.1 / dev / tun / proto / udp / ta-dir / none', route ''.

Do these options match the ones your OpenVPN connection needs?

Regards, Helmut

Yes.

Strange, can you please validate (using "ps aux" while the connection is in progress) if the instance of OpenVPN started by NM has the right parameters given to it.

Thanks, Helmut

I just tried that, but I don't see anything that indicates OpenVPN parameters. -- Use OpenOffice.org http://www.openoffice.org -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org