SUMMARY Plasma NetworkManager cannot connect with OpenVPN. The logs say there was an authentication error, but the username/password is set in the config and the GUI did not report any error at all. STEPS TO REPRODUCE 1. `nmcli connection import type openvpn file $OVPN_FILE` 2. Use Plasma NM to set the username and password for this connection 3. Press "Connect" in Plasma NM for this connection OBSERVED RESULT * GUI switches to "Connecting" and then back to "Never used" after some time (about 10s), with no indication of an error * journalctl logs for NetworkManager,nm-openvpn,kdeinit5: ``` NetworkManager[901]: <info> [1546198738.9532] audit: op="connection-activate" uuid="1e0beece-6525-4093-aa87-2964f3b5f269" name="ProtonVPN DE (TCP)" pid=1747 uid=1000 result="success" NetworkManager[901]: <info> [1546198738.9626] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: Started the VPN service, PID 29949 NetworkManager[901]: <info> [1546198738.9734] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: Saw the service appear; activating connection kdeinit5[1560]: plasma-nm: Unhandled VPN connection state change: 2 kdeinit5[1560]: plasma-nm: virtual NMVariantMapMap SecretAgent::GetSecrets(const NMVariantMapMap&, const QDBusObjectPath&, const QString&, const QStringList&, uint) kdeinit5[1560]: plasma-nm: Path: "/org/freedesktop/NetworkManager/Settings/7" kdeinit5[1560]: plasma-nm: Setting name: "vpn" kdeinit5[1560]: plasma-nm: Hints: () kdeinit5[1560]: plasma-nm: Flags: 4 kdeinit5[1560]: plasma-nm: Unhandled VPN connection state change: 3 NetworkManager[901]: <info> [1546198738.9959] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: VPN plugin: state changed: starting (3) nm-openvpn[29952]: OpenVPN 2.4.6 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Dec 29 2018 nm-openvpn[29952]: library versions: OpenSSL 1.1.0j 20 Nov 2018 NetworkManager[901]: <info> [1546198738.9984] audit: op="statistics" arg="refresh-rate-ms" pid=1747 uid=1000 result="success" nm-openvpn[29952]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts nm-openvpn[29952]: TCP/UDP: Preserving recently used remote address: [AF_INET]37.58.58.230:21 nm-openvpn[29952]: Attempting to establish TCP connection with [AF_INET]37.58.58.230:21 [nonblock] nm-openvpn[29952]: TCP connection established with [AF_INET]37.58.58.230:21 nm-openvpn[29952]: TCP_CLIENT link local: (not bound) nm-openvpn[29952]: TCP_CLIENT link remote: [AF_INET]37.58.58.230:21 nm-openvpn[29952]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay nm-openvpn[29952]: WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1604', remote='link-mtu 1636' nm-openvpn[29952]: WARNING: 'tun-mtu' is used inconsistently, local='tun-mtu 1500', remote='tun-mtu 1532' nm-openvpn[29952]: [de-02.protonvpn.com] Peer Connection Initiated with [AF_INET]37.58.58.230:21 NetworkManager[901]: <info> [1546198741.2024] audit: op="statistics" arg="refresh-rate-ms" pid=1747 uid=1000 result="success" nm-openvpn[29952]: AUTH: Received control message: AUTH_FAILED nm-openvpn[29952]: SIGUSR1[soft,auth-failure] received, process restarting nm-openvpn[29952]: SIGTERM[hard,init_instance] received, process exiting NetworkManager[901]: <warn> [1546198746.8591] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: VPN plugin: failed: login-failed (0) NetworkManager[901]: <warn> [1546198746.8591] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: VPN plugin: failed: connect-failed (1) NetworkManager[901]: <info> [1546198746.8593] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: VPN plugin: state changed: stopping (5) NetworkManager[901]: <info> [1546198746.8597] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: VPN plugin: state changed: stopped (6) NetworkManager[901]: <info> [1546198746.8614] vpn-connection[0x557fc5f3c780,1e0beece-6525-4093-aa87-2964f3b5f269,"ProtonVPN DE (TCP)",0]: VPN service disappeared ``` EXPECTED RESULT VPN connection should be established SOFTWARE/OS VERSIONS Linux: 4.20.0 KDE Applications Version: 18.12.0 KDE Plasma Version: 5.14.4 KDE Frameworks Version: 5.53.0 Qt Version: 5.11.3
Does "nmcli connection up connection_name" work?
If you can provide the information in comment #1, please add it.
(In reply to Jan Grulich from comment #1) > Does "nmcli connection up connection_name" work? (In reply to Christoph Feck from comment #2) > If you can provide the information in comment #1, please add it. Thank you for the reminder. $ nmcli connection up $UUID Error: Connection activation failed: The connection attempt timed out Hint: use 'journalctl -xe NM_CONNECTION=$UUID + NM_DEVICE=$IFACE' to get more details.
Does it work if you import the connection using some other means? See also bug #396530.
If you can provide the information requested in comment 4, please add it.
Bulk transfer as requested in T17796
Sounds like this was an upstream NetworkManager bug at the time it was filed. That was many years ago, so closing now.