Bug 385395 - [Openconnect] Autoconnect and save password for VPN openconnect connection
Summary: [Openconnect] Autoconnect and save password for VPN openconnect connection
Status: RESOLVED FIXED
Alias: None
Product: plasmashell
Classification: Plasma
Component: Networking in general (other bugs)
Version First Reported In: master
Platform: Neon Linux
: NOR major
Target Milestone: 1.0
Assignee: Jan Grulich
URL:
Keywords: usability
: 472200 (view as bug list)
Depends on:
Blocks:
 
Reported: 2017-10-05 10:45 UTC by Christian Ohrfandl
Modified: 2026-04-02 23:59 UTC (History)
12 users (show)

See Also:
Latest Commit:
Version Fixed/Implemented In: 6.7.0
Sentry Crash Report:


Attachments
plasma-nm vpn connect (59.83 KB, image/png)
2017-10-05 10:45 UTC, Christian Ohrfandl
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Ohrfandl 2017-10-05 10:45:18 UTC
Created attachment 108183 [details]
plasma-nm vpn connect

Related to 332058 

When using the plasma-nm applet to connect to a VPN via openconnect (or right-clicking the VPN connection and clicking connect via the editor), the VPN connection always asks for a password, even when stating that the password shall be saved. Additionally, does "Connect automatically" mean that the connection is started after booting and logging into the system or when clicking the connect button (automatizing the whole connection process)?

See the screenshot

Thank you in advance!


System:
=======
sb_release -a

No LSB modules are available.
Distributor ID: neon
Description:    KDE neon Developer Edition
Release:        16.04
Codename:       xenial

kcmshell5 kcm_networkmanagement -v
kcmshell5 5.11.90

openconnect --version
OpenConnect version v7.06
Using GnuTLS. Features present: PKCS#11, RSA software token, HOTP software token, TOTP software token, System keys, DTLS

NetworkManager --version
1.2.6
Comment 1 Simone Gaiarin 2018-06-19 08:44:47 UTC
I confirm this bug.

Is this dialog part of plasma-nm? Or part of openconnect?

If it is part of plasma-nm, why is it shown in the first place? For me only a dialog asking for user/password should be shown.


Usability issues:
- There is a drop down where there is a single choice
- User/password fields are not shown until the user click the connect icon
- The purpose of the connect icon is only showing the user/password. The actual connect button is called login
Comment 2 arne anka 2019-05-13 08:25:46 UTC
Same here:
- "Store passwords" is checked
- password is missing, though, and needs to be inserted every time

What's weird - it worked until IT Dep decided to reset all passwords and gave out new ones. After that the password isn't stored anymore.
Comment 3 Maxime 2019-05-21 14:20:21 UTC
Same issue on Fedora-30 KDE-5.15.14 (not on Gnome)

I tried with nm-connection-editor and plasma configuration panel (with root and without).

I also point out that I do not have kwallet installed ( I haven't tried it yet with ).

It works if you store the key for all users (no encrypted).
Comment 4 Lev 2019-10-09 21:25:07 UTC
I currently see the same issue with plasma-nm 5.16.5 on Arch Linux. It was working for me on previous versions, though, so I am unsure if this is anything close to the original issue, which is 2 years old but still not resolved.
Comment 5 Simone Gaiarin 2023-09-09 06:32:38 UTC
*** Bug 472200 has been marked as a duplicate of this bug. ***
Comment 6 major-mayer 2024-06-24 10:17:22 UTC
A user on Reddit found a workaround for this bug: https://www.reddit.com/r/kde/comments/ctmzez/comment/kpaxxud/
If you disable the setting  "All users can connect to this network" (translation may vary) and only specify a single user, then the password is actually saved.

Either there should be a way found to save passwords for all users (probably difficult in an encrypted form security wise) or it should be mentioned in the settings/ dialog that the password cannot be saved in such a case.
IMO the setting should be disabled by default.

Another issue is, that even tho I activate "Automatically establish connection next time" the dialog always reappears, and I have to manually confirm it by pressing the "Connect" button.
Maybe this could be fixed at the same time.
Comment 7 Sylvain 2024-07-11 07:53:56 UTC
Same issue in Manjaro KDE whereas it works in Mate !
Comment 8 deadmeu 2024-07-17 07:53:15 UTC
(In reply to lrdarknesss from comment #6)
> A user on Reddit found a workaround for this bug:
> https://www.reddit.com/r/kde/comments/ctmzez/comment/kpaxxud/
> If you disable the setting  "All users can connect to this network"
> (translation may vary) and only specify a single user, then the password is
> actually saved.

Unfortunately this does not work for me using a PAN Global Protect (openconnect) connection. I am required to re-authenticate via SSO after every reboot.
Comment 9 Ben Cooksley 2024-12-23 18:23:49 UTC
Bulk transfer as requested in T17796
Comment 10 postix 2025-04-27 16:21:55 UTC
Can confirm on Fedora 42 with Plasma 6.3.4. This is a bit annoying if you require the VPN daily. :)
Comment 11 postix 2025-04-30 10:19:08 UTC
> Additionally, does "Connect automatically" mean that the connection is started after booting and logging into the system or when clicking the connect button (automatizing the whole connection process)?

In my case "Connect automatically" is indeed checked with priority 0, but grayed out. I'm not sure if this means that it's active, but in the end it doesn't reconnect automatically. I have to do it by manually, entering the group password and TOTP key everytime I come from suspend.
Comment 12 Ilya Rodin 2026-02-28 15:02:40 UTC
I have the same bug.
Operating System: Fedora Linux 43
KDE Plasma Version: 6.6.1
KDE Frameworks Version: 6.23.0
Qt Version: 6.10.2
Kernel Version: 6.18.13-200.fc43.x86_64 (64-bit)
Graphics Platform: Wayland
Processors: 8 × Intel® Core™ i7-8650U CPU @ 1.90GHz
Memory: 32 GiB of RAM (31.2 GiB usable)
Graphics Processor: Intel® UHD Graphics 620
Manufacturer: Dell Inc.
Product Name: Latitude 5490
Comment 13 Bug Janitor Service 2026-03-27 19:40:35 UTC
A possibly relevant merge request was started @ https://invent.kde.org/plasma/plasma-nm/-/merge_requests/548
Comment 14 David Edmundson 2026-04-01 18:13:50 UTC
Git commit b48a2679234d954d16771de4108d183fd176fda8 by David Edmundson, on behalf of Aviral Singh.
Committed on 01/04/2026 at 18:13.
Pushed by davidedmundson into branch 'master'.

fix: OpenConnect password-save flags for system profiles


Set OpenConnect temporary secret flags by connection scope so all-users profiles use None and user profiles use AgentOwned when save_passwords is enabled.

M  +7    -4    kded/secretagent.cpp

https://invent.kde.org/plasma/plasma-nm/-/commit/b48a2679234d954d16771de4108d183fd176fda8