NetworkManager applet doesn't prompt for VPN secret for non-root user

I'm using NetworkManager in GNOME DE. When logged in as non-root user, I'm unable to connect to a vpnc profile.
* As non-root, I am able to add/remove/alter/connect to WiFi network profiles with no trouble.
* As non-root, I am also able to add/remove/alter vpnc profiles.
* However, the VPN group key and VPN user password do not appear to store properly when adding/editing the profile as non-root. I can enter them, but when I bring the dialog back up, they are always blank. Even so, I can see an entry for vpnc in the Gnome keyring.
* When I slide the on/off switch to try to connect with the vpn profile, there is no prompt for the VPN group key or password. The switch just slides back to Off immediately and I can see the text 'authentication required' flash briefly where it shows the connection status. After that flashes, the connection status is back to 'Not connected'. No error message displays.
* If I sign in as root, there are no problems. The VPN 'secrets' will save properly in the dialog, and also if I leave them blank, I'm prompted for them when I activate the connection.
* Creating the connection as 'root' is not an option, as this doesn't appear in profile list when signing on as non-root.
Any ideas on where to look or what to check? As mentioned above, non-root can maintain WiFi connections through NetworkManager just fine, so the problem appears localized to VPN 'secrets'. Also other applications (i.e. Evolution) have no trouble in dealing with authentication.
I do have polkit installed:
extra/polkit 0.110-2 [installed]
Application development toolkit for controlling system-wide privileges
extra/polkit-kde 0.99.0-2
Daemon providing a polkit authentication UI for KDE
extra/polkit-qt 0.103.0-2
A library that allows developers to access PolicyKit API with a nice Qt-style API
community/polkit-gnome 0.105-1 [installed]
PolicyKit integration for the GNOME desktop

Update/more information on this...
My typical/preferred setup for my VPNs is to save the VPN group key, but to be prompted for my VPN user password on each connect. So, this is how I was trying to setup in the applet. Interestingly, I have found that if I save BOTH of the 'secrets' to the keyring, then I can connect!
The behavior is still as above in the dialog -- both secrets are blank if I edit the connection, although they are present in the Gnome keyring. As long as they are BOTH there, I can connect fine. But, if I have either of them set to 'Always Ask', then I am not prompted for them and the connection fails.
Although I can work with this, I would certainly still like to figure out what is going on and fix it, as it does bother me that it works that way:
* Why can't the dialog redisplay my secrets when I edit a connection as non-root?
* Why doesn't Always Ask work to prompt me for secrets when running as non-root?
Any ideas? I've used the Gnome/NetworkManager/vpnc combination on other desktops (this is my first Arch), and I have never seen anything like this.

Similar Messages

  • We are looking for VPN API for iOS, any help

    we are looking for VPN API for iOS, any help

    Greetings from another victim!  We are all suffered from HP's poor support of HD 7690M XT... I guess you are talking about Diablo3, right?  With original HP driver, my switchable card can't even function well, so I followed the suggestions from another thred on this forum, update the driver to CCC 12.2 preview.   I ran Diablo3beta on my laptop with CCC 12.2 preview; I could only reach FPS of around 30 on maximum display quality ( my scrren resolution is Full HD).   ( I believe this card is capable of hitting much better FPS if it got a decent driver.)
    Also because my FPS would drop to less than 10 suddenly in games for no reason, I decided  to switch to unofficial driver, Leshcat, together with MSI Afterburner.  Doing this improve the performance significantly, FPS hits around 45.   Nevertheless my graphic card still freezes out sometimes, and I would blame this problem to the driver.   If HP could come up with a new, working driver, I think all the mysterious problems will disappear.
    Unfortunately HP is just deaf to all the complaints from the owners of this graphic card.   
    We are now orphans forgotten by HP...
    PLEASE UPDATE THE DRIVER FOR HD 7690M XT GRAPHIC CARD !!!!!

