[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Íñigo]

https://bugs.kde.org/show_bug.cgi?id=350521

Íñigo  changed:

   What|Removed |Added

 CC||inigohug...@hotmail.com

--- Comment #24 from Íñigo  ---
We are adding some patches to NetworkManager that I expect that will make this
to work from KDE Plasma without any change required. It will need at least
NetworkManager 1.46.2 and NetworkManager-openvpn 1.12.0 (tentative, but
probable versions).

NetworkManager MR:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1958

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[bugzilla_noreply]

https://bugs.kde.org/show_bug.cgi?id=350521

yauhen.vasileu...@gmail.com changed:

   What|Removed |Added

 CC||yauhen.vasileu...@gmail.com

--- Comment #23 from yauhen.vasileu...@gmail.com ---
Is seems the bug is still there

plasma-nm 4:6.0.4-0xneon+22.04+jammy+release+build39

No OTP popup appears

journalctl -u -f NetworkManager

nm-openvpn[65369]: TCP/UDP: Preserving recently used remote address:
[AF_INET]*.*.*.*:*
nm-openvpn[65369]: UDP link local: (not bound)
nm-openvpn[65369]: UDP link remote: [AF_INET]*.*.*.*:*
nm-openvpn[65369]: [OpenVPN Server] Peer Connection Initiated with
[AF_INET]*.*.*.*:*
nm-openvpn[65369]: AUTH: Received control message:
AUTH_FAILED,CRV1:R,E:PG_6K8dDiU5pfn36Iu6:ZXh0ZXJuYWwuZXZnZW5peS52YXNpbGV2c2tpeQ==:Enter
Authenticator Code
nm-openvpn[65369]: SIGUSR1[soft,auth-failure] received, process restarting
NetworkManager[958]:   [1713779336.9853]
vpn[0x6167e3a58880,e2969ec5-4f11-49f5-9075-83ae7b0ed30e,"VPN (openvpn)"]:
connect timeout exceeded
nm-openvpn-serv[65365]: Connect timer expired, disconnecting.
nm-openvpn[65369]: SIGTERM[hard,init_instance] received, process exiting

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Yuriy Vidineev]

https://bugs.kde.org/show_bug.cgi?id=350521

Yuriy Vidineev  changed:

   What|Removed |Added

 CC||adeptsm...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[austin0198]

https://bugs.kde.org/show_bug.cgi?id=350521

austin0...@outlook.com  changed:

   What|Removed |Added

 CC||austin0...@outlook.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Nils]

https://bugs.kde.org/show_bug.cgi?id=350521

Nils  changed:

   What|Removed |Added

 CC||nils.van-zuij...@mailo.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Denis Nelubin]

https://bugs.kde.org/show_bug.cgi?id=350521

Denis Nelubin  changed:

   What|Removed |Added

 CC||dnelu...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Dmitry]

https://bugs.kde.org/show_bug.cgi?id=350521

Dmitry  changed:

   What|Removed |Added

 CC||nrn...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Popescu Sorin]

https://bugs.kde.org/show_bug.cgi?id=350521

Popescu Sorin  changed:

   What|Removed |Added

 CC||djsori...@gmail.com
   Platform|Fedora RPMs |openSUSE RPMs
Version|5.18.0  |5.24.5

--- Comment #22 from Popescu Sorin  ---
On Plasma 5.24.5 is not working. It looks like it doesn't take into
consideration the static-challenge "TOTP SSO:" 1 option.

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Petr Barton]

https://bugs.kde.org/show_bug.cgi?id=350521

Petr Barton  changed:

   What|Removed |Added

 CC||petrbart...@gmail.com

--- Comment #21 from Petr Barton  ---
It also works for me now
I have 5.24.0-1.1 (opensuse)

imho this can be closed

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[hockeymikey]

https://bugs.kde.org/show_bug.cgi?id=350521

--- Comment #20 from hockeymikey  ---
(In reply to Fernando Gomes from comment #19)
>  With plasma-nm-5.23.5-1.fc35.x86_64 the dialog appear correctly.


Not for I. I am on 5.23.5-1 (Arch)

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Fernando Gomes]

https://bugs.kde.org/show_bug.cgi?id=350521

--- Comment #19 from Fernando Gomes  ---
Hi,

 With plasma-nm-5.23.5-1.fc35.x86_64 the dialog appear correctly.

