On 11/14/18 5:43 AM, Stephen Morris wrote: > On 14/11/18 4:36 am, Samuel Sieb wrote: >> On 11/13/18 3:07 AM, Ed Greshko wrote: >>> On 11/13/18 12:39 PM, Samuel Sieb wrote: >>>> Run "sudo journalctl -b -t openvpn" to find all the journal entries. >>> >>> That would actually be.... >>> >>> journalctl -b -t nm-openvpn >> >> Thank you. I've been running the openvpn client directly from the command line, so >> what I wrote works for me. But I see it might be different if run from NetworkManager. > > Thankyou. I issued the command and got the following output but I'm not sure what it means. > > > -- Logs begin at Wed 2016-01-06 07:29:31 AEDT, end at Wed 2018-11-14 08:36:39 AEDT. -- > Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: OpenVPN 2.4.6 > x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] > built on Apr > > Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: library versions: OpenSSL > 1.1.0i-fips 14 Aug 2018, LZO 2.08 > Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: the current > --script-security setting may allow this configuration to call user-defined scripts > Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving recently > used remote address: [AF_INET]199.195.193.181:443 > Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link local: (not bound) > Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link remote: > [AF_INET]199.195.193.181:443 > Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: UID/GID downgrade will be > delayed because of --client, --pull, or --up-delay > Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu' is used > inconsistently, local='link-mtu 1558', remote='link-mtu 1557' > Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo' is present > in local config but missing in remote config, local='comp-lzo' > Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection Initiated > with [AF_INET]199.195.193.181:443 > Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: TUN/TAP device tun0 opened > Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: > /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name > org.freedesktop.NetworkManager.openvpn.Conn> > Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: GID set to nm-openvpn > Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: UID set to nm-openvpn > Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: Initialization Sequence Completed > Nov 14 08:34:06 localhost.localdomain nm-openvpn[3877]: Bad LZO decompression header > byte: 42 > Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: [VPN] Inactivity timeout > (--ping-restart), restarting > Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: SIGUSR1[soft,ping-restart] > received, process restarting > Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: NOTE: the current > --script-security setting may allow this configuration to call user-defined scripts > Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving recently > used remote address: [AF_INET]199.195.193.181:443 > Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link local: (not bound) > Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link remote: > [AF_INET]199.195.193.181:443 > Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu' is used > inconsistently, local='link-mtu 1558', remote='link-mtu 1557' > Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo' is present > in local config but missing in remote config, local='comp-lzo' > Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection Initiated > with [AF_INET]199.195.193.181:443 > Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: Preserving previous TUN/TAP > instance: tun0 > Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: > /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name > org.freedesktop.NetworkManager.openvpn.Conn> > Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: NOTE: Pulled options changed on > restart, will need to close and reopen TUN/TAP device. > Nov 14 08:34:22 localhost.localdomain nm-openvpn[3877]: ERROR: Cannot ioctl TUNSETIFF > tun: Operation not permitted (errno=1) > > Sorry for not mentioning this before. But I would actually use journalctl -b -t nm-dispatcher -t nm-openvpn Anyway, just looking at the above, I would edit my openvpn connection and under "Advanced" I would set "Use LZO compression to "No" as well as unchecking the box. -- Fedora Users - The place to go to beat OT dead horses :-) :-) _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