  • [SOLVED]Xorg won't work for my non root user

    I installed Arch Linux 2009.08 x86_64 Core inside Sun VirtualBox 3.0.8 and got up to the part of the Beginners' Guide that tells me to test X and it can never work for my non root user. Funny thing is, I tried running it as root and it worked even though my root user has no ~/.xinitrc file. Running startx or xinitrc as my non root user I get a small (maybe 400x600) white terminal but can't use my mouse or keyboard.
    After looking over the guide and doing a step I forgot and adding in all of the extra stuff the guide says might help I can use my mouse and keyboard in my non root users' small white terminal but X still won't start properly with xterm even though I put 'exec exterm' in my non root users' ~/.xinitrc file. Please help. Thanks for any help guys.
    Last edited by keiichi (2009-10-23 12:34:50)

    schuay wrote:
    keiichi wrote:After looking over the guide and doing a step I forgot and adding in all of the extra stuff the guide says might help I can use my mouse and keyboard in my non root users' small white terminal....
    I don't get it .. this sounds like xterm is starting up successfully (xterm is a small white terminal). Easiest way to get X up and running (imo) is
    sudo pacman -S gnome gdm xorg xf86-input-evdev
    sudo /etc/rc.d/hal start
    sudo /etc/rc.d/gdm start
    I didn't know that's what xterm was, thanks for telling me. Noob mistake.

  • How to create a domain for a non-root user using the JES installer

    Some questions have been circulating on what are the steps to create a whole domain configuration using a non-root user. Here is one method that you can try....
    - Login as user "testuser", all operations are using the user I want to start the whole domain with
    - cd to the testuser home directory and created apptest (mkdir apptest)
    -created domain
    /opt/SUNWappserver/appserver/bin/asadmin create-domain adminuser admin adminport 4849 --domaindir /testuser/apptest testdomain
    Please enter adminpassword>adminadmin
    Please enter adminpassword again>adminadmin
    Please enter the master password>adminadmin
    Please enter the master password again>adminadmin
    - created nodeagent
    /opt/SUNWappserver/appserver/bin/asadmin create-node-agent user admin port 4849 password adminadmin agentdir /testuser/apptest testnode
    Please enter the master password>adminadmin
    - Start the domain
    /opt/SUNWappserver/appserver/bin/asadmin start-domain domaindir /testuser/apptest user admin testdomain
    Please enter password>adminadmin
    Please enter the master password>adminadmin
    Domain testdomain started.
    - Start the nodeagent
    /opt/SUNWappserver/appserver/bin/asadmin start-node-agent user admin agentdir /testuser/apptest/ testnode
    Please enter password>adminadmin
    Please enter the master password>adminadmin
    Command start-node-agent executed successfully.
    - create instance
    /opt/SUNWappserver/appserver/bin/asadmin create-instance nodeagent testnode user admin i1
    Please enter password>adminadmin
    Command create-instance executed successfully.
    - start instance
    /opt/SUNWappserver/appserver/bin/asadmin start-instance --user admin i1
    Please enter password>adminadmin
    Command start-instance executed successfully.

    And this can be used to the incident priority (same technique can be used for problems):
    private int GetIncidentPriority(EnterpriseManagementGroup emg)
    try
    //Get the incident settings class
    ManagementPackClass mpc = emg.EntityTypes.GetClass(new Guid("613c9f3e-9b94-1fef-4088-16c33bfd0be1"));
    //Get the emo for the incident settings
    EnterpriseManagementObject emo = emg.EntityObjects.GetObject<EnterpriseManagementObject>(mpc.Id, ObjectQueryOptions.Default);
    //Get the priority maxtrix and convert to XML
    if (emo[mpc, "PriorityMatrix"].Value != null && emo[mpc, "PriorityMatrix"].Value.ToString() != "")
    string sMatrixXML = emo[mpc, "PriorityMatrix"].Value.ToString();
    XmlDocument xmlDoc = new XmlDocument();
    xmlDoc.LoadXml(sMatrixXML);
    //Get the guid strings for impact and urgency (note - xml goes by urgency then impact)
    string sUrgencyGuid = "04b28bfb-8898-9af3-009b-979e58837852";
    string sImpactGuid = "11756265-f18e-e090-eed2-3aa923a4c872";
    foreach (XmlNode urgencynode in xmlDoc.ChildNodes[0].ChildNodes)
    if (urgencynode.Attributes.Count == 1 && urgencynode.Attributes["Id"].Value.ToString().ToLower() == sUrgencyGuid)
    foreach (XmlNode impactnode in urgencynode.ChildNodes)
    if (impactnode.Attributes.Count == 1 && impactnode.Attributes["Id"].Value.ToString().ToLower() == sImpactGuid)
    XmlNode prioritynode = impactnode.ChildNodes[0];
    return Convert.ToInt32(prioritynode.InnerXml);
    return 0;
    catch
    return 0;
    Rob Ford scsmnz.net
    Cireson www.cireson.com
    For a free SCSM 2012 Notify Analyst app click
    here