Best Regards,
Fernando Gomes

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[hockeymikey]

https://bugs.kde.org/show_bug.cgi?id=350521

--- Comment #18 from hockeymikey  ---
(In reply to Jan Grulich from comment #17)
> Can you try whether
> https://invent.kde.org/plasma/plasma-nm/-/merge_requests/67 makes any
> difference?

Doesn't for me.

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[hockeymikey]

https://bugs.kde.org/show_bug.cgi?id=350521

hockeymikey  changed:

   What|Removed |Added

 CC||hockeymi...@hockeymikey.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Jan Grulich]

https://bugs.kde.org/show_bug.cgi?id=350521

--- Comment #17 from Jan Grulich  ---
Can you try whether https://invent.kde.org/plasma/plasma-nm/-/merge_requests/67
makes any difference?

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Alex]

https://bugs.kde.org/show_bug.cgi?id=350521

Alex  changed:

   What|Removed |Added

 CC||alex...@protonmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Fernando Gomes]

https://bugs.kde.org/show_bug.cgi?id=350521

Fernando Gomes  changed:

   What|Removed |Added

   Platform|Kubuntu Packages|Fedora RPMs

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Fernando Gomes]

https://bugs.kde.org/show_bug.cgi?id=350521

Fernando Gomes  changed:

   What|Removed |Added

 CC||f...@nsk.pt

--- Comment #16 from Fernando Gomes  ---
I'm using Fedora 33 with plasma-nm-5.20.5-1.fc33.x86_64 and I can also confirm
this behavior.
In GNOME the challenge pops up just as expected, but on KDE there is only asked
for the password and then the connection fails, since the OTP was not provided.

Best Regards,

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Jarno Malmari]

https://bugs.kde.org/show_bug.cgi?id=350521

Jarno Malmari  changed:

   What|Removed |Added

 CC||d...@jmalmari.fi

--- Comment #15 from Jarno Malmari  ---
Still present in plasma-nm 5.19.5-1, networkmanager-openvpn 1.8.12-1.

journalctl --unit nm-openvp --unit NetworkManager:

> [ 6072.762200] NetworkManager[540]:   [1600605261.6491] 
> vpn-connection[...]: Started the VPN service, PID 6707
> [ 6072.768125] NetworkManager[540]:   [1600605261.6551] 
> vpn-connection[...]: Saw the service appear; activating connection
> [ 6077.270378] NetworkManager[540]:   [1600605266.1573] 
> vpn-connection[...]: VPN plugin: state changed: starting (3)
> [ 6077.274301] nm-openvpn[6714]: OpenVPN 2.4.9 
> [git:makepkg/9b0dafca6c50b8bb+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] 
> [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Apr 20 2020
> [ 6077.274343] nm-openvpn[6714]: library versions: OpenSSL 1.1.1g  21 Apr 
> 2020, LZO 2.10
> [ 6077.480234] nm-openvpn[6714]: TCP/UDP: Preserving recently used remote 
> address: [AF_INET]xxx.xxx.xxx.xxx:443
> [ 6077.480658] nm-openvpn[6714]: Attempting to establish TCP connection with 
> [AF_INET]xxx.xxx.xxx.xxx:443 [nonblock]
> [ 6078.480644] nm-openvpn[6714]: TCP connection established with 
> [AF_INET]xxx.xxx.xxx.xxx:443
> [ 6078.481944] nm-openvpn[6714]: TCP_CLIENT link local: (not bound)
> [ 6078.482115] nm-openvpn[6714]: TCP_CLIENT link remote: 
> [AF_INET]xxx.xxx.xxx.xxx:443
> [ 6078.482256] nm-openvpn[6714]: NOTE: UID/GID downgrade will be delayed 
> because of --client, --pull, or --up-delay
> [ 6078.760194] nm-openvpn[6714]: [OpenVPN Server] Peer Connection Initiated 
> with [AF_INET]xxx.xxx.xxx.xxx:443
> [ 6085.258042] nm-openvpn[6714]: AUTH: Received control message: 
> AUTH_FAILED,CRV1:R,E::Y:Enter your one time password
> [ 6085.259484] nm-openvpn[6714]: SIGUSR1[soft,auth-failure] received, process 
> restarting
> [ 6085.259707] NetworkManager[540]:   [1600605274.1461] 
> vpn-connection[...]: VPN plugin: failed: login-failed (0)
> [ 6085.260683] nm-openvpn[6714]: SIGTERM[hard,init_instance] received, 
> process exiting
> [ 6085.260907] NetworkManager[540]:   [1600605274.1463] 
> vpn-connection[...]: VPN plugin: failed: connect-failed (1)
> [ 6085.261142] NetworkManager[540]:   [1600605274.1465] 
> vpn-connection[...]: VPN plugin: state changed: stopping (5)
> [ 6085.261415] NetworkManager[540]:   [1600605274.1470] 
> vpn-connection[...]: VPN plugin: state changed: stopped (6)
> [ 6085.268077] NetworkManager[540]:   [1600605274.1550] 
> vpn-connection[...]: VPN service disappeared

