Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#38098 - [networkmanager] can not obtain VPN secrets after upgrade

Attached to Project: Arch Linux
Opened by Paul DIckson (TwoNotes) - Tuesday, 10 December 2013, 20:31 GMT
Last edited by Jan de Groot (JGC) - Monday, 21 April 2014, 10:34 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Jan de Groot (JGC)
Architecture x86_64
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
Since my most recent upgrade last night (which upgraded Linux and some other things that do not seem related) I am unable to start VPN sessions. This worked fine before the upgrade. The VPN session uses PPTP. I start it using the NetworkManager Applet in my XFCE panel.

I know that the VPN server itself is OK because I could connect to it from another computer.

Additional info:
* package version(s)
Linux 3.12.3-1 on x86_64
NetworkManager 0.9.8.8-1
NetworkManager plugin for PPTP 0.9.8.4-1

* config and/or log files etc.
From journalctl:
Dec 10 15:17:56 crescendo NetworkManager[268]: <info> Starting VPN service 'pptp'...
Dec 10 15:17:56 crescendo NetworkManager[268]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 7858
Dec 10 15:17:56 crescendo NetworkManager[268]: <info> VPN service 'pptp' appeared; activating connections
Dec 10 15:17:56 crescendo NetworkManager[268]: <info> VPN plugin state changed: init (1)
Dec 10 15:17:57 crescendo slim[275]: Gkr-Message: secret service operation failed: The name org.freedesktop.secrets was not provided by any .service
Dec 10 15:19:57 crescendo NetworkManager[268]: <error> [1386706797.59498] [nm-vpn-connection.c:1374] get_secrets_cb(): Failed to request VPN secrets

The pacman log of the most recent upgrade:
[2013-12-09 15:43] [PACMAN] upgraded boost-libs (1.54.0-4 -> 1.55.0-2)
[2013-12-09 15:43] [PACMAN] upgraded vigra (1.9.0-7 -> 1.9.0-8)
[2013-12-09 15:43] [PACMAN] upgraded enblend-enfuse (4.1.1-3 -> 4.1.1-4)
[2013-12-09 15:43] [PACMAN] upgraded freetype2 (2.5.1-1 -> 2.5.2-1)
[2013-12-09 15:43] [PACMAN] upgraded git (1.8.4.2-1 -> 1.8.5.1-1)
[2013-12-09 15:43] [PACMAN] upgraded grub (2.00.5086-1 -> 1:2.00.1282.g5ae5c54-1)
[2013-12-09 15:43] [PACMAN] upgraded lensfun (0.2.7-1 -> 0.2.8-1)
[2013-12-09 15:43] [PACMAN] upgraded hugin (2013.0.0-2 -> 2013.0.0-3)
[2013-12-09 15:43] [PACMAN] upgraded imagemagick (6.8.7.8-1 -> 6.8.7.9-1)
[2013-12-09 15:43] [PACMAN] upgraded jasper (1.900.1-9 -> 1.900.1-10)
[2013-12-09 15:43] [PACMAN] upgraded phonon-gstreamer (4.7.0-2 -> 4.7.1-1)
[2013-12-09 15:43] [PACMAN] upgraded phonon-qt4 (4.7.0-2 -> 4.7.1-1)
[2013-12-09 15:44] [PACMAN] upgraded kdelibs (4.11.3-1 -> 4.11.4-1)
[2013-12-09 15:44] [PACMAN] upgraded libpipeline (1.2.4-1 -> 1.2.5-1)
[2013-12-09 15:44] [PACMAN] upgraded libvpx (1.2.0-2 -> 1.3.0-1)
[2013-12-09 15:44] [PACMAN] upgraded libwbclient (4.1.2-1 -> 4.1.3-1)
[2013-12-09 15:44] [ALPM-SCRIPTLET] >>> Updating module dependencies. Please wait ...
[2013-12-09 15:44] [ALPM-SCRIPTLET] >>> Generating initial ramdisk, using mkinitcpio. Please wait...
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux.preset: 'default'
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux -c /etc/mkinitcpio.conf -g /boot/initramfs-linux.img
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Starting build: 3.12.3-1-ARCH
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [base]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [udev]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [autodetect]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [modconf]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [block]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [filesystems]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [keyboard]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [fsck]
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Generating module dependencies
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Creating gzip initcpio image: /boot/initramfs-linux.img
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Image generation successful
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Building image from preset: /etc/mkinitcpio.d/linux.preset: 'fallback'
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> -k /boot/vmlinuz-linux -c /etc/mkinitcpio.conf -g /boot/initramfs-linux-fallback.img -S autodetect
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Starting build: 3.12.3-1-ARCH
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [base]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [udev]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [modconf]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [block]
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> WARNING: Possibly missing firmware for module: aic94xx
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> WARNING: Possibly missing firmware for module: smsmdtv
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [filesystems]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [keyboard]
[2013-12-09 15:44] [ALPM-SCRIPTLET] -> Running build hook: [fsck]
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Generating module dependencies
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Creating gzip initcpio image: /boot/initramfs-linux-fallback.img
[2013-12-09 15:44] [ALPM-SCRIPTLET] ==> Image generation successful
[2013-12-09 15:44] [PACMAN] upgraded linux (3.12.2-1 -> 3.12.3-1)
[2013-12-09 15:44] [PACMAN] upgraded lua (5.2.2-1 -> 5.2.3-1)
[2013-12-09 15:44] [PACMAN] upgraded nvidia (331.20-1 -> 331.20-2)
[2013-12-09 15:44] [PACMAN] upgraded opus (1.0.3-2 -> 1.1-1)
[2013-12-09 15:44] [PACMAN] upgraded opus-tools (0.1.7-1 -> 0.1.8-1)
[2013-12-09 15:44] [PACMAN] upgraded opusfile (0.2-3 -> 0.4-1)
[2013-12-09 15:44] [PACMAN] upgraded postgresql-libs (9.3.1-4 -> 9.3.2-4)
[2013-12-09 15:44] [PACMAN] upgraded procps-ng (3.3.8-3 -> 3.3.9-1)
[2013-12-09 15:44] [PACMAN] upgraded smbclient (4.1.2-1 -> 4.1.3-1)
[2013-12-09 15:44] [PACMAN] upgraded source-highlight (3.1.7-8 -> 3.1.7-9)
[2013-12-09 15:44] [PACMAN] upgraded xfce4-terminal (0.6.2-1 -> 0.6.2-2)
[2013-12-09 15:44] [PACMAN] upgraded xorg-xinit (1.3.3-2 -> 1.3.3-3)