  • [SOLVED] Systemctl poweroff etc hangs for non-root user

    Hi. I recently messed up /etc/passwd and /etc/group as explained here . It seems it might be related.
    The problem I have now is that the power management commands (systemctl {poweroff, hibernate, suspend}) "hangs" for my non-root user. They do nothing, and are not even logged to the journal.
    When run as root they all work just fine.
    I've tried reinstalling systemd, but not its dependencies.
    Maybe systemd had a user or group that got lost from the files?
    Last edited by Bladtman242 (2012-12-03 11:56:35)

    Just in case:
    /etc/passwd wrote:root:x:0:0:root:/root:/bin/zsh
    bin:x:1:1:bin:/bin:/bin/false
    daemon:x:2:2:daemon:/sbin:/bin/false
    mail:x:8:12:mail:/var/spool/mail:/bin/false
    ftp:x:14:11:ftp:/srv/ftp:/bin/false
    http:x:33:33:http:/srv/http:/bin/false
    nobody:x:99:99:nobody:/:/bin/false
    dbus:x:81:81:System message bus:/:/bin/false
    bladt:x:1000:100:Sigurt Bladt Dinesen,,,:/home/bladt:/bin/zsh
    avahi:x:84:84:avahi:/:/bin/false
    ntp:x:87:87:Network Time Protocol:/var/lib/ntp:/bin/false
    git:x:999:999:git daemon user:/:/bin/bash
    uuidd:x:998:998::/:/sbin/nologin
    mysql:x:89:89::/var/lib/mysql:/bin/false
    /etc/group wrote:root:x:0:root
    bin:x:1:root,bin,daemon
    daemon:x:2:root,bin,daemon
    sys:x:3:root,bin
    adm:x:4:root,daemon
    tty:x:5:
    disk:x:6:root
    lp:x:7:daemon,bladt
    mem:x:8:
    kmem:x:9:
    wheel:x:10:root,bladt
    ftp:x:11:
    mail:x:12:
    uucp:x:14:bladt
    log:x:19:root
    utmp:x:20:
    locate:x:21:
    rfkill:x:24:
    smmsp:x:25:
    http:x:33:
    games:x:50:bladt
    network:x:90:
    video:x:91:bladt
    audio:x:92:bladt
    optical:x:93:bladt
    floppy:x:94:
    storage:x:95:bladt
    scanner:x:96:bladt
    power:x:98:bladt
    nobody:x:99:
    users:x:100:
    dbus:x:81:
    avahi:x:84:
    ntp:x:87:
    lock:x:54:
    git:x:999:
    uuidd:x:998:
    mysql:x:89:

  • OpenOffice doesn't allow editing when non-root user [SOLVED]

    I've been having this problem for some time now: for example whenever I open swriter to edit a text or make a new one, swriter always closes at the moment I type something. This problem does not exist when I use OO as the root user.

    Try removing the .openoffice.org2 folder in your home directory. You'll need to do that as root, if the problem is what I think it is... You see, OOo seems to do some configuration on install, and that's as whatever user installed it - so if you install from Arch's packages, you need to delete the config stuff before you can use it.
    (Usually, though, that's manifested as OOo not starting at all, so I'm not sure it's your problem.)