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[bugzilla_noreply]

https://bugs.kde.org/show_bug.cgi?id=350521

p...@extreg.com changed:

   What|Removed |Added

 CC||p...@extreg.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[DarkEye]

https://bugs.kde.org/show_bug.cgi?id=350521

DarkEye  changed:

   What|Removed |Added

Version|5.15.5  |5.18.0
 CC||etherpu...@gmail.com

--- Comment #14 from DarkEye  ---
Same here seems to work in kde an  i get the following error in syslog :

--
Feb 20 18:07:32 -Latitude-E7270 nm-openvpn[16556]: [OpenVPN Server] Peer
Connection Initiated with [AF_INET]XXX.XXX.XX.XXX:1194
Feb 20 18:07:34 -Latitude-E7270 nm-openvpn[16556]: AUTH: Received control
message: AUTH_FAILED,CRV1:R,E:xxx:X==:Enter
Google Authenticator Code
Feb 20 18:07:34 XXX-Latitude-E7270 NetworkManager[1574]:  
[1582214854.1904]
vpn-connection[0x556548b62520,d3ef7923-c5e2-4361-9c9e-4a544fe2f016,"_vpn",0]:
VPN plugin: failed: login-failed (0)
--

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Vitaly Dub]

https://bugs.kde.org/show_bug.cgi?id=350521

Vitaly Dub  changed:

   What|Removed |Added

 CC||forceus...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Vincent Scharf]

https://bugs.kde.org/show_bug.cgi?id=350521

Vincent Scharf  changed:

   What|Removed |Added

 CC||vinc...@scharf.eu.com

--- Comment #13 from Vincent Scharf  ---
I can also confirm this behavior. In GNOME the challenge pops up just as
expected, but on KDE there is only asked for the password and then the
connection fails, since the OTP was not provided.

Is there any work already done on this?

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Michal Sylwester]

https://bugs.kde.org/show_bug.cgi?id=350521

Michal Sylwester  changed:

   What|Removed |Added

 Ever confirmed|0   |1
 Status|REPORTED|CONFIRMED

--- Comment #12 from Michal Sylwester  ---
*** This bug has been confirmed by popular vote. ***

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Jiri Tyr]

https://bugs.kde.org/show_bug.cgi?id=350521

Jiri Tyr  changed:

   What|Removed |Added

 CC||jiri@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Jan Grulich]

https://bugs.kde.org/show_bug.cgi?id=350521

Jan Grulich  changed:

   What|Removed |Added

   Version Fixed In|5.16.0  |
 Status|RESOLVED|REPORTED
 Ever confirmed|1   |0
 Resolution|FIXED   |---

--- Comment #11 from Jan Grulich  ---
Sorry, it's really openconnect for now.

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[GwynBleidD]

https://bugs.kde.org/show_bug.cgi?id=350521

--- Comment #10 from GwynBleidD  ---
Is this really changed in OpenVPN? I can see only changes affecting openconnect
VPN in the source code...

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Jan Grulich]

https://bugs.kde.org/show_bug.cgi?id=350521

Jan Grulich  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
   Version Fixed In||5.16.0
 Resolution|--- |FIXED

--- Comment #9 from Jan Grulich  ---
Support for OTP tokens will be in Plasma 5.16.0.

