Bug 5741 - VPN PPTP Fails (with networkmanager )
Summary: VPN PPTP Fails (with networkmanager )
Status: RESOLVED DUPLICATE of bug 2894
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: Cauldron
Hardware: x86_64 Linux
Priority: Normal major
Target Milestone: Mageia 2
Assignee: Mageia Bug Squad
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-05-04 00:11 CEST by Robert Evans
Modified: 2012-07-28 22:38 CEST (History)
9 users (show)

See Also:
Source RPM: ppp
CVE:
Status comment:


Attachments
PPP 2.4.5-7 From Mandriva 2011 (238.40 KB, patch)
2012-05-13 15:06 CEST, Robert Evans
Details | Diff
PPP 2.4.5-7 from Mandriva 2011 (x86_64) (244.88 KB, text/plain)
2012-05-13 15:07 CEST, Robert Evans
Details
PPP rebuilt for Mageia 2 (244.18 KB, application/x-rpm)
2012-05-14 19:20 CEST, Robert Evans
Details

Description Robert Evans 2012-05-04 00:11:43 CEST
Description of problem:

When attempting to connect to a PPTP connection using a wireless connection (wired connection has not been tested), Network Manager attempts the connection and then immediately says "Connection .. failed"

Output produced in the syslog indicates the following:

May  3 17:58:05 [hostname] NetworkManager[939]: <error> [1336082285.575678] [nm-vpn-connection.c:934] get_secrets_cb(): Failed to request VPN secrets #2: (6) No agents were available for this request.


Version-Release number of selected component (if applicable):
Mageia 2 Beta 3, updates current as of 5-3-2012 18:07EST

How reproducible:
Every time

Steps to Reproduce:
1. Install Network Manager
2. Set up a wireless connection via Control Center and allow it to be controlled with Network Manager
3. Create a PPTP VPN connection.
4. Attempt connection, Network Manager immediately responds that connection failed.
Robert Evans 2012-05-04 00:14:21 CEST

CC: (none) => neograven

Comment 1 Manuel Hiebel 2012-05-04 17:34:53 CEST
have you some errors in the syslog ?

tailf /var/log/syslog when you try to make a connection

Keywords: (none) => NEEDINFO
CC: sysadmin-bugs => (none)
Component: Release (media or process) => RPM Packages
Source RPM: (none) => networkmanager

Comment 2 Robert Evans 2012-05-04 18:37:00 CEST
It was in the description:

May  3 17:58:05 [hostname] NetworkManager[939]: <error> [1336082285.575678]
[nm-vpn-connection.c:934] get_secrets_cb(): Failed to request VPN secrets #2:
(6) No agents were available for this request.
Comment 3 Robert Evans 2012-05-10 21:50:01 CEST
I tested this with RC, here is the output you're looking for:


May 10 15:48:56 localhost NetworkManager[546]: <info> Starting VPN service 'pptp'...
May 10 15:48:56 localhost NetworkManager[546]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 1991
May 10 15:48:56 localhost NetworkManager[546]: <info> VPN service 'pptp' appeared; activating connections
May 10 15:48:56 localhost NetworkManager[546]: <info> VPN plugin state changed: init (1)
May 10 15:48:56 localhost NetworkManager[546]: <info> VPN plugin state changed: starting (3)
May 10 15:48:56 localhost NetworkManager[546]: <info> VPN connection 'Miniclip' (Connect) reply received.
May 10 15:48:56 localhost pppd[1993]: unrecognized option 'require-mppe'
May 10 15:48:56 localhost NetworkManager[546]: <warn> VPN plugin failed: 0
May 10 15:48:56 localhost NetworkManager[546]: <info> VPN plugin state changed: stopped (6)
May 10 15:48:56 localhost NetworkManager[546]: <info> VPN plugin state change reason: 10
May 10 15:48:56 localhost NetworkManager[546]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.
May 10 15:48:56 localhost NetworkManager[546]: <info> Policy set 'System eth0' (eth0) as default for IPv4 routing and DNS.
May 10 15:49:01 localhost NetworkManager[546]: <info> VPN service 'pptp' disappeared
Comment 4 Manuel Hiebel 2012-05-10 21:59:49 CEST
oh sorry for this bug, any ideas ?

