Re: [opensuse] KNetworkManager and OpenVPN - SUSE 10.3

2007-11-19 Thread Helmut Schaa
Am Freitag, 16. November 2007 12:47:48 schrieb Frank Fiene:
> On Freitag 16 November 2007, Helmut Schaa wrote:
> > Hi,
>
> Hi Helmut, i saw your mail address in Bug 332691 and here now.
>
> I have a similar problem:
>
> I've got an openVPN configuration file out of Astaros Firewall software
> and i am not able to setup the same thing with knetworkmanager.
>
> openvpn from command line with these files and kvpnc with importing is
> also working fine. But i don't like to do this with root permissions,
> so i want to use knetworkmanager. And kvpnc does not run without, i
> think, i've tried.
>
> I've tested a long time with the openvpn command issued by the
> networkmanager and need to add/remove these entries:
>
> add:
> --auth MD5 (listbox with [SHA1|MD5])
> --tls-remote "" (textfield without entering "")
>
> remove:
> --ns-cert-type server (listbox with [none|server|client], with "none"
> the parameter must not be inserted!)
>
> "tls-remote" i need because "ns-cert-type server" does not work with the
> gateways!
>
> I cannot see these entries in ~/kde3/share/config/knetworkmanagerrc so i
> think they are hardcoded in /usr/bin/nm-openvpn-service, that's really
> bad!

May be.

> Could you help, please?

Would you mind to try the gnome-package (something like 
NetworkManager-openvpn-gnome).

I try to have a look as soon as possible.
Any news from my side will go to bug #332691.

Regards,
Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager and OpenVPN - SUSE 10.3

2007-11-19 Thread Helmut Schaa
Am Freitag, 16. November 2007 20:19:55 schrieb James Knott:
> Helmut Schaa wrote:
> >> connection 'Remote', service 'org.freedesktop.NetworkManager.openvpn',
> >> user_name 'jknott', vpn_data 'connection-type / shared-key / remote /
> >> home.jknott.net / ca /  / cert /  / key /  / shared-key /
> >> /etc/openvpn/static.key / username /  / local-ip / 10.1.0.2 / remote-ip
> >> / 10.1.0.1 / dev / tun / proto / udp / ta-dir / none', route ''.
> >
> > Do these options match the ones your OpenVPN connection needs?
> >
> > Regards,
> > Helmut
>
> Yes.

Strange, can you please validate (using "ps aux" while the connection is in 
progress) if the instance of OpenVPN started by NM has the right parameters 
given to it.

Thanks,
Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager and OpenVPN - SUSE 10.3

2007-11-16 Thread Helmut Schaa
Hi,

Am Montag, 12. November 2007 16:51:21 schrieb James Knott:
> Helmut Schaa wrote:
> > Am Sonntag, 11. November 2007 03:08:18 schrieb James Knott:

> >> "VPN Connect Failure
> >> Could not start the VPN connection 'Home' because the VPN server did not
> >> return an adequate network configuration.
> >> The VPN login failed because the VPN program received an invalid
> >> configuration from the VPN server."
> >
> > Please post the appropriate part of your NetworkManager-log
> > (/var/log/NetworkManager). I assume some options are not correct.


> Here it is.
>
> connection 'Remote', service 'org.freedesktop.NetworkManager.openvpn',
> user_name 'jknott', vpn_data 'connection-type / shared-key / remote /
> home.jknott.net / ca /  / cert /  / key /  / shared-key /
> /etc/openvpn/static.key / username /  / local-ip / 10.1.0.2 / remote-ip
> / 10.1.0.1 / dev / tun / proto / udp / ta-dir / none', route ''.

Do these options match the ones your OpenVPN connection needs?

Regards,
Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager and OpenVPN - SUSE 10.3

2007-11-12 Thread Helmut Schaa
Hi,

Am Sonntag, 11. November 2007 03:08:18 schrieb James Knott:
> Does KNetworkManager actually work with OpenVPN.  I've installed the
> OpenVPN part of KnetworkManager and trying everything I can think of, I
> cannot get it to connect.  I get an error message:
>
> "VPN Connect Failure
> Could not start the VPN connection 'Home' because the VPN server did not
> return an adequate network configuration.
> The VPN login failed because the VPN program received an invalid
> configuration from the VPN server."

