Can you try to get fresh cookie before do connect-vpn, and try it without 
~/.cert/my-certchain.crt. If every thing went fine when you run list-provider 
you should see the status ready. After that you can ssh or ping any internal 
machine. David woodhouse mentioned there is more work needed to fix the DNS 
issues so once to are using VPN you might have problem with using external 
website I will talk to David and Marcel and see what we need to fix DNS. But 
for now I just want to make sure you can access internal machine using VPN.
Mohamed 

But... now i see a different set of things that I'm not sure what is happening.

I run:

$ sudo ./connect-vpn SOMENAME THE-IP-OF-MY-VPN-GW XXCOOKIEXXX
~/.cert/my-certchain.crt
Attempting to connect service SOMENAME
Traceback (most recent call last):
  File "./connect-vpn", line 22, in <module>
    "VPN.Domain": "intel.com"}))
  File "/usr/lib/python2.6/site-packages/dbus/proxies.py", line 68, in __call__
    return self._proxy_method(*args, **keywords)
  File "/usr/lib/python2.6/site-packages/dbus/proxies.py", line 140, in __call__
    **keywords)
  File "/usr/lib/python2.6/site-packages/dbus/connection.py", line
622, in call_blocking
    message, timeout)
dbus.exceptions.DBusException: org.moblin.connman.Error.NotSupported:
Not supported

At this point all of my DNS queries timeout, including normal external
servers like www.yahoo.com, or machines i know of inside the VPN i am
trying to connect with.

I can run:
$ ./list-providers
[ /provider/openconnect_SOMENAME ]
    Type = openconnect
    Name = SOMENAME
    PassphraseRequired = 1

I can run 'disconnect-vpn openconnect_SOMENAME' and sometimes my DNS queries
start working again for external machines, and sometimes connman
segfaults (but no, i haven't tried finding the core to get  a trace
yet.)

Am I missing a step? Is there some additional authorization (i.e. the
blurb about PassphraseRequired from list-providers). What should I see
if my cookie is expired?

    --rusty
_______________________________________________
connman mailing list
[email protected]
http://lists.connman.net/listinfo/connman
_______________________________________________
connman mailing list
[email protected]
http://lists.connman.net/listinfo/connman

Reply via email to