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Brylie Christopher Oxley]

https://bugs.kde.org/show_bug.cgi?id=350521

--- Comment #8 from Brylie Christopher Oxley  ---
Can confirm that this is still affecting plasma-nm 5.15.4 on Kubuntu 19.04. I
use VPN daily for work, and as a result have to resort to
downloading/installing VPN client. While it is not too difficult to use a
third-party client, it would be nice if the OS VPN manager would handle OTP --
as it is becoming increasingly important to use two-factor authentication.

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Brylie Christopher Oxley]

https://bugs.kde.org/show_bug.cgi?id=350521

Brylie Christopher Oxley  changed:

   What|Removed |Added

 CC||bry...@amble.fi
   Platform|Archlinux Packages  |Kubuntu Packages
Version|0.9.3.5-git |5.15.5

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Nick Cross]

https://bugs.kde.org/show_bug.cgi?id=350521

Nick Cross  changed:

   What|Removed |Added

 CC||k...@goots.org

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Tore Anderson]

https://bugs.kde.org/show_bug.cgi?id=350521

Tore Anderson  changed:

   What|Removed |Added

 CC||t...@fud.no

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[GwynBleidD]

https://bugs.kde.org/show_bug.cgi?id=350521

GwynBleidD  changed:

   What|Removed |Added

 Status|UNCONFIRMED |CONFIRMED
 Ever confirmed|0   |1
 CC||gbd@gmail.com

--- Comment #7 from GwynBleidD  ---
(In reply to Lamarque V. Souza from comment #5)
> (In reply to vst from comment #2)
> > It does not work in Gnome. Here's a bug report:
> > https://bugzilla.gnome.org/show_bug.cgi?id=752740
> > But this may also be a client issue, I cannot tell.
> 
> It looks like [1] this has been implemented in networkmanager-openvpn 1.2.8.
> By what I can see in the implementation we do not need to change anything in
> Plasma NM for it to work. Can you upgrade networkmanager-openvpn an check if
> it works for you?
> 
> [1] https://bugzilla.gnome.org/show_bug.cgi?id=751842

Unfortunately, it does not work. Gnome is properly showing pop-up for oauth
token, but KDE doesn't. VPN is just stuck at connecting after providing
password and timeouts after some time. No popup for token is shown...

It may be relevant to bug in Gnome - if you set your password to be remembered
between connections, it will automatically fill OAuth prompt with your password
and also save OAuth token as your password if you fill it in... Maybe on KDE
side it tries to fill in previously typed password as OAuth token instead of
asking for one?

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[vst]

https://bugs.kde.org/show_bug.cgi?id=350521

--- Comment #6 from vst  ---
Unfortunately I cannot test this now, because I don't have access to an
OTP-enabled OpenVPN server.

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Lamarque V . Souza]

https://bugs.kde.org/show_bug.cgi?id=350521

Lamarque V. Souza  changed:

   What|Removed |Added

 CC||lamar...@kde.org

--- Comment #5 from Lamarque V. Souza  ---
(In reply to vst from comment #2)
> It does not work in Gnome. Here's a bug report:
> https://bugzilla.gnome.org/show_bug.cgi?id=752740
> But this may also be a client issue, I cannot tell.

It looks like [1] this has been implemented in networkmanager-openvpn 1.2.8. By
what I can see in the implementation we do not need to change anything in
Plasma NM for it to work. Can you upgrade networkmanager-openvpn an check if it
works for you?

[1] https://bugzilla.gnome.org/show_bug.cgi?id=751842

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Michael Seifert via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=350521

Michael Seifert  changed:

   What|Removed |Added

 CC||mseif...@error-reports.org

-- 
You are receiving this mail because:
You are watching all bug changes.

[plasma-nm] [Bug 350521] [RFE] [OpenVPN] kdeplasma-applets-plasma-nm does not support OTP Tokens for OpenVPN connections

[Jan Grulich via KDE Bugzilla]

https://bugs.kde.org/show_bug.cgi?id=350521

Jan Grulich  changed:

   What|Removed |Added

Summary|[RFE]   |[RFE] [OpenVPN]
   |kdeplasma-applets-plasma-nm |kdeplasma-applets-plasma-nm
   |does not support OTP Tokens |does not support OTP Tokens
   |for OpenVPN connections |for OpenVPN connections

-- 
You are receiving this mail because:
You are watching all bug changes.