Keywords: NEEDINFO => (none)
CC: (none) => fundawang, mageia, olav
Summary: VPN PPTP Fails => VPN PPTP Fails (with networkmanager )

Comment 5 Robert Evans 2012-05-13 15:04:09 CEST
Seems as if the version of ppp used by Mageia has an issue with the mppe options, see this article (http://forum.mandriva.com/en/viewtopic.php?f=171&t=125092&start=25)


There is a ppp folder supplied within the article that has packages to correct the issue (I've attached the x86 and x86_64 versions).

I will be installing Mageia2RC baremetal now, versus VM and test this in a live environment to see how it does.

In the VM, these packages do in fact support the 'require-mppe-128' option.

I will post back ASAP.
Comment 6 Robert Evans 2012-05-13 15:06:07 CEST
Created attachment 2292 [details]
PPP 2.4.5-7 From Mandriva 2011

32 bit version
Comment 7 Robert Evans 2012-05-13 15:07:20 CEST
Created attachment 2293 [details]
PPP 2.4.5-7 from Mandriva 2011 (x86_64)

This is the x86_64 version of PPP
Robert Evans 2012-05-13 15:09:33 CEST

Keywords: (none) => PATCH
Status: NEW => ASSIGNED
Target Milestone: --- => Mageia 2
Severity: normal => major

Comment 8 Robert Evans 2012-05-13 16:38:13 CEST
Once I installed the ppp package (e.g. rpm -Uhv ppp-2.4.5-7-mdv2011.0.x86_64.rpm ) the PPTP VPN worked correctly.
Comment 9 claire robinson 2012-05-13 16:45:44 CEST
Seems related to bug 2894
Comment 10 Robert Evans 2012-05-13 17:56:18 CEST
At first I thought it was too, but I posted this to the forums and one of the people on there pointed out that the mppe patch was actually applied in line 181 of the module source.

Even if it wasn't applied, in either case it would be nice to have the full version of ppp available. Perhaps it could be made available in tainted repos as a package?
Comment 11 Manuel Hiebel 2012-05-14 16:52:34 CEST
robert, are you working on this bug since you have change the status to assigned ?
(we have not the same policy as other project)

Feel free to do so since there is no maintainer :)

Source RPM: networkmanager => ppp

Comment 12 Robert Evans 2012-05-14 17:32:29 CEST
I am looking at packaging this for Mageia and then attempt to get submitted ;)

Just taking time :(
Robert Evans 2012-05-14 19:18:44 CEST

Attachment 2292 is obsolete: 0 => 1

Robert Evans 2012-05-14 19:18:56 CEST

Attachment 2293 is obsolete: 0 => 1

Comment 13 Robert Evans 2012-05-14 19:20:21 CEST
Created attachment 2312 [details]
PPP rebuilt for Mageia 2

The attached package is an rpm built for Mageia 2 x86_64
Comment 14 Florian Hubold 2012-05-14 21:08:34 CEST
You'd need to post a diff against the latest spec for ppp we have in cauldron, binary packages alone are useless. See here how to do an anyonymous checkout:
https://wiki.mageia.org/en/Packagers_svn#Is_there_anonymous_access_to_svn.3F

Apply your changes inside that checkout, and post here the output of svn diff inside that checkout.

Status: ASSIGNED => NEW
CC: (none) => doktor5000

Comment 15 Robert Evans 2012-05-15 02:53:12 CEST
I'm really not sure how to do what you're asking. I've never done any packaging for mainline distros, so I need specific direction here. Be glad to do it, though.

The srpm I have (2.4.5-7) is newer than what's in svn (2.4.5-6). With our repos at work, we just rebuild our rpms from the new source and replace the old binary rpms.
Comment 16 Robert Evans 2012-05-18 15:37:09 CEST
There is a regression, when the state changes on the network adapter the PPTP connection doesn't drop, but the network adapter's connection will not reset according to state. There was an upstream report on this, and I will watch for any changes.

I would recommend that we don't use the 2.4.5-7 yet until this is fixed, unless people want to deal with that irritation to have their MPPE.

Also, as to my previous question, do you want a diff on the source, or the .SPEC file, or is it something else?
Comment 17 Marja Van Waes 2012-05-26 13:10:12 CEST
Hi,

This bug was filed against cauldron, but we do not have cauldron at the moment.

Please report whether this bug is still valid for Mageia 2.

Thanks :)

Cheers,
marja

Keywords: (none) => NEEDINFO

Comment 18 Robert Evans 2012-05-29 19:11:25 CEST
I will test this ASAP and follow up ;)

RE
Comment 19 Robert Evans 2012-05-31 01:46:11 CEST
(In reply to comment #18)
> I will test this ASAP and follow up ;)
> 
> RE

I have confirmed that PPTP with MPPE does not work in the final release. Same reasons listed above. Newer PPP (2.4.5-7) does work, when installed. 

