Verification for Jammy:
Verifying that the bug exists on the current version:
ubuntu@tester-j:~$ apt policy network-manager-openvpn
network-manager-openvpn-gnome
network-manager-openvpn:
Installed: 1.8.18-1
Candidate: 1.8.18-1ubuntu0.1
Version table:
1.8.18-1ubuntu0.1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64
Packages
*** 1.8.18-1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
100 /var/lib/dpkg/status
network-manager-openvpn-gnome:
Installed: 1.8.18-1
Candidate: 1.8.18-1ubuntu0.1
Version table:
1.8.18-1ubuntu0.1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64
Packages
*** 1.8.18-1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
100 /var/lib/dpkg/status
Added an OpenVPN configuration which requires MFA with a saved password.
Attempting to connect asked for authenticator code and the dialogue was
incorrectly filled in with the saved password. Reconnecting required me
to re-enter the password as the authenticator code had been incorrectly
saved as the password. So the bug is verified.
Verifying the fix:
ubuntu@tester-j:~$ apt policy network-manager-openvpn
network-manager-openvpn-gnome
network-manager-openvpn:
Installed: 1.8.18-1ubuntu0.1
Candidate: 1.8.18-1ubuntu0.1
Version table:
*** 1.8.18-1ubuntu0.1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64
Packages
100 /var/lib/dpkg/status
1.8.18-1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
network-manager-openvpn-gnome:
Installed: 1.8.18-1ubuntu0.1
Candidate: 1.8.18-1ubuntu0.1
Version table:
*** 1.8.18-1ubuntu0.1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64
Packages
100 /var/lib/dpkg/status
1.8.18-1 500
500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
Plan 1:
Using the same VPN configuration, the password is saved correctly. The
authenticator code dialogue is not incorrectly populated by the saved
password, and it does not overwrite the credentials. Reconnecting only
prompts for a new authenticator code, the saved password continues to
work.
Plan 2:
Added a new VPN configuration which did not require MFA. Connecting and
reconnecting still works as expected, the password remains cached and
there is no prompt for MFA.
The fix is verified.
** Tags removed: verification-needed verification-needed-jammy
** Tags added: verification-done verification-done-jammy
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2076101
Title:
[SRU] Gnome openvpn saves authenticator code as password
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/2076101/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs