FS#69749 - [networkmanager-fortisslvpn] fails with "property »2fa-flags« is invalid or not supported"

Attached to Project: Community Packages
Opened by Sven (skoehler) - Tuesday, 23 February 2021, 18:05 GMT
Last edited by Toolybird (Toolybird) - Monday, 08 May 2023, 21:40 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Jelle van der Waa (jelly)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 3
Private No

Details

Description:
Connection to Forti VPN doesn't work anymore. Networkmanager asks for password, then fails.

journalctl -u NetworkManager says:
Feb 23 18:49:36 thecount NetworkManager[441]: <info> [1614102576.9151] vpn-connection[...,0]: Started the VPN service, PID 52652
Feb 23 18:49:36 thecount NetworkManager[441]: <info> [1614102576.9308] vpn-connection[...,0]: Saw the service appear; activating connection
Feb 23 18:49:39 thecount NetworkManager[441]: <info> [1614102579.5014] vpn-connection[...,0]: VPN connection: (ConnectInteractive) reply received
Feb 23 18:49:39 thecount NetworkManager[441]: <warn> [1614102579.5015] vpn-connection[...,0]: VPN connection: failed to connect interactively: 'Eigenschaft »2fa-flags« ist ungültig oder wird nicht unterstützt'
Feb 23 18:49:39 thecount NetworkManager[441]: <info> [1614102579.5031] vpn-connection[...,0]: VPN plugin: state changed: stopped (6)
Feb 23 18:49:39 thecount NetworkManager[441]: <info> [1614102579.5041] vpn-connection[...,0]: VPN service disappeared

The error message roughly translates to "property 2fa-flags is invalid or not supported".


Additional info:
* networkmanager-fortisslvpn 1.4rc1-3
* openfortivpn 1.15.0-1

Steps to reproduce:
Try to connect to forticlient SSL VPN via networkmanager-fortisslvpn and openfortivpn.

This task depends upon

Closed by  Toolybird (Toolybird)
Monday, 08 May 2023, 21:40 GMT
Reason for closing:  Fixed
Comment by Sven (skoehler) - Tuesday, 23 February 2021, 18:08 GMT
I should add that the connection work perfectly when I try it on the command line by executing /usr/bin/openfortivpn directly
Comment by Sven (skoehler) - Tuesday, 23 February 2021, 18:56 GMT
Whenever I create a new VPN connection in the GUI, the generated configuration file contains the lines

[vpn]
2fa-flags=0


That seems to be cause of the issue. I can't even find the string "2fa-flags" in the sources of networkmanager-fortisslvpn, so maybe this line is added by NetworkManager itself?
Also, I'm using KDE plasma.
Comment by Sven (skoehler) - Tuesday, 23 February 2021, 19:23 GMT Comment by Sven (skoehler) - Wednesday, 24 February 2021, 13:07 GMT
The issue seems to be cause by plasma-nm. It put properties named 2fa and 2fa-flags in the nmconnection file. This is not handled by networkmanager-fortisslvpn.
I am using plasma-nm 5.21.0-1
Comment by Sven (skoehler) - Wednesday, 24 February 2021, 13:08 GMT
patch to ignore those attributes
Comment by Sven (skoehler) - Thursday, 16 December 2021, 21:07 GMT
Corona is still around, home-office with VPN is still a thing, and KDE users are still locked out.
Is nobody going to take care of this?
Comment by Toolybird (Toolybird) - Monday, 08 May 2023, 21:40 GMT

Loading...