Problem with network manager on Ubuntu oneiri

Help
2012-04-10
2013-01-16
  • Alessio "Spinus" Moscatello

    Hello…I've just started trying to get sstp connection working un Ubuntu, so, maybe, I'm missing something
    I've installed
    sstp-client 
    network-manager-sstp
    network-manager-sstp-gnome

    First of all I'd modified  /etc/dbus-1/system.d/nm-sstp-service.conf
    adding this section

    <policy user="at_console">
    <allow own="org.freedesktop.NetworkManager.sstp"/>
    <allow send_destination="org.freedesktop.NetworkManager.sstp-ppp"/>
    </policy>

    Because without this section dbus complain that it cannot send messages between (I think)  NetworkManager and sstp server…

    Now the authentication seems to work, but sstpc client is complaining about something that I don't understand…(sstpc: Connection was aborted, Value of attribute is incorrect)

    Do you have any idea on what could be the cause of the issue?

    Regards,
    Alessio

    Heres the complete log:

    Apr 10 15:40:34 alessio-K52F NetworkManager: <info> Starting VPN service 'sstp'…
    Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN service 'sstp' started (org.freedesktop.NetworkManager.sstp), PID 25661
    Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN service 'sstp' appeared; activating connections
    Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN plugin state changed: 1
    Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN plugin state changed: 3
    Apr 10 15:40:34 alessio-K52F NetworkManager: <info> VPN connection 'VPN sstp' (Connect) reply received.
    Apr 10 15:40:34 alessio-K52F pppd: Plugin /usr/lib/pppd/2.4.5/nm-sstp-pppd-plugin.so loaded.
    Apr 10 15:40:34 alessio-K52F pppd: pppd 2.4.5 started by root, uid 0
    Apr 10 15:40:34 alessio-K52F pppd: Using interface ppp0
    Apr 10 15:40:34 alessio-K52F pppd: Connect: ppp0 <-> /dev/pts/1
    Apr 10 15:40:34 alessio-K52F NetworkManager:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
    Apr 10 15:40:34 alessio-K52F NetworkManager:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
    Apr 10 15:40:38 alessio-K52F pppd: CHAP authentication succeeded
    Apr 10 15:40:39 alessio-K52F pppd: MPPE 128-bit stateless compression enabled
    Apr 10 15:40:41 alessio-K52F pppd: local  IP address IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F pppd: remote IP address IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F pppd: primary   DNS address IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F pppd: secondary DNS address IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> VPN connection 'VPN sstp' (IP Config Get) reply received.
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> VPN Gateway: IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Tunnel Device: ppp0
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 Address:IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 Prefix: 32
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 Point-to-Point Address: IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Maximum Segment Size (MSS): 0
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Forbid Default Route: no
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 DNS: IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> Internal IP4 DNS: IP_ADDRESS
    Apr 10 15:40:41 alessio-K52F NetworkManager: <info> DNS Domain: '(none)'
    Apr 10 13:40:42 alessio-K52F sstpc: Connection was aborted, Value of attribute is incorrect
    Apr 10 15:40:42 alessio-K52F pppd: Modem hangup
    Apr 10 15:40:42 alessio-K52F pppd: Connect time 0.1 minutes.
    Apr 10 15:40:42 alessio-K52F pppd: Sent 0 bytes, received 0 bytes.
    Apr 10 15:40:42 alessio-K52F pppd: MPPE disabled
    Apr 10 15:40:42 alessio-K52F pppd: Connection terminated.
    Apr 10 15:40:42 alessio-K52F avahi-daemon: Withdrawing workstation service for ppp0.
    Apr 10 15:40:42 alessio-K52F pppd: Exit.
    Apr 10 15:40:42 alessio-K52F NetworkManager: nm_system_iface_set_mtu: assertion `iface != NULL' failed
    Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN connection 'VPN sstp' (IP Config Get) complete.
    Apr 10 15:40:42 alessio-K52F NetworkManager: <info> Policy set 'DHCP' (eth0) as default for IPv4 routing and DNS.
    Apr 10 15:40:42 alessio-K52F NetworkManager:    SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
    Apr 10 15:40:42 alessio-K52F dbus:  Activating service name='org.freedesktop.nm_dispatcher' (using servicehelper)
    Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state changed: 4
    Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state changed: 5
    Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state changed: 6
    Apr 10 15:40:42 alessio-K52F NetworkManager: <info> VPN plugin state change reason: 0
    Apr 10 15:40:42 alessio-K52F NetworkManager: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.
    Apr 10 15:40:42 alessio-K52F NetworkManager: nm_system_iface_flush_routes: assertion `iface != NULL' failed
    Apr 10 15:40:42 alessio-K52F NetworkManager: sync_addresses: assertion `iface != NULL' failed
    Apr 10 15:40:43 alessio-K52F dbus:  Successfully activated service 'org.freedesktop.nm_dispatcher'
    Apr 10 15:40:43 alessio-K52F NetworkManager: <info> Policy set 'DHCP' (eth0) as default for IPv4 routing and DNS.
    Apr 10 15:40:47 alessio-K52F kernel:  jme 0000:04:00.5: eth0: UDP Checksum error
    Apr 10 15:40:49 alessio-K52F NetworkManager: <info> VPN service 'sstp' disappeared

