Hello…I've just started trying to get sstp connection working un Ubuntu, so, maybe, I'm missing something
I've installed
sstp-client
network-manager-sstp
network-manager-sstp-gnome
First of all I'd modified /etc/dbus-1/system.d/nm-sstp-service.conf
adding this section
Because without this section dbus complain that it cannot send messages between (I think) NetworkManager and sstp server…
Now the authentication seems to work, but sstpc client is complaining about something that I don't understand…(sstpc: Connection was aborted, Value of attribute is incorrect)
Do you have any idea on what could be the cause of the issue?
It looks to me that the sstp-client is disconnect(ing) because of an invalid packet. It could be the client sending or receiving bad data. First, what version of sstp-client did you install and could you connect and authenticate to the server by hand?
>> Apr 10 13:40:42 alessio-K52F sstpc: Connection was aborted, Value of attribute is incorrect
For example, have you tried:
sudo sstpc -log-level 5 -log-stderr -user <username> -password <password> server
If this shows a problem, then you can post the output of this command. You can email me directly instead of posting it to the list if you consider this data to be sensitve.
- Eivind
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
The connection works fine, but I'd to manually add to routes for the subnet reachable from the VPN (maybe there is some option missing in pppd configuration, because using windows it seems that the routes are automatically provided by the VPN server)
I've checked the option in Network manager gui and it seems that they're the same:
EAP is disabled
MPPE is enabled using Default Security
statefull encryption is disabled
BSD/Deflate/TCP compression are enabled
P.S. I'm obscuring hostname, because is a vpn that I'm using at work…
Regards,
Alessio
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
You should not need to enable MPPE as it';s really another layer of encryption over something that is already encrypted using SSL. Kind of a dummy option, but the PPP properties page is really just copied from the other PPTP VPN plugins for NetworkManager.
To better troubleshot this, you can create a su shell (sudo su), and execute the following command on the console:
NM_PPP_DEBUG=1 /usr/lib/NetworkManager/nm-sstp-service -debug
Once you use NetworkManager to connect to the work connection, this will exit after the first connection is closed. However, it will print to the console a lot of extra valuable debug information. You can mask out any values you see fit and/or email to me privately.
Hopefully, we'd be able to uncover some lurking bug or configuration option error.
Regards,
- Eivind
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hello…I've just started trying to get sstp connection working un Ubuntu, so, maybe, I'm missing something
I've installed
sstp-client
network-manager-sstp
network-manager-sstp-gnome
First of all I'd modified /etc/dbus-1/system.d/nm-sstp-service.conf
adding this section
<policy user="at_console">
<allow own="org.freedesktop.NetworkManager.sstp"/>
<allow send_destination="org.freedesktop.NetworkManager.sstp-ppp"/>
</policy>
Because without this section dbus complain that it cannot send messages between (I think) NetworkManager and sstp server…
Now the authentication seems to work, but sstpc client is complaining about something that I don't understand…(sstpc: Connection was aborted, Value of attribute is incorrect)
Do you have any idea on what could be the cause of the issue?
Regards,
Alessio
Heres the complete log:
Apr 10 15:40:34 alessio-K52F NetworkManager: <info> Starting VPN service 'sstp'…
Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN service 'sstp' started (org.freedesktop.NetworkManager.sstp), PID 25661
Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN service 'sstp' appeared; activating connections
Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN plugin state changed: 1
Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN plugin state changed: 3
Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN connection 'VPN sstp' (Connect) reply received.
Apr 10 15:40:34 alessio-K52F pppd: Plugin /usr/lib/pppd/2.4.5/nm-sstp-pppd-plugin.so loaded.
Apr 10 15:40:34 alessio-K52F pppd: pppd 2.4.5 started by root, uid 0
Apr 10 15:40:34 alessio-K52F pppd: Using interface ppp0
Apr 10 15:40:34 alessio-K52F pppd: Connect: ppp0 <-> /dev/pts/1
Apr 10 15:40:34 alessio-K52F NetworkManager: SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Apr 10 15:40:34 alessio-K52F NetworkManager: SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Apr 10 15:40:38 alessio-K52F pppd: CHAP authentication succeeded
Apr 10 15:40:39 alessio-K52F pppd: MPPE 128-bit stateless compression enabled
Apr 10 15:40:41 alessio-K52F pppd: local IP address IP_ADDRESS
Apr 10 15:40:41 alessio-K52F pppd: remote IP address IP_ADDRESS
Apr 10 15:40:41 alessio-K52F pppd: primary DNS address IP_ADDRESS
Apr 10 15:40:41 alessio-K52F pppd: secondary DNS address IP_ADDRESS
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> VPN connection 'VPN sstp' (IP Config Get) reply received.
