Configure OpenVPN (GUI) on Ubuntu 12.04

[Koshur]

Hi 

 

I'm trying to configure OpenVPN by following http://www.securitykiss.com/resources/tutorials/conf_linux_nm/ubuntu/. I followed the steps as mentioned but when I connect (wifi icon in taskbar > VPN connections > Security Kiss) it connects(as per the status notification) but I dont have access to internet, I cant browser. All the files all in /home/koshur/securitykiss_winopenvpn_client02832283 and I've uncommented the server in openvpn.conf file. The guide on Ubuntu help page shows the command line method :https://help.ubuntu.com/lts/serverguide/openvpn.html. I was looking to do it through network connections GUI though.

 

I think I'm missing something???

 

 

 

 

 

Thanks
Mark

[+BudMan]

Well for starters from the config your showing

proto udp

but then in that gui you have use tcp connection checked.

edit:

Ok in the readme.txt it states

In openvpn.conf uncomment the server you want to connect to and update the 'proto' line:

-tcp when port 443 is used

-udp when port 123 is used

So you didn't update the proto line?

[Koshur]

ok. changed it to proto tcp. but still no luck. get the message for vpn successfully connected and after a minute it says connection failed. 

 

 

 

 

 

 

[Redmak]

Do you have any logs you can post? (and the complete openvpn.conf file)

[+BudMan]

Well looks like you got a connection and IP there..

I would change your conf file to be at verb 3 at min, and then lets take a look at the log.

[Koshur]

Where would i find the log file. path? 

 

Here's what inside conf file

client
pull
dev tun
proto tcp
# Uncomment the server you want to connect to
#remote 184.154.116.157 123 # United States, Chicago
remote 184.154.116.157 443 United States, Chicago
#remote 184.154.116.157 5353 # United States, Chicago
#remote 184.154.116.157 5000 # United States, Chicago
#remote 217.147.94.149 123 # United Kingdom, Maidenhead
#remote 217.147.94.149 443 # United Kingdom, Maidenhead
#remote 37.59.65.55 123 # France, Paris
#remote 37.59.65.55 443 # France, Paris
#remote 176.31.215.0 123 # France, Paris
#remote 176.31.215.0 443 # France, Paris
#remote 46.165.221.230 123 # Germany, Darmstadt
#remote 46.165.221.230 443 # Germany, Darmstadt
#remote 176.31.32.106 123 # France, Paris
#remote 176.31.32.106 443 # France, Paris
#remote 91.121.166.108 123 # France, Paris
#remote 91.121.166.108 443 # France, Paris
#remote 46.165.197.1 123 # Germany, Frankfurt
#remote 46.165.197.1 443 # Germany, Frankfurt
#remote 64.251.22.13 123 # United States, Miami
#remote 64.251.22.13 443 # United States, Miami
#remote 64.251.22.13 5353 # United States, Miami
#remote 64.251.22.13 5000 # United States, Miami
#remote 31.24.33.221 123 # United Kingdom, Newcastle
#remote 31.24.33.221 443 # United Kingdom, Newcastle
#remote 62.75.181.139 123 # Germany, Bonn
#remote 62.75.181.139 443 # Germany, Bonn
#remote 109.75.167.42 123 # United Kingdom, Leeds
#remote 109.75.167.42 443 # United Kingdom, Leeds
#remote 78.129.174.84 123 # United Kingdom, London
#remote 78.129.174.84 443 # United Kingdom, London

resolv-retry infinite
nobind
persist-key
persist-tun
mute-replay-warnings
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3
keepalive 5 28
route-delay 3
win-sys env

[Koshur]

Well looks like you got a connection and IP there..

I would change your conf file to be at verb 3 at min, and then lets take a look at the log.

 

verb 3 at min?

[+BudMan]

It is there in the file - this determines the logging level verbosity.

As to path of connection, I believe since your using the connection manager plugin that it would be in your syslog?? Don't quote me on that I would have to fire up using openvpn with gui like your doing, etc.