  • Mount point won't allow read/write for non-root user

    Any ideas why this particular fstab line leads to root user only read/write for any disk referenced in my fstab?
    Example:
    UUID=496E-7B5E   /media/STORAGE   vfat   defaults 0   0
    I have tried all variations of what "defaults" should be (rw,suid,dev,exec)
    I had even added uid=0777, and no matter what options I add there, doing
    sudo mount -a
    or with the line in fstab commented out and
    mount -t vfat -U 496E-7B5E /media/STORAGE -o defaults
    causes the same issue.
    Results in every filesystem there to be mounted as read only for me as a user, and I can only write to them as root. 
    Weird
    I have run
    sudo chmod -v -R a+rwx /media/STORAGE
    and similarly
    sudo chmod -v -R 0777 /media/STORAGE
    Both were tried on the directory as mounted and unmounted.  When mounted, the verbose output DOES NOT error out and shows property change of the files
    Oddly, if no fstab reference is used, the disk shows up in the dolphin panel, and can be mounted in that manner and it is read write as a usual user. 
    Using a Chakra-live installed with Unetbootin, so perhaps that is the issue... so
    How is mounting through dolphin handled and what might I use at the command line to accomplish this same routine, as I only need one partition to mount read write when the system starts, so maybe I can add the command to rc.local
    Last edited by bwh1969 (2009-01-18 23:04:59)

    # fstab generated by gen_fstab
    #<file system>   <dir>         <type>      <options>    <dump> <pass>
    none            /dev/pts      devpts      defaults        0     0
    none            /dev/shm      tmpfs       defaults        0     0
    UUID=496E-7B5E /media/STORAGE vfat    defaults,user,users,rw,exec,uid=777,gid=777   0       0
    /dev/sr0     /mnt/sr0_cd  auto     user,noauto,exec,unhide 0     0
    # This would do for a floppy
    #/dev/fd0        /mnt/floppy    vfat,ext2 rw,user,noauto    0     0
    #    +   mkdir /mnt/floppy
    # E.g. for USB storage:
    #/dev/sdb1        /mnt/usb      auto      rw,user,noauto   0     0
    #    +   mkdir /mnt/usb

  • How to install plugins for Adobe Reader as non-root?

    I'm using Acrobat on a linux system, but I'm not the administrator. I need to install a new plugin (FileOpen.api from www.nr.com) to open their pdf-files. They explain very nice how to place that plugin in the plug_ins directory, but that's a systems directory and you need to be root to do that, which is not an option in my case. However: it is very common practice on linux systems that these type of things can also be installed under some users-dir, for example ~/.acrobat/plug_ins This example definitely does NOT work, but which directory will work?

    Hi Jakob,
    You can place your plugins in a folder named 'plug_ins' under your home directory:
    $HOME/plug_ins
    They will be picked up by the Adobe Reader if they are Reader-enabled.
    Ashutosh

  • A free, simple undocking app for Thunderbolt Display (and non-thunderbolt) users...

    If you are using a Thunderbolt display and have several external drives, it can be a pain to undock all of the external drives when you want to unplug the monitor. Here is a link to an app that can undock it for you. I've tested it on Lion. If you like it please leave a comment on the blog. Thanks!
    http://chompingatbits.com/2011/09/23/undocking-from-an-apple-thunderbolt-display /
    Just download the app. Then run it anytime you want to eject all of your external drives.

    Mini DisplayPort displays and adapters don't work directly with a Thunderbolt display, but will if you connect a Thunderbolt disk drive (with two Thunderbolt ports) between the Thunderbolt display and the Mini DisplayPort device.

  • Bash issue on solaris 8 ( Segmentation fault for non root users)

    Hi,
    This is solaris 8 on sparc and a NFS file server for the NIS+ environment. As supposed to be this file server is nis+ client.
    Now this issue happens only sometimes and goes away on its own but it did not this time.
    I connect to file server using ssh, system closes my session,
    this is ssh -vvv log , copied here : http://pastebin.ca/1633893Please note that my shell is /bin/bash. It worked 99% time but not now, nothing is changed on system.
    If I ssh root@fileserver then ssh connection works fine. root can also run bash command. and run other commands in bash
    For a normal user with csh if the user tries "bash" , then gets
    user@fileserver%> bash
    Segmentation Fault
    I am thinking this is somewhere related to rpc but I do not see any errors on nis+ server nor on fileserver.
    %>truss bash o/p is here :
    http://pastebin.ca/1633907Please let me know what is this issue related to. If by stopping/restarting a process helps that would be great.
    one more thing to note is, other nis+ clients can mount shares from this fileserver properly and authentication also works fine on them even for users with /bin/bash shell and bash does work manually also.
    If you need any other info, please let me know
    Please help!
    Thanks!

