Re: openvpn fails to start

[Dan Williams <dcbw redhat com>]

On Sat, 2008-08-30 at 08:07 +1000, Steven O'Connor wrote:
> After a recent update, if I attempt to start a vpn with network
> manager, it fails and the following is in syslog.
> 
> Aug 30 08:00:13 rax nm-openvpn[10105]: TUN/TAP device tun0 opened
> Aug 30 08:00:13 rax nm-openvpn[10105]: /sbin/ifconfig tun0 10.8.141.6
> pointopoint 10.8.141.5 mtu 1500
> Aug 30 08:00:13 rax
> nm-openvpn[10105]: /usr/lib/network-manager-openvpn/nm-openvpn-service-openvpn-helper tun0 1500 1542 10.8.141.6 10.8.141.5 init
> Aug 30 08:00:13 rax nm-openvpn[10105]: openvpn_execve: external
> program may not be called due to setting of --script-security level
> Aug 30 08:00:13 rax nm-openvpn[10105]: script failed: external program
> fork failed
> Aug 30 08:00:13 rax nm-openvpn[10105]: Exiting
> 
> What is the " --script-security level", and where can I set it?

OpenVPN 2.1-rc9 added this option, and you'll need to set it to "2" in
the sources for the openvpn plugin.  It's really, really icky to have to
autodetect what option to use here, so we'll probably just add that
option and then distros ship older openvpn versions will just have to
patch it out locally.

Dan