Connection was aborted, attribute value issue

Help
2012-09-01
2013-01-16
  • I'm experiencing the following issue:

    Ubuntu 12.04.1 amd64, sstp-client 1.0.7, network-manager-sstp 0.9.4, network-manager-sstp-gnome 0.9.4

    Connecting to SSTP VPN on Windows 2008 R2 resultsin the following failure half way through the connection:

    Sep  1 21:10:38 vaiodt NetworkManager: <info> Internal IP4 DNS: 10.140.2.1
    Sep  1 21:10:38 vaiodt NetworkManager: <info> Internal IP4 DNS: 10.140.2.3
    Sep  1 21:10:38 vaiodt NetworkManager: <info> DNS Domain: '(none)'
    Sep  1 21:10:38 vaiodt sstpc: Connection was aborted, Value of attribute is incorrect <<<<<
    Sep  1 21:10:38 vaiodt pppd: Modem hangup
    Sep  1 21:10:38 vaiodt pppd: Connect time 0.0 minutes.

    The connection is successful and it negotiates internal addresses etc and DNS but blows when DNS domain is sent down.

    Any ideas how to make this work at either end?

    Any help appreciated :-)

     
  • Just to add - this is the only stopping point for me at the moment which will allow me to get rid of windows 7 inside virtualbox :)

     
  • Do you have any idea on what the DNS attribute handed to you by the server is? They needs to match when you negotiate the connection with the server. Ideally, the (none) should probably be "" (empty). If you are able to figure out how to run this client on command line, then post the debug information printed to the logs of your system it would be helpful.

     
  • Not a clue unfortunately. I will have a play around with network-manager and see if i can get it to run everything with debug flags… (been a while since I've done this!)

     
  • Ok this is all I can persuade it to give me by setting NM_PPP_DEBUG=1 and running as root (some info censored)

    Sep  1 22:03:46 vaiodt sstpc: Sending Connected Message
    Sep  1 22:03:46 vaiodt sstpc: SSTP CRTL PKT(112)
    Sep  1 22:03:46 vaiodt sstpc:   TYPE(4): CONNECTED, ATTR(1):
    Sep  1 22:03:46 vaiodt sstpc:     CRYPTO BIND(3): 104
    Sep  1 22:03:46 vaiodt sstpc: Connection Established
    Sep  1 22:03:46 vaiodt sstpc: SSTP DATA PKT(16)
    Sep  1 22:03:46 vaiodt sstpc: Received callback from sstp-plugin
    Sep  1 22:03:46 vaiodt pppd: Script /etc/ppp/ip-up started (pid 12560)
    Sep  1 22:03:46 vaiodt NetworkManager: <info> VPN connection '******' (IP Config Get) reply received.
    Sep  1 22:03:46 vaiodt NetworkManager: <info> VPN Gateway: ***.***.***.***
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Tunnel Device: ppp0
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Internal IP4 Address: 10.140.11.5
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Internal IP4 Prefix: 32
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Internal IP4 Point-to-Point Address: 10.140.11.20
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Maximum Segment Size (MSS): 0
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Forbid Default Route: no
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Internal IP4 DNS: 10.140.2.1
    Sep  1 22:03:46 vaiodt NetworkManager: <info> Internal IP4 DNS: 10.140.2.3
    Sep  1 22:03:46 vaiodt NetworkManager: <info> DNS Domain: '(none)'
    Sep  1 22:03:46 vaiodt sstpc: SSTP CRTL PKT(20)
    Sep  1 22:03:46 vaiodt sstpc:   TYPE(5): ABORT, ATTR(1):
    Sep  1 22:03:46 vaiodt sstpc:     STATUS INFO(2): 12
    Sep  1 22:03:46 vaiodt sstpc: Connection was aborted, Value of attribute is incorrect
    Sep  1 22:03:46 vaiodt pppd: Modem hangup

     
  • Hi
    I think if you run the command: "sudo NM_PPP_DEBUG=1 /usr/lib/NetworkManager/nm-sstp-service -debug" and then inspect the output of the syslog content (/var/log/messages, or /var/log/syslog dependent on your distribution). You should be able to find the actual PPP negotiation that causes it to terminate. Looks to me that the PPP/IPCP layer is able to come up successfully, but fails because the DNS domain is different than what is negotiated. Did you upgrade from an earlier distribution / version? If so, could you delete your connection in NetworkManager and then re-add it again? The property domain should be "" instead of "(none)".

    Cheers,

     
  • Hi,

    Sorry for the delay, if you are still there and interested. I did submit a fix to the "Value of attribute is incorrect" problem. It appears that the delay of sending the SSTP_CONNECTED message until ip-up phase caused a problem on the server side terminating the connection. The fix is in latest SVN repository, and I need another fix to network-manager-sstp code as well. That will come a little later…

     
  • It seems to be corrected in version network-manager-sstp (0.9.4-0ubuntu2)