    Anyone any idea? I thought the truss o/p copied in pastebin might be very useful
    Additional info, for someone with /bin/tcsh as shell, when su - <user> from root account, following messages come up
    free(4b31688) bad block. (memtop = 4b7e400 membot = 9c9a0)
    free(4b31688) bad block. (memtop = 4b7e400 membot = 9c9a0)
    free(4b316c8) bad block. (memtop = 4b7e400 membot = 9c9a0)
    free(4b316c8) bad block. (memtop = 4b7e400 membot = 9c9a0)
    free(4b31448) bad block. (memtop = 4b7ec00 membot = 9c9a0)
    free(4b31448) bad block. (memtop = 4b7ec00 membot = 9c9a0)
    free(49fca08) bad block. (memtop = 4b7f400 membot = 9c9a0)
    free(49fca08) bad block. (memtop = 4b7f400 membot = 9c9a0)$ truss -f -t stat,open /bin/bash
    http://pastebin.ca/1635134

  • Instructions for Enabling and using the "root" user in OSX 10.8

    Seems to have changed since 10.6. Any suggestions?

    According to http://support.apple.com/kb/PH11331 you clck on "Open Directory Utility" in the Network Account Server section of the Users & Groups system preferences.
    However, I don't see anything of that name in the preference (running 10.8.3).
    EDIT: it is in the "Login Options" section.

  • [Solved] Multiple tun0 entries created in NetworkManager applet

    Hey all,
    I switched over to Arch from Fedora about 3 months ago when i installed my new SSD.  Having never used arch before, I'm really loving it, no problems so far... just need to get to used to typing pacman -S rather than yum install.
    I'm hoping someone might be able to help me here.  I've just got the OpenVPN client up & working - I am able to connect via cli & using the NetworkManager applet in KDE to my VPN server & both establish connections successfully.  All good there.
    The issue I have is that when I connect to the the VPN server using either method above, a new tun0 device is created every time in the "connection editor" config window of the NetworkManager app in my system tray in KDE - so currently I have 4 different tun0 devices listed.  I'm using the tray app - kdeplasma-applets-plasma-nm.  It's a bit annoying as keep having to delete all these tun0 devices.
    I can only see the below in the journalctl logs when I disconnect - so there are no errors being thrown...
    Dec 14 18:40:54 jarvis.home avahi-daemon[1051]: Withdrawing workstation service for tun0.
    Dec 14 18:40:54 jarvis.home NetworkManager[786]: <info> (tun0): device state change: activated -> unmanaged (reason 'removed') [100 10 36]
    Dec 14 18:40:54 jarvis.home NetworkManager[786]: <info> (tun0): deactivating device (reason 'removed') [36]
    Dec 14 18:40:55 jarvis.home dbus[566]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service'
    Am I missing something here or has anyone ever seen this before?
    Thanks
    Last edited by drob1337 (2015-02-23 13:18:59)

    I have a workaround for this problem. I created the script /etc/NetworkManager/dispatcher.d/tun containing the following code:
    #!/bin/bash
    [[ ${1::3} == tun ]] && [[ $2 == down ]] && /usr/bin/nmcli connection delete $1
    exit 0

  • Internet security for iBook G4 for our kid

    We let our 6 year old use my old iBook G4 (10.4.11) to play games on a handful on sites that we have deemed OK for him.
    We monitor him very closely, but once in a while he'll click off to some other site and, we'll, you get the picture--we swoop in frantically, it's a bummer for him, etc.
    Is there an application available that would allow use to set up only certain urls that can be accessed on that machine/browser?(He's using Firefox on that machine FWIW, as the machine is long-in-the-tooth and for some reason Safari is problematic on it).
    Thanks