     
  • Nobody/Anonymous

    Hi Allesio,

    It looks to me that the sstp-client is disconnect(ing) because of an invalid packet. It could be the client sending or receiving bad data. First, what version of sstp-client did you install and could you connect and authenticate to the server by hand?

    >> Apr 10 13:40:42 alessio-K52F sstpc: Connection was aborted, Value of attribute is incorrect

    For example, have you tried:
      sudo sstpc -log-level 5 -log-stderr -user <username> -password <password> server

    If this shows a problem, then you can post the output of this command. You can email me directly instead of posting it to the list if you consider this data to be sensitve.

    - Eivind

     
  • Alessio "Spinus" Moscatello

    Thank you Eivind for you quick answer…

    I'm using sstp-client v1.0.6

    After some tests I was able to connect via sstpc, I've used this command line:

    sudo sstpc -cert-warn -password PASSWORD -user USERNAME  HOSTNAME refuse-eap require-mppe defaultroute

    The connection works fine, but I'd to manually add to routes for  the subnet reachable from the VPN (maybe there is some option missing in pppd configuration, because using windows it seems that the routes are automatically provided by the VPN server)

    I've checked the option in Network manager gui and it seems that they're the same:
    EAP is disabled
    MPPE is enabled using  Default Security
    statefull encryption is disabled
    BSD/Deflate/TCP compression are enabled

    P.S. I'm obscuring hostname, because is a vpn that I'm using at work…

    Regards,
    Alessio

     
  • Nobody/Anonymous

    Hi Allesio,

    You should not need to enable MPPE as it';s really another layer of encryption over something that is already encrypted using SSL. Kind of a dummy option, but the PPP properties page is really just copied from the other PPTP VPN plugins for NetworkManager.

    To better troubleshot this, you can create a su shell (sudo su), and execute the following command on the console:
    NM_PPP_DEBUG=1 /usr/lib/NetworkManager/nm-sstp-service -debug

    Once you use NetworkManager to connect to the work connection, this will exit after the first connection is closed. However, it will print to the console a lot of extra valuable debug information. You can mask out any values you see fit and/or email to me privately.

    Hopefully, we'd be able to uncover some lurking bug or configuration option error.

    Regards,
    - Eivind

     
  • Nobody/Anonymous

    By the way, could you also send me the output of the following command:
    dpkg-query -l *sstp*

     
  • Alessio "Spinus" Moscatello

    Hello Eivind,
    this is the output of dpkg-query:

    $ dpkg-query -l *sstp*
    Desired=Unknown/Install/Remove/Purge/Hold
    | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
    |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
    ||/ Name                            Version                         Description
    +++-===============================-===============================-==============================================================================
    ii  network-manager-sstp            0.9.1-0ubuntu4                  network management framework (SSTP plugin core)
    ii  network-manager-sstp-gnome      0.9.1-0ubuntu4                  network management framework (SSTP plugin GNOME GUI)
    ii  sstp-client                     1.0.6                           Secure Socket Tunneling Protocol (SSTP) Client

    I'll send you a private message via sourceforge with the debug output…

    Regards,
    Alessio

     

Log in to post a comment.