[Pkg-utopia-maintainers] Bug#626180: Bug#626180: useless without ag_console policy

[Bdale Garbee]

On Mon, 09 May 2011 18:38:12 +0200, Michael Biebl <biebl at debian.org> wrote:
> Could you elaborate on that, please.
> What is your setup, what is the error message. See [1] for debugging tips.

Using an OATH token setup to access a remote OpenVPN server run by my
employer.  This means I'm filling in a username but no password in the
configuration dialog and expect to be prompted for an OTP on connection
establishment.  With the provided nm-openvpn-service.conf content, an
attempt to establish a VPN connection does not result in the expected
password entry dialog box.  In fact, there is no visible activity on the
desktop at all. However, the following shows up in syslog:

May  9 09:22:14 rover NetworkManager[3149]: <info> Starting VPN service 'openvpn'...
May  9 09:22:14 rover NetworkManager[3149]: <info> VPN service 'openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 17457
May  9 09:22:14 rover NetworkManager[3149]: <info> VPN service 'openvpn' appeared; activating connections
May  9 09:22:14 rover NetworkManager[3149]: <error> [1304954534.441698] [nm-vpn-connection.c:819] connection_need_secrets_cb(): NeedSecrets failed: dbus-glib-error-quar
k Rejected send message, 1 matched rules; type="method_call", sender=":1.3" (uid=0 pid=3149 comm="/usr/sbin/NetworkManager ") interface="org.freedesktop.NetworkManager.
VPN.Plugin" member="NeedSecrets" error name="(unset)" requested_reply=0 destination="org.freedesktop.NetworkManager.openvpn" (uid=0 pid=17457 comm="/usr/lib/NetworkMana
ger/nm-openvpn-service "))
May  9 09:22:14 rover NetworkManager[3149]: <warn> error disconnecting VPN: Rejected send message, 1 matched rules; type="method_call", sender=":1.3" (uid=0 pid=3149 co
mm="/usr/sbin/NetworkManager ") interface="org.freedesktop.NetworkManager.VPN.Plugin" member="Disconnect" error name="(unset)" requested_reply=0 destination="org.freede
sktop.NetworkManager.openvpn" (uid=0 pid=17457 comm="/usr/lib/NetworkManager/nm-openvpn-service "))

Chasing the symptoms, I found a post by an Ubuntu user with the same
problem who worked around it with the at_console policy addition that I
included.  With that, things work as expected.

If there's a better fix, I'd be happy to know it.

Bdale
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 827 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20110509/0269294a/attachment.pgp>