Please post the appropriate part of your NetworkManager-log 
(/var/log/NetworkManager). I assume some options are not correct.

> I can, however, start the VPN manually and get access to my home
> network, so the VPN does work.  I assume the "Gateway" refers to the IP
> address of my firewall, where the other end of the VPN terminates, the
> local IP refers to my notebook computer and remote IP refers to the
> firewall ends of the tunnel.  I have even tried reversing the local and
> remote IP's.  I use the same static key as when I set it up manually.
>
> tnx jk
>

Regards,
Helmut

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Connecting to OpenVPN server using NetworkManager

2007-05-31 Thread Helmut Schaa
Am Donnerstag, 31. Mai 2007 schrieb Fajar Priyanto:
> Hi all,
> I've just setup an IPCop box with OpenVPN. All is done using Zerina addon.
> After setting up the ACL for a client, Zerina provides a zip file
> containing: fajar.p12
> fajar-TO-IPCop.ovpn
>
> From Zerina example, it uses MS Windows' openvpn client, whereas the above
> files are put into it's config directory and the connection can be initiate
> immediately.
>
> How do I that with NetworkManager?

You have to install either NetworkManager-openvpn-kde (only 10.3) or 
NetworkManager-openvpn-gnome. Afterwards nm-applet or KNetworkManager should 
show an option for configuring an OpenVPN connection.

Regards
Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] automating the wlan connect

2007-05-14 Thread Helmut Schaa
Am Freitag, 11. Mai 2007 19:12 schrieb Mohamed Haidar:
> Hello pro's, I have a simple question. Every time I boot my computer I
> have to type the KDE wallet password to log on to the wlan. How do you
> do it so the connection to the wlan is automatic without the need to
> type the password every time ??

You can simply use an empty password for KWallet.

Regards
Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] Knetwork Manager & EAP-TLS

2007-04-10 Thread Helmut Schaa
Am Donnerstag, 5. April 2007 05:45 schrieb Jeremy Baker:
> Anyone been able to successfully use WPA-Enterprise with EAP-TLS and
> Knetworkmanager?  I am running suse 10.2 with the latest KDE packages.
> WPA-PSK works fine.  I can use the same certificates successfully with
> WinXP. I believe it uses wpa_supplicant in the background to make the
> connection. Is there any way to see what parameters have been passed to it?

Have a look at /var/log/NetworkManager.
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] SCPM Problem?

2007-04-04 Thread Helmut Schaa
Am Montag, 2. April 2007 04:17 schrieb John Pierce:

> Here's the problem, if I go to work and boot the machine and from the
> grub menu hit F3 work and I had been at home the system will boot to
> the home profile.  That is to say that whatever the last profile I was
> actively in will be the one it boots to no matter what I choose at the
> boot menu.  Once the system boots I can open a shell and become root
> and use scpm switch work (or home) and it will change to that profile.
>  But I have to do this manually after each boot  when I go from work
> to home or vice versa.
>
> Does anybody have any ideas what the problem might be, I would
> appreciate any suggestions.


Thats a known bug (http://bugzilla.novell.com/show_bug.cgi?id=231746) and an 
online update is on its way ;-)

Regards
Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager: Such a tramp!

2007-02-26 Thread Helmut Schaa
Am Sonntag, 25. Februar 2007 05:05 schrieb John Andersen:
> On Saturday 24 February 2007, Kai Ponte wrote:
> > I had the same issue for a year or so until I activated KWallet. I let
> > KNetwork manager have access to KWallet and it now correctly connects to
> > my WPA secured network rather than my neighbors' unsecured networks.
>
> Mine has access to the wallet too.
>
> (That is another issue that gripes me.  Why should I have to
> run a passwordless wallet in order to allow boot time
> connection to wireless, and thereby putting all my personal
> settings and passwords at risk?

You can configure a system wide wifi connection using yast. NetworkManager 
will activate it on boot.

> Why does knetworkmanager need to store wireless keys
> in a wallet?  How secret do these things have to be?
> Why can't it store it in regular file with restrictive
> permissions?

Good point, I thougth about letting the user choose if he wants to store the 
keys unencrypted (e.g. in the knm config file or in a seperate passwordless 
wallet) a while ago too. Perhaps we get that into the next major release.