You should be able to just grep for it, something like

cat /var/log/syslog | grep VPN

I will have to look to what I got in config file when I setup a free account with that provider, not sure why

win-sys env

should be in a linux opvn file?

OK -- I just downloaded the linux bundle from them and there is no opvn file included.. Your just suppose to setup the network manager with the specific info. So if you have a openvpn configuration file that is meant for windows in your linux system, that could be causing you a problem.

I will have to fire up my desktop ubuntu vm and get a test run. But that might be your problem. I would start over and make sure you grab the linux configuration bundle for openvpn. It only includes you ca.crt the client.crt and the client.key with a readme of the servers to use udp or tcp, etc.

these are the instructions your following?

http://www.securitykiss.com/resources/tutorials/conf_linux_nm/ubuntu/

[Koshur]

koshur@koshur-HP-ProBook-4530s:~$ cat /var/log/syslog | grep VPN

Dec 3 20:05:02 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN: loaded org.freedesktop.NetworkManager.pptp

Dec 3 20:05:02 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN: loaded org.freedesktop.NetworkManager.openvpn

Dec 3 20:08:32 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> Starting VPN service 'openvpn'...

Dec 3 20:08:32 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3156

Dec 3 20:08:32 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' appeared; activating connections

Dec 3 20:08:32 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: starting (3)

Dec 3 20:08:32 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (Connect) reply received.

Dec 3 20:08:32 koshur-HP-ProBook-4530s nm-openvpn[3159]: OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013

Dec 3 20:08:52 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) reply received.

Dec 3 20:08:52 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN Gateway: 184.154.116.157

Dec 3 20:08:55 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) complete.

Dec 3 20:08:56 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: started (4)

Dec 3 20:10:16 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 2

Dec 3 20:10:16 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 1

Dec 3 20:10:16 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: stopped (6)

Dec 3 20:10:16 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state change reason: 0

Dec 3 20:10:16 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.

Dec 3 20:10:22 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' disappeared

Dec 3 20:10:30 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> Starting VPN service 'openvpn'...

Dec 3 20:10:30 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 3445

Dec 3 20:10:30 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' appeared; activating connections

Dec 3 20:10:30 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: starting (3)

Dec 3 20:10:30 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (Connect) reply received.

Dec 3 20:10:30 koshur-HP-ProBook-4530s nm-openvpn[3448]: OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013

Dec 3 20:10:51 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) reply received.

Dec 3 20:10:51 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN Gateway: 184.154.116.157

Dec 3 20:10:54 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) complete.

Dec 3 20:10:54 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: started (4)

Dec 3 20:12:18 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 2

Dec 3 20:12:18 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 1

Dec 3 20:12:18 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: stopped (6)

Dec 3 20:12:18 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state change reason: 0

Dec 3 20:12:18 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.

Dec 3 20:12:24 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' disappeared

Dec 3 22:16:01 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> Starting VPN service 'openvpn'...

Dec 3 22:16:01 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 7787

Dec 3 22:16:01 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' appeared; activating connections

Dec 3 22:16:01 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: starting (3)

Dec 3 22:16:01 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (Connect) reply received.

Dec 3 22:16:01 koshur-HP-ProBook-4530s nm-openvpn[7790]: OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013

Dec 3 22:16:26 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) reply received.

Dec 3 22:16:26 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN Gateway: 184.154.116.157

Dec 3 22:16:29 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) complete.

Dec 3 22:16:29 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: started (4)

Dec 3 22:17:55 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 2

Dec 3 22:17:55 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 1

Dec 3 22:17:55 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: stopped (6)

Dec 3 22:17:55 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state change reason: 0

Dec 3 22:17:55 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.

Dec 3 22:18:01 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' disappeared

Dec 3 22:18:11 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> Starting VPN service 'openvpn'...

Dec 3 22:18:11 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 8124

Dec 3 22:18:11 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' appeared; activating connections

Dec 3 22:18:11 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: starting (3)

Dec 3 22:18:11 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (Connect) reply received.

