Verification for Noble:

Verifying that the bug exists on the current version:

ubuntu@tester-n:~$ apt policy network-manager-openvpn 
network-manager-openvpn-gnome
network-manager-openvpn:
  Installed: 1.10.2-4build2
  Candidate: 1.10.2-4build2
  Version table:
     1.10.2-4ubuntu0.1 100
        100 http://ca.archive.ubuntu.com/ubuntu noble-proposed/main amd64 
Packages
 *** 1.10.2-4build2 500
        500 http://ca.archive.ubuntu.com/ubuntu noble/main amd64 Packages
        100 /var/lib/dpkg/status
network-manager-openvpn-gnome:
  Installed: 1.10.2-4build2
  Candidate: 1.10.2-4build2
  Version table:
     1.10.2-4ubuntu0.1 100
        100 http://ca.archive.ubuntu.com/ubuntu noble-proposed/main amd64 
Packages
 *** 1.10.2-4build2 500
        500 http://ca.archive.ubuntu.com/ubuntu noble/main amd64 Packages
        100 /var/lib/dpkg/status

Added an OpenVPN configuration which requires MFA with a saved password.
Attempting to connect asked for authenticator code and the dialogue was
incorrectly filled in with the saved password. Reconnecting required me
to re-enter the password as the authenticator code had been incorrectly
saved as the password. So the bug is verified.

Verifying the fix:

ubuntu@tester-n:~$ apt policy network-manager-openvpn 
network-manager-openvpn-gnome
network-manager-openvpn:
  Installed: 1.10.2-4ubuntu0.1
  Candidate: 1.10.2-4ubuntu0.1
  Version table:
 *** 1.10.2-4ubuntu0.1 100
        100 http://ca.archive.ubuntu.com/ubuntu noble-proposed/main amd64 
Packages
        100 /var/lib/dpkg/status
     1.10.2-4build2 500
        500 http://ca.archive.ubuntu.com/ubuntu noble/main amd64 Packages
network-manager-openvpn-gnome:
  Installed: 1.10.2-4ubuntu0.1
  Candidate: 1.10.2-4ubuntu0.1
  Version table:
 *** 1.10.2-4ubuntu0.1 100
        100 http://ca.archive.ubuntu.com/ubuntu noble-proposed/main amd64 
Packages
        100 /var/lib/dpkg/status
     1.10.2-4build2 500
        500 http://ca.archive.ubuntu.com/ubuntu noble/main amd64 Packages

Plan 1:

Using the same VPN configuration, the password is saved correctly. The
authenticator code dialogue is not incorrectly populated by the saved
password, and it does not overwrite the credentials. Reconnecting only
prompts for a new authenticator code, the saved password continues to
work.

Plan 2:

Added a new VPN configuration which did not require MFA. Connecting and
reconnecting still works as expected, the password remains cached and
there is no prompt for MFA.

The fix is verified.

** Tags removed: verification-needed-noble
** Tags added: verification-done-noble

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2076101

Title:
  [SRU] Gnome openvpn saves authenticator code as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/2076101/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to