> 
> But I digress.
> Merely having the keys in the wallet does not seem sufficient
> to cause it to prefer the wet/wpa connections to the un-secured
> neighbors wifi.

Open the "show networks..." dialog and delete your neighbors networks. Only 
your's should stay.

Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager Weirdness

2007-02-26 Thread Helmut Schaa
Am Freitag, 23. Februar 2007 16:46 schrieb Kai Ponte:
> On Friday 23 February 2007 06:20:36 am Helmut Schaa wrote:
> > Am Freitag, 23. Februar 2007 15:15 schrieb Kai Ponte:
> > > It appears the password isn't being kept for some reason. Could KWallet
> > > be failing?
> >
> > Is KWallet activated (kwalletmanager -> configure)?
> >
> > Helmut
>
> Yes, and knetworkmanager is set to always allow.
>
> Wierd, like i said in my OP, it worked fine for the past year or so.
>
> I just disabled my passphrase (I still have the MAC locked down) for now.

Try the following:
Connect to your net by using the "connect to other wlan..." option. If the 
connection was successful close KNetworkManager and have a look at 
~/.kde/share/config/knetworkmanagerrc. There has to be a section named like 
[Network_...] with an entry ESSID that matches yours. Please post this 
section here. 

Afterwards open your KWalletManager, open the wallet and step into the 
knetworkmanager directory (if there is one). Is there yout secret stored?

Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager Weirdness

2007-02-23 Thread Helmut Schaa
Am Freitag, 23. Februar 2007 15:15 schrieb Kai Ponte:
> It appears the password isn't being kept for some reason. Could KWallet be
> failing?

Is KWallet activated (kwalletmanager -> configure)?

Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager Weirdness

2007-02-22 Thread Helmut Schaa
Am Donnerstag, 22. Februar 2007 14:42 schrieb Kai Ponte:
> sith:/home/kai # tail /var/log/NetworkManager
> Feb 22 04:50:59 sith NetworkManager:   Activation (eth1)
> Stage 5 of 5 (IP Configure Commit) scheduled...
> Feb 22 04:50:59 sith NetworkManager:   Activation (eth1)
> Stage 4 of 5 (IP Configure Get) complete.
> Feb 22 04:50:59 sith NetworkManager:   Activation (eth1)
> Stage 5 of 5 (IP Configure Commit) started...
> Feb 22 04:51:00 sith NetworkManager:   Restarting mdnsd
> (pid=2555).
> Feb 22 04:51:00 sith NetworkManager:nm_system_set_hostname ():
> nm_system_set_hostname(): gethostbyaddr failed, h_errno = 1
> Feb 22 04:51:00 sith NetworkManager:   Activation (eth1)
> successful, device activated.
> Feb 22 04:51:00 sith NetworkManager:   Activation (eth1)
> Finish handler scheduled.
> Feb 22 04:51:00 sith NetworkManager:   Activation (eth1)
> Stage 5 of 5 (IP Configure Commit) complete.
> Feb 22 05:14:31 sith NetworkManager:   DHCP daemon state
> is now 3 (renew) for interface eth1
> Feb 22 05:38:21 sith NetworkManager:   DHCP daemon state
> is now 3 (renew) for interface eth1
> sith:/home/kai #

I ment the part of the log when your connection attempt failed. This part 
looks like a successfull connection attempt.

Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [opensuse] KNetworkManager Weirdness

2007-02-22 Thread Helmut Schaa
Am Donnerstag, 22. Februar 2007 13:45 schrieb Kai Ponte:
> Yesterday evening, when I got home from work, I fired up my laptop.  After
> a while, I went to check messages and found it wasn't on the intraweb. I
> looked and saw KNetworkManager wasn't running in the system tray.
>
> Restarting it by going to root and typing in the command did nothing.
>
> I - being a good Windows user - rebooted a few times for good measure. I
> also rebooted my D-Link router, which has been working fine with this
> laptop since I got in in July '05.
>
> This morning I got on and the same thing. I could not connect to my SSID,
> even with KNetworkManager now running. I COULD connect to my neighbors'
> unencrypted WiFi networks.
>
> Looking at /tail var log messages I got nothing about the etherweb or even
> anything about lost tokens in the ethernet:

Have a look at /var/log/NetworkManager.

Regards
Helmut
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]