Dec 3 22:18:11 koshur-HP-ProBook-4530s nm-openvpn[8127]: OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Feb 27 2013

Dec 3 22:18:34 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) reply received.

Dec 3 22:18:34 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN Gateway: 184.154.116.157

Dec 3 22:18:38 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN connection 'SecurityKiss' (IP Config Get) complete.

Dec 3 22:18:38 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: started (4)

Dec 3 22:20:02 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 2

Dec 3 22:20:02 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> VPN plugin failed: 1

Dec 3 22:20:02 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state changed: stopped (6)

Dec 3 22:20:02 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN plugin state change reason: 0

Dec 3 22:20:02 koshur-HP-ProBook-4530s NetworkManager[1370]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.

Dec 3 22:20:08 koshur-HP-ProBook-4530s NetworkManager[1370]: <info> VPN service 'openvpn' disappeared

[Koshur]

looks like there is a related bug ?? https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/280160

[Kreuger]

I don't know enough about networking to help but might I suggest you paste that on PasteBin or something similar and link to it next time?

[Koshur]

@Kreuger- point taken  :)

[+BudMan]

looks like there is a related bug ?? https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/280160

From a quick read of that bugreport yes, I would try the work around listed in post #19

I confirm this same bug in Ubuntu 12.04 LTS Precise Pangolin. The same workaround works:

Steps to workaround:

1. Change filename of /usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper
cd /usr/lib/NetworkManager/
mv nm-openvpn-service-openvpn-helper nm-openvpn-service-openvpn-helper.dist

2. Create new file with same old name:
nano nm-openvpn-service-openvpn-helper

3. Fill the file with variables to export and original executable. Copy and paste this:

#!/bin/bash

[ -z "$ifconfig_local" ] && export ifconfig_local=$4
[ -z "$ifconfig_remote" ] && export ifconfig_remote=$5

/usr/lib/NetworkManager/nm-openvpn-service-openvpn-helper.dist $*

4. Make the new file executable:
chmod +x nm-openvpn-service-openvpn-helper

Now it works!
tags: 	added: precise 

[Koshur]

ok, i followed the steps and here's what the files look now:

root@koshur-HP-ProBook-4530s:/usr/lib/NetworkManager# ls
debug-helper.py                    nm-dispatcher.action
ifblacklist_migrate.sh             nm-openvpn-auth-dialog
libnm-openvpn-properties.so        nm-openvpn-service
libnm-pptp-properties.so           nm-openvpn-service-openvpn-helper
libnm-settings-plugin-ifupdown.so  nm-openvpn-service-openvpn-helper.dist
nm-avahi-autoipd.action            nm-openvpn-service-openvpn-helper.dist $*
nm-crash-logger                    nm-pptp-auth-dialog
nm-dhcp-client.action              nm-pptp-service

 

Now, when i try to connect, It says VPN connection failed

[Koshur]

i tried changing the gateway address to France in openvpn.conf but it doesn't connect. 

[Koshur]

here is the log http://pastebin.com/KEKKkg1H

[+BudMan]

ok - I just went through this on my ubuntu 13.10 desktop.. Followed the instructons and bing bang working just fine

Did not have to do anything with that bug, etc. etc. Only thing I had to do that was not covered in the instructions is my client.key when I untared it from tar.gz file was set to 700, and was not showing up in the dialog.. So changed it to 755 and it showed up so I could pick it.

Bing bang zoom working just fine.. I would suggest you start over.. using openvpn with the network manager does not require a opvn file like you showed, and what I pulled at first with the windows configuration.

if you have some sort of conf or opvn file for openvpn -- like you showed, maybe that is what is causing you the issues?

This took all of 2 minutes to setup following their instructions. Can see I am going through their servers

edit: So been connected this whole time, moved some data through the vpn. Seems pretty stable, etc.

[Koshur]

BAZINGAAA....it worked! I purged the package with apt-get purge openvpn and did the installation all over... btw the ping is pathetic (~200ms on most of the gateways, which is bearable coz i'll mostly need it for testing purpose)

 

Cheers mate