Steps to reproduce:
Try to start an existing PPTP VPN from the XFCE NetworkManager Applet.
It will time out after 2 minutes with a notification message on the screen of "VPN connection X failed because there are no valid VPN secrets." In the above log, this corresponds to the final log entry at 15:19:57.
This task depends upon

Closed by  Jan de Groot (JGC)
Monday, 21 April 2014, 10:34 GMT
Reason for closing:  Works for me
Additional comments about closing:  gnome-keyring startup failure, not a networkmanager bug but user configuration error.
Comment by Paul DIckson (TwoNotes) - Tuesday, 10 December 2013, 22:55 GMT
A couple of reboots later, and now it works. I have no explanation, as I did not change anything.
Comment by Paul DIckson (TwoNotes) - Saturday, 28 December 2013, 04:35 GMT
It does not happen after every boot, so this is hard to catch. But now I see messages like this in the log when it does fail, indicating that /etc/krb5.keytab is missing, and indeed it is not there:

rpc.gssd[336]: ERROR: Key table file '/etc/krb5.keytab' not found while beginning keytab scan for keytab 'FILE:/etc/krb5.keytab'

Could the missing 'secrets' that VPN complains about have something to do with Kerberos?
Comment by Francisco Pina (Stunts) - Thursday, 13 March 2014, 12:00 GMT
Can you try this?
http://dingyichen.wordpress.com/2013/11/20/properly-use-gnome-keyring-daemon-enlightenment-e-17-with-ssh-agent-support/
It solved the same problem for me on e18 and I added it to the Wiki here: https://wiki.archlinux.org/index.php/Enlightenment#GNOME_Keyring_integration

Let me know if it helps.
Comment by Marcus (MindfulMonk) - Saturday, 15 March 2014, 02:33 GMT
I have the same problem. Also the wifi password prompt doesn't show for me.

No problems with polkit from what I see though, because the keyring starts with lightdm and unlocks my ssh key.
Comment by Francisco Pina (Stunts) - Sunday, 16 March 2014, 12:05 GMT
Like it is mentioned in the link I have posted, the ssh keys get unlocked by the keyring, but the NM passwords don't. Can you please test if seahorse in your machine behaves as it is described there?
Comment by Marcus (MindfulMonk) - Sunday, 16 March 2014, 13:46 GMT
Actually I found the problem, I had this in .profile, which overwrote the variables
eval $(gnome-keyring-daemon --start)
export GNOME_KEYRING_CONTROL GNOME_KEYRING_PID GPG_AGENT_INFO SSH_AUTH_SOCK

When I changed it to
eval $(gnome-keyring-daemon --start --components=ssh)
export SSH_AUTH_SOCK

All is fine now.
Comment by Francisco Pina (Stunts) - Sunday, 16 March 2014, 14:59 GMT
Awesome, I'm glad I could help.
In fact your solution has also helped me with an old problem.
@OP:
Does this also fix your issue? Or is there really a bug buried somewhere around here?

Loading...