On 14/11/18 8:56 am, Ed Greshko wrote:
On 11/14/18 5:43 AM, Stephen Morris wrote:
> On 14/11/18 4:36 am, Samuel Sieb wrote:
>> On 11/13/18 3:07 AM, Ed Greshko wrote:
>>> On 11/13/18 12:39 PM, Samuel Sieb wrote:
>>>> Run "sudo journalctl -b -t openvpn" to find all the journal
entries.
>>> That would actually be....
>>>
>>> journalctl -b -t nm-openvpn
>> Thank you. I've been running the openvpn client directly from the command
line, so
>> what I wrote works for me. But I see it might be different if run from
NetworkManager.
> Thankyou. I issued the command and got the following output but I'm not sure what
it means.
>
>
> -- Logs begin at Wed 2016-01-06 07:29:31 AEDT, end at Wed 2018-11-14 08:36:39 AEDT.
--
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: OpenVPN 2.4.6
> x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO]
[AEAD]
> built on Apr >
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: library versions: OpenSSL
> 1.1.0i-fips 14 Aug 2018, LZO 2.08
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: the current
> --script-security setting may allow this configuration to call user-defined scripts
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving recently
> used remote address: [AF_INET]199.195.193.181:443
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link local: (not bound)
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: UDP link remote:
> [AF_INET]199.195.193.181:443
> Nov 14 08:33:42 localhost.localdomain nm-openvpn[3877]: NOTE: UID/GID downgrade will
be
> delayed because of --client, --pull, or --up-delay
> Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu'
is used
> inconsistently, local='link-mtu 1558', remote='link-mtu 1557'
> Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo'
is present
> in local config but missing in remote config, local='comp-lzo'
> Nov 14 08:33:43 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection
Initiated
> with [AF_INET]199.195.193.181:443
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: TUN/TAP device tun0 opened
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]:
> /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name
> org.freedesktop.NetworkManager.openvpn.Conn>
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: GID set to nm-openvpn
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: UID set to nm-openvpn
> Nov 14 08:33:44 localhost.localdomain nm-openvpn[3877]: Initialization Sequence
Completed
> Nov 14 08:34:06 localhost.localdomain nm-openvpn[3877]: Bad LZO decompression header
> byte: 42
> Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: [VPN] Inactivity timeout
> (--ping-restart), restarting
> Nov 14 08:34:14 localhost.localdomain nm-openvpn[3877]: SIGUSR1[soft,ping-restart]
> received, process restarting
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: NOTE: the current
> --script-security setting may allow this configuration to call user-defined scripts
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: TCP/UDP: Preserving recently
> used remote address: [AF_INET]199.195.193.181:443
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link local: (not bound)
> Nov 14 08:34:19 localhost.localdomain nm-openvpn[3877]: UDP link remote:
> [AF_INET]199.195.193.181:443
> Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'link-mtu'
is used
> inconsistently, local='link-mtu 1558', remote='link-mtu 1557'
> Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: WARNING: 'comp-lzo'
is present
> in local config but missing in remote config, local='comp-lzo'
> Nov 14 08:34:20 localhost.localdomain nm-openvpn[3877]: [VPN] Peer Connection
Initiated
> with [AF_INET]199.195.193.181:443
> Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: Preserving previous TUN/TAP
> instance: tun0
> Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]:
> /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 3872 --bus-name
> org.freedesktop.NetworkManager.openvpn.Conn>
> Nov 14 08:34:21 localhost.localdomain nm-openvpn[3877]: NOTE: Pulled options changed
on
> restart, will need to close and reopen TUN/TAP device.
> Nov 14 08:34:22 localhost.localdomain nm-openvpn[3877]: ERROR: Cannot ioctl
TUNSETIFF
> tun: Operation not permitted (errno=1)
>
>
Sorry for not mentioning this before. But I would actually use
journalctl -b -t nm-dispatcher -t nm-openvpn
Anyway, just looking at the above, I would edit my openvpn connection and under
"Advanced"
I would set "Use LZO compression to "No" as well as unchecking the box.
Thanks Ed, I have done that. I have also set the mtu to 1557 which the
server seems to be saying it is expecting.
regards,
Steve
>
>
>