Verification for Jammy:

Verifying that the bug exists on the current version:

ubuntu@tester-j:~$ apt policy network-manager-openvpn 
network-manager-openvpn-gnome
network-manager-openvpn:
  Installed: 1.8.18-1
  Candidate: 1.8.18-1ubuntu0.1
  Version table:
     1.8.18-1ubuntu0.1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64 
Packages
 *** 1.8.18-1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
        100 /var/lib/dpkg/status
network-manager-openvpn-gnome:
  Installed: 1.8.18-1
  Candidate: 1.8.18-1ubuntu0.1
  Version table:
     1.8.18-1ubuntu0.1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64 
Packages
 *** 1.8.18-1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
        100 /var/lib/dpkg/status

Added an OpenVPN configuration which requires MFA with a saved password.
Attempting to connect asked for authenticator code and the dialogue was
incorrectly filled in with the saved password. Reconnecting required me
to re-enter the password as the authenticator code had been incorrectly
saved as the password. So the bug is verified.

Verifying the fix:

ubuntu@tester-j:~$ apt policy network-manager-openvpn 
network-manager-openvpn-gnome
network-manager-openvpn:
  Installed: 1.8.18-1ubuntu0.1
  Candidate: 1.8.18-1ubuntu0.1
  Version table:
 *** 1.8.18-1ubuntu0.1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64 
Packages
        100 /var/lib/dpkg/status
     1.8.18-1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
network-manager-openvpn-gnome:
  Installed: 1.8.18-1ubuntu0.1
  Candidate: 1.8.18-1ubuntu0.1
  Version table:
 *** 1.8.18-1ubuntu0.1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy-proposed/main amd64 
Packages
        100 /var/lib/dpkg/status
     1.8.18-1 500
        500 http://ca.archive.ubuntu.com/ubuntu jammy/main amd64 Packages

Plan 1:

Using the same VPN configuration, the password is saved correctly. The
authenticator code dialogue is not incorrectly populated by the saved
password, and it does not overwrite the credentials. Reconnecting only
prompts for a new authenticator code, the saved password continues to
work.

Plan 2:

Added a new VPN configuration which did not require MFA. Connecting and
reconnecting still works as expected, the password remains cached and
there is no prompt for MFA.

The fix is verified.


** Tags removed: verification-needed verification-needed-jammy
** Tags added: verification-done verification-done-jammy

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2076101

Title:
  [SRU] Gnome openvpn saves authenticator code as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager-openvpn/+bug/2076101/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to