Re: Howto debug OpenVPN connection?

[Dan Williams <dcbw redhat com>]

On Tue, 2011-06-21 at 00:58 -0400, Eric B. wrote:
> On 06/21/2011 12:53 AM, Dan Williams wrote:
> > On Mon, 2011-06-20 at 23:35 -0400, Eric B. wrote:
> >> Hi,
> >>
> >> I am fairly new to the NetworkManager, and am trying to understand how
> >> to enable additional debug information for a failing OpenVPN connection.
> >>
> >> I've installed the OpenVPN plugin, but I am not getting enough
> >> information in /var/log/messages and would like to see if there is a way
> >> to enable additional information.  Is there some configuration flag
> >> somewhere that I can enable for this?
> >
> > killall -TERM nm-openvpn-service
> > /path/to/nm-openvpn-service --debug --persist
> >
> > that works for newer versions of nm-openvpn (like 0.8.1 and later); for
> > earlier versions you may need to:
> >
> > killall -TERM nm-openvpn-service
> > OPENVPN_DEBUG=1 /path/to/nm-openvpn-service --persist
> >
> > where of course /path/to/ gets replaced with where that binary lives;
> > for non-Debian systems it's usually /usr/libexec otherwise I'm not sure
> > where it lives.
> >
> > Dan
> 
> 
> Thanks for the quick response.  Am running Fedora 14 and have 
> NetworkManager-openvpn-0.8.1-1.fc14.i686 installed.
> 
> When I try your suggestions, I get the following messages (non-root 
> account):
> 
> [eric@eric-laptop ~]$ killall -TERM 
> nm-openvpn-servicenm-openvpn-service: no process found

That's fine, seems the service isn't running which is normal if the VPN is disconnected.

> [eric@eric-laptop ~]$ /usr/libexec/nm-openvpn-service --debug --persist
> ** (process:8434): WARNING **: <WARN>  constructor(): Connection 
> ":1.134" is not allowed to own the service 
> "org.freedesktop.NetworkManager.openvpn" due to security policies in the 
> configuration file

Oops; you need to run it as root via something like:

sudo /usr/libexec/nm-openvpn-service --debug --persist

Dan