On 14/11/18 8:56 am, Ed Greshko wrote:
On 11/14/18 5:43 AM, Stephen Morris wrote:
On 14/11/18 4:36 am, Samuel Sieb wrote:
On 11/13/18 3:07 AM, Ed Greshko wrote:
On 11/13/18 12:39 PM, Samuel Sieb wrote:
Run "sudo journalctl -b -t openvpn" to find all the journal entries.
That would actually be....
journalctl -b -t nm-openvpn
Thank you. I've been running the openvpn client directly from the command line, so
what I wrote works for me. But I see it might be different if run from NetworkManager.
Thankyou. I issued the command and got the following output but I'm not sure what it means.
-- Logs begin at Wed 2016-01-06 07:29:31 AEDT, end at Wed 2018-11-14 08:36:39 AEDT. --
Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: OpenVPN 2.4.6
x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD]
built on Apr >
Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: library versions: OpenSSL
1.1.0i-fips 14 Aug 2018, LZO 2.08
Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: the current
--script-security setting may allow this configuration to call user-defined scripts
Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving recently
used remote address: [AF_INET]199.195.193.181:443
Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link local: (not bound)
Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link remote:
[AF_INET]199.195.193.181:443
Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: UID/GID downgrade will be
delayed because of --client, --pull, or --up-delay
Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu' is used
inconsistently, local='link-mtu 1558', remote='link-mtu 1557'
Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo' is present
in local config but missing in remote config, local='comp-lzo'
Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection Initiated
with [AF_INET]199.195.193.181:443
Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: TUN/TAP device tun0 opened
Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]:
/usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name
org.freedesktop.NetworkManager.openvpn.Conn>
Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: GID set to nm-openvpn
Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: UID set to nm-openvpn
Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: Initialization Sequence Completed
Nov 14 08:34:06 localhost.localdomain nm-openvpn[3877]: Bad LZO decompression header
byte: 42
Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: [VPN] Inactivity timeout
(--ping-restart), restarting
Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: SIGUSR1[soft,ping-restart]
received, process restarting
Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: NOTE: the current
--script-security setting may allow this configuration to call user-defined scripts
Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving recently
used remote address: [AF_INET]199.195.193.181:443
Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link local: (not bound)
Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link remote:
[AF_INET]199.195.193.181:443
Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu' is used
inconsistently, local='link-mtu 1558', remote='link-mtu 1557'
Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo' is present
in local config but missing in remote config, local='comp-lzo'
Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection Initiated
with [AF_INET]199.195.193.181:443
Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: Preserving previous TUN/TAP
instance: tun0
Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]:
/usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name
org.freedesktop.NetworkManager.openvpn.Conn>
Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: NOTE: Pulled options changed on
restart, will need to close and reopen TUN/TAP device.
Nov 14 08:34:22 localhost.localdomain nm-openvpn[3877]: ERROR: Cannot ioctl TUNSETIFF
tun: Operation not permitted (errno=1)
Sorry for not mentioning this before. But I would actually use
journalctl -b -t nm-dispatcher -t nm-openvpn
Anyway, just looking at the above, I would edit my openvpn connection and under "Advanced"
I would set "Use LZO compression to "No" as well as unchecking the box.
Thanks Ed, I have done that. I have also set the mtu to 1557 which the
server seems to be saying it is expecting.
regards,
Steve
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