RE
Florian Hubold 2012-06-03 22:59:42 CEST

CC: doktor5000 => (none)

Comment 20 Per Nelvig 2012-06-11 13:16:02 CEST
Pinging this bug. Mppe-support is needed also in Mageia 2. Seems easy to fix for those who know how to compile and package. Pls don't forget about a package for 32-bit version.

CC: (none) => pernel

Comment 21 Robert Evans 2012-06-11 15:55:10 CEST
I can easily create the 32-bit and 64-bit packages, however I am waiting to find out what diff they need to get this in to the main distro. (I am very new to packaging, having only done it for myself.)
Comment 22 Per Nelvig 2012-06-12 13:27:14 CEST
Thank you. You helped me at mandriva forum already. Let's hope for some response and advice from the mageia people.
Comment 23 Manuel Hiebel 2012-06-12 13:37:25 CEST
I'm not packager, but a diff is only the difference between your file and another one. You can have it with something like:

diff -u your.spec mageia.spec

http://svnweb.mageia.org/packages/cauldron/ppp/current/SPECS/ppp.spec?view=co

you can maybe also provide an srpm, will try to found an apprentice to help here.

Keywords: NEEDINFO, PATCH => (none)

Peter Miller 2012-06-21 03:34:32 CEST

CC: (none) => pfmiller

Comment 24 Florian Hubold 2012-07-07 16:18:57 CEST
The most convenient way to provide this is via an svn checkout of the Mageia package, then changing it so that it works, and provide the output of svn diff here.

For that, you may want to have a look at https://wiki.mageia.org/en/Packagers_svn#Is_there_anonymous_access_to_svn.3F
then adapt the spec inside that checkout to your needs, and verify that it build via bm -la name_of_package.spec and then just do an svn diff inside that checkout, and attach that here.

CC: (none) => doktor5000

Comment 25 tom massimi 2012-07-10 10:57:16 CEST
Hi, I'm hitted by this problem too.

Any news about the solution?

It is possible at least to see the diff?

Thanks
Tom

CC: (none) => tmassimi

Thierry Vignaud 2012-07-28 18:00:59 CEST

Attachment 2293 is patch: 1 => 0

Comment 26 Thierry Vignaud 2012-07-28 18:01:23 CEST
Comment on attachment 2312 [details]
PPP rebuilt for Mageia 2

attaching binary packages is useless...

Attachment 2312 is obsolete: 0 => 1

Comment 27 Thierry Vignaud 2012-07-28 18:06:30 CEST
Duplicate bug.
The issue is that enabling mppe is illegal in some countries.
See http://svnweb.mageia.org/packages/cauldron/ppp/current/SPECS/ppp.spec?revision=275387&view=markup, lines 46-53:

"disable this patch, because it need a rediff and also
there are some legal issues
Although the module's source code is completely free,
MPPC itself is patented algorithm.
Patent for *Microsoft* PPC is holded by the Hifn Inc.
Furthermore, MPPE uses RC4[1] encryption algorithm which itself
isn't patented, but RC4 is trademark of RSA Data Security Inc.
To avoid legal problems, US citizens shouldn't use this module."

*** This bug has been marked as a duplicate of bug 2894 ***

Status: NEW => RESOLVED
CC: (none) => thierry.vignaud
Resolution: (none) => DUPLICATE

Comment 28 Robert Evans 2012-07-28 18:43:15 CEST
Red Hat out of Raleigh, North Caroline USA have it enabled. Don't see why there are some few distros that cripple it; it's apparently a non-issue. Even SuSE have it enabled, and it was owned by Novell - another USA corporation.

But, if it's an issue then this is a moot discussion. If you need MPPE, just use another distro. I had to move on already :(
Comment 29 Florian Hubold 2012-07-28 19:20:57 CEST
Well perhaps Redhat and Novell bought licenses or have verified via their lawyers that they can redistribute this without harming some patent or other rights or made some contracts for that. Will you pay a lawyer who will investigate the case for Mageia, or would you be willing to pay the fines and penalties for patent infringement, if we were to enable this?
Comment 30 Olivier Blin 2012-07-28 22:38:50 CEST
That's why we have the "tainted" repository.
We should enable the mppe patch in a tainted build of ppp.

Anyway, we should move the discussion to bug 2894

Note You need to log in before you can comment on or make changes to this bug.