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> VPN Gateway: IP_ADDRESS
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Tunnel Device: ppp0
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 Address:IP_ADDRESS
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 Prefix: 32
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 Point-to-Point Address: IP_ADDRESS
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Maximum Segment Size (MSS): 0
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Forbid Default Route: no
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 DNS: IP_ADDRESS
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 DNS: IP_ADDRESS
Apr 10 15:40:41 alessio-K52F NetworkManager: <info> DNS Domain: '(none)'
Apr 10 13:40:42 alessio-K52F sstpc: Connection was aborted, Value of attribute is incorrect
Apr 10 15:40:42 alessio-K52F pppd: Modem hangup
Apr 10 15:40:42 alessio-K52F pppd: Connect time 0.1 minutes.
Apr 10 15:40:42 alessio-K52F pppd: Sent 0 bytes, received 0 bytes.
Apr 10 15:40:42 alessio-K52F pppd: MPPE disabled
Apr 10 15:40:42 alessio-K52F pppd: Connection terminated.
Apr 10 15:40:42 alessio-K52F avahi-daemon: Withdrawing workstation service for ppp0.
Apr 10 15:40:42 alessio-K52F pppd: Exit.
Apr 10 15:40:42 alessio-K52F NetworkManager: nm_system_iface_set_mtu: assertion `iface != NULL' failed
Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN connection 'VPN sstp' (IP Config Get) complete.
Apr 10 15:40:42 alessio-K52F NetworkManager: <info> Policy set 'DHCP' (eth0) as default for IPv4 routing and DNS.
Apr 10 15:40:42 alessio-K52F NetworkManager: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Apr 10 15:40:42 alessio-K52F dbus: Activating service name='org.freedesktop.nm_dispatcher' (using servicehelper)
Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state changed: 4
Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state changed: 5
Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state changed: 6
Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state change reason: 0
Apr 10 15:40:42 alessio-K52F NetworkManager: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.
Apr 10 15:40:42 alessio-K52F NetworkManager: nm_system_iface_flush_routes: assertion `iface != NULL' failed
Apr 10 15:40:42 alessio-K52F NetworkManager: sync_addresses: assertion `iface != NULL' failed
Apr 10 15:40:43 alessio-K52F dbus: Successfully activated service 'org.freedesktop.nm_dispatcher'
Apr 10 15:40:43 alessio-K52F NetworkManager: <info> Policy set 'DHCP' (eth0) as default for IPv4 routing and DNS.
Apr 10 15:40:47 alessio-K52F kernel: jme 0000:04:00.5: eth0: UDP Checksum error
Apr 10 15:40:49 alessio-K52F NetworkManager: <info> VPN service 'sstp' disappeared
Hi Allesio,
It looks to me that the sstp-client is disconnect(ing) because of an invalid packet. It could be the client sending or receiving bad data. First, what version of sstp-client did you install and could you connect and authenticate to the server by hand?
>> Apr 10 13:40:42 alessio-K52F sstpc: Connection was aborted, Value of attribute is incorrect
For example, have you tried:
sudo sstpc -log-level 5 -log-stderr -user <username> -password <password> server
If this shows a problem, then you can post the output of this command. You can email me directly instead of posting it to the list if you consider this data to be sensitve.
- Eivind
Thank you Eivind for you quick answer…
I'm using sstp-client v1.0.6
After some tests I was able to connect via sstpc, I've used this command line:
sudo sstpc -cert-warn -password PASSWORD -user USERNAME HOSTNAME refuse-eap require-mppe defaultroute
The connection works fine, but I'd to manually add to routes for the subnet reachable from the VPN (maybe there is some option missing in pppd configuration, because using windows it seems that the routes are automatically provided by the VPN server)
I've checked the option in Network manager gui and it seems that they're the same:
EAP is disabled
MPPE is enabled using Default Security
statefull encryption is disabled
BSD/Deflate/TCP compression are enabled
P.S. I'm obscuring hostname, because is a vpn that I'm using at work…
Regards,
Alessio
Hi Allesio,
You should not need to enable MPPE as it';s really another layer of encryption over something that is already encrypted using SSL. Kind of a dummy option, but the PPP properties page is really just copied from the other PPTP VPN plugins for NetworkManager.
To better troubleshot this, you can create a su shell (sudo su), and execute the following command on the console:
NM_PPP_DEBUG=1 /usr/lib/NetworkManager/nm-sstp-service -debug
Once you use NetworkManager to connect to the work connection, this will exit after the first connection is closed. However, it will print to the console a lot of extra valuable debug information. You can mask out any values you see fit and/or email to me privately.
Hopefully, we'd be able to uncover some lurking bug or configuration option error.
Regards,
- Eivind
By the way, could you also send me the output of the following command:
dpkg-query -l *sstp*
Hello Eivind,
this is the output of dpkg-query:
$ dpkg-query -l *sstp*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Description
+++-===============================-===============================-==============================================================================
ii network-manager-sstp 0.9.1-0ubuntu4 network management framework (SSTP plugin core)
ii network-manager-sstp-gnome 0.9.1-0ubuntu4 network management framework (SSTP plugin GNOME GUI)
ii sstp-client 1.0.6 Secure Socket Tunneling Protocol (SSTP) Client
I'll send you a private message via sourceforge with the debug output…
Regards,
Alessio