    You can change your routers DNS to OpenDNS servers.
    DNS - Domain Name Server resolves the name of the web site into a IP Address like 67.342.565.343 which the computer uses to connect to another computer.
    This is used in case a web site changes servers, they keep the name, just change the location. DNS automatically solves the location issue for people.
    But it also can be used as a content filter, which OpenDNS does with a free service.
    http://www.opendns.com/
    What you have to do is acces your router and change the two DNS IP addresses to OpenDNS servers.
    208.67.222.222
    208.67.220.220
    Then sign up for the "home free" account at OpenDNS and set the controls, Pr0n, web proxies, hostile sites and so forth. Then OpenDNS will filter out about 90% of the hostile stuff out there, which is enough for the occasional stray/non tech user.
    Hard core types who know the name of the site they want to visit (say yourself for example like a particular adult site) can use netcraft or whois to find the current IP address of the site, then punch in the IP number manually into their browser URL address field and go to the site directly, without needing a DNS lookup.

  • "invalid vpn secrets" problem for networkmanager has driven me mad

    The problem came out after the huge update (libpng/libjpeg) several days ago (but is probably not a problem caused by it). I was not able to start X after that update, and had no time to waste on the fixing, so I just tried to enable testing (though that did not help). And I found my networkmanager-pptp was updated.
    The problem now is that I cannot use networkmanager to connect to the internet through vpn (pptp). An error message "... invalid vpn secrets" comes out every time. I tried different solutions, including:
    1. delete and reconfigure the vpn settings
    2. downgrade networkmanger and related packages
    3. delete ~/.gnome2/keyrings
    4. use gconf-editor to set "refuse-eap" somewhere
    and several other dirty fixes, but all these did not bring the function back.
    The laptop is useless without network and graphical tools. I am still suffering. Anybody can help me?
    Last edited by sfbi (2010-02-05 14:43:28)

    i also had this problem and was able to get it working again by removing networkmanager (plus packages depending on it) and upgrading to -git packages from aur:
    network-manager-applet-git-20100212-1-i686.pkg.tar.gz 
    networkmanager-pptp-git-20100212-1-i686.pkg.tar.gz
    networkmanager-git-20100212-1-i686.pkg.tar.gz
    in short, i just used:
    pacman -Rcs networkmanager
    pacman -S gtk-doc # (missing dependency for networkmanager-git)
    yaourt -S networkmanager-pptp-git
    Last edited by dex (2010-02-12 07:46:27)

  • [SOLVED] VPN Secrets failure from NetworkManager.

    So, at some point recently, VPN connection stopped working via nm-applet in Mate.  Not entirely sure at what point it started, I dont use my VPN connection all that often.  OpenVPN connects fine on its own, but when I try to connect via NetworkManager, I get the classic "The VPN Connection Failed because there were no valid VPN Secrets"
    I have gotten this before and it was related to gnome-keyring.  I don't think its the same this time.  journalctl is showing the following error:
    NetworkManager[375]: <error> [1429861241.801229] [vpn-manager/nm-vpn-connection.c:1899] get_secrets_cb(): Failed to request VPN secrets #2: (5) User canceled the secrets request.
    In the past, when I saw this and when I search for this, its all about "(6) No agents were available for this request" and all of those are gnome-keyring related.  Just to be sure, I have wiped out ~/.local/share/keyrings.  It killed all of my keyring entries, but did nothing to fix this.
    If I try to edit the VPN entry in nm-connection-editor (as user, works as root) I get "Error initializing editor.  User canceled the secrets request."  This is making me think I have something messed up for permissions somewhere.  It doesn't seem to be in /etc/NetworkManager/system-connections that the permissions problem lies.
    I am not finding anything about this slightly different error I am getting.  I can connect to the vpn with openvpn from command line fine, but I have grown weak and want my damned nm-applet connection to work.  Any help or clues anyone can give is appreciated.
    Last edited by jotterson (2015-04-29 18:12:51)

    seem it was a glibc issue, I fixed it by doing this http://www.reddit.com/r/archlinux/comme … ng/cqm1ogl

Maybe you are looking for