Re: Notification disjoint - VPN now failed, notifications showing still connected.

[Another Sillyname <anothersname googlemail com>]

Dan

I've responded with a couple of log attachment zips direct to your
account, if you don't see them they may be in your spamtrap.

Regards

Tony

On 17 December 2014 at 15:56, Dan Williams <dcbw redhat com> wrote:
> On Wed, 2014-12-17 at 14:45 +0000, Another Sillyname wrote:
> > I have setup a VPN on a Laptop using Fedora 21 x86_64.
> >
> > The VPN works fine however the gnome notifications are not reflecting
> > the true state of the VPN.
> >
> > In Network Settings you can connect to XXXVPN using the ON/OFF switch.
> >
> > If you then do a 'nmcli connections show --active' you will get the
> > correct information regarding the VPN and also the tun will show
> > active on a separate line.
> >
> > ifconfig reports the 'hard' settings for the nic together with the
> > relevant VPN settings.
> >
> > I had noticed on a couple of occasions the VPN had dropped however the
> > gnome settings were still showing active.....
> >
> > So if the VPN gets dropped (NOT manually disconnected)
> >
> > Gnome settings will still show the VPN as connected.
> >
> > nmcli connections show --active
> >
> > will still show the VPN as active, however the 'tun' line has now
> > disappeared confirming the VPN is down.
>
> If this happens, then it seems that the VPN you're using isn't notifying
> the NM VPN plugin about the failure, or there's a bug in the plugin.
> But we'll need some logs for that.  Based on what you describe, I think
> this VPN drop thing is a bug in NM or the VPN plugin.
>
> Can you grab some /var/log/messages about that?  Also very useful is to
> run the specific VPN plugin with "--debug --persist" which will dump a
> ton of information that we can use to figure it out.  eg:
>
> /usr/libexec/nm-vpnc-service --debug --persist
> /usr/libexec/nm-openvpn-service --debug --persist
>
> Dan
>
> > ifconfig shows the 'hard' settings for the nic but no entry for the VPN.
> >
> > This means there's a disjoint in what is being reported via
> > Gnome/NetworkManager and the actuality of the status of the VPN.
> >
> > In effect there would appear to be a need to 'actively poll' the tun
> > to ensure the VPN is still active and if the tun fails NetworkManager
> > needs to be updated accordingly.
> > _______________________________________________
> > networkmanager-list mailing list
> > networkmanager-list gnome org
> > https://mail.gnome.org/mailman/listinfo/networkmanager-list