New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 752666 link

Starred by 2 users
Status: Archived
Owner:
█ josa...@chromium.org
Last visit > 30 days ago
Closed: Dec 20
Cc:
jayhlee@google.com
█ cernekee@chromium.org
vkasatkin@google.com
josa...@google.com
steve...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug


Show other hotlists

Hotlists containing this issue:
Chrome-Bug-Cleanup


Sign in to add a comment

Password is not pushed for OpenVPN configuration made in the Admin Console

Project Member Reported by vkasatkin@google.com, Aug 4 2017 
Customer Case:13263241
ChromeOS version: 59.0.3071.134 (Official Build) (64-bit) 
Platform version: 9460.73.0 (Official Build) stable-channel cyan 

What steps will reproduce the problem?
1. Create new OpenVPN connection from Device management > Network > VPN
2. Populate all necessary details along with login and password. Check box "Automatically connect" 
3. Logon to the Chromebook and check network settings for VPN connection
4. VPN connection config was pushed but password is empty

What is the expected output?
- Auto connect to VPN

What do you see instead?
- VPN connection fail

How often does it reproduce? (Always, sometimes, hard to reproduce?)
- Allways

### Additional details ###

I was able to reproduce this issue with my test environment.
I can see that policy was pushed to device:


"Type": "VPN",
"VPN": {
"AutoConnect": true,
"Host": "169.254.127.127",
"OpenVPN": {
"AuthRetry": "interact",
"ClientCertType": "None",
"Password": "********",
"Port": 443,
"Proto": "udp",
"Recommended": [ "Username", "Password" ],
"SaveCredentials": true,
"ServerCARef": "{e442c4c5-f8cf-4902-a9cb-0b74d590dd34}",
"Username": "testuser"
},
"Type": "OpenVPN"

But initiating VPN connection fails with missing password:

2017-08-03T18:18:15.361381-07:00 INFO shill[1316]: [INFO:openvpn_driver.cc(325)] OpenVPN process options: client,tls-client,remote 169.254.127.127,nobind,persist-key,persist-tun,dev tun0,dev-type tun,syslog,proto udp,port 443,auth-retry interact,ca /run/shill/certificate_export/.org.chromium.Chromium.J7jMKB,auth-user-pass,remote-cert-tls server,management 127.0.0.1 49734,management-client,management-hold,management-query-passwords,setenv SHILL_TASK_SERVICE :1.12,setenv SHILL_TASK_SERVICE :1.12,setenv SHILL_TASK_PATH /task/0,script-security 2,up /usr/lib64/shill/shims/openvpn-script,up-restart,route-noexec,ifconfig-noexec,user openvpn,group openvpn
2017-08-03T18:18:15.364426-07:00 INFO shill[1316]: [INFO:service.cc(318)] Suppressed autoconnect to service 18 (connecting)
2017-08-03T18:18:15.364462-07:00 INFO shill[1316]: [INFO:service.cc(318)] Suppressed autoconnect to service 17 (no endpoints)
2017-08-03T18:18:15.396322-07:00 NOTICE openvpn[14006]: OpenVPN 2.3.2 x86_64-cros-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Jul 17 2017
2017-08-03T18:18:15.397870-07:00 INFO shill[1316]: [INFO:openvpn_management_server.cc(230)] >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
2017-08-03T18:18:15.397901-07:00 INFO shill[1316]: [INFO:openvpn_management_server.cc(409)] Client waiting for hold release.
2017-08-03T18:18:15.397921-07:00 INFO shill[1316]: [INFO:openvpn_management_server.cc(158)] Releasing hold.
2017-08-03T18:18:15.398020-07:00 INFO shill[1316]: [INFO:openvpn_management_server.cc(421)] SUCCESS: real-time state notification set to ON
2017-08-03T18:18:15.437194-07:00 INFO shill[1316]: [INFO:openvpn_management_server.cc(421)] SUCCESS: hold release succeeded
2017-08-03T18:18:15.437223-07:00 INFO shill[1316]: [INFO:openvpn_management_server.cc(240)] Processing need-password message.
2017-08-03T18:18:15.437248-07:00 INFO shill[1316]: [INFO:openvpn_management_server.cc(323)] Perform authentication: Auth
2017-08-03T18:18:15.437275-07:00 ERR shill[1316]: [ERROR:openvpn_management_server.cc(327)] Not implemented reached in void shill::OpenVPNManagementServer::PerformAuthentication(const string &): Missing credentials: no-password
2017-08-03T18:18:15.437438-07:00 INFO shill[1316]: [INFO:rpc_task.cc(42)] RPCTask 0 destroyed.
2017-08-03T18:18:15.437564-07:00 ERR openvpn[14006]: ERROR: could not read Auth username/password/ok/string from management interface
2017-08-03T18:18:15.437643-07:00 INFO shill[1316]: [INFO:device.cc(1903)] Already in desired enable state.
2017-08-03T18:18:15.437674-07:00 INFO shill[1316]: [INFO:device.cc(242)] Device destructed: tun0 index 3
2017-08-03T18:18:15.437767-07:00 NOTICE openvpn[14006]: Exiting due to fatal error 


Full logs and reproduction steps (PII data protected):

https://drive.google.com/open?id=0By9xEkAUmm_cOEJiSU91MjJjX0U
https://drive.google.com/open?id=0By9xEkAUmm_ccFktajZlWXpOR0U

Comment 1 Deleted

Comment 2 by vkasatkin@google.com, Aug 4 2017

Owner: josa...@chromium.org
Hi josafat@, could you please help triage this bug?

Comment 3 by ykrychala@chromium.org, Oct 20 2017

Cc: josa...@google.com

Comment 4 by steve...@chromium.org, Feb 28 2018

Cc: steve...@chromium.org cernekee@chromium.org

Comment 5 by benhenry@chromium.org, Aug 3

Status: Assigned (was: Untriaged)
This bug has an owner, thus, it's been triaged. Changing status to "assigned".

Comment 6 by sylcat@google.com, Dec 14 

Hello!
This bug is receiving this notice because there has been no acknowledgment of its existence in quite a bit of time
- If you are currently working on this bug, please provide an update.
- If you are currently affected by this bug, please update with your current symptoms and relevant logs.

If there has been no updates provided by EOD Wednesday, 12/19/18 (5pm EST), this bug will be archived and can be re-opened at any time deemed necessary.

Thank you!

Comment 7 by sylcat@google.com, Dec 20

Status: Archived (was: Assigned)
Due to lack of action this bug has been Archived. If work is still being done on this issue or you are still experiencing this issue please feel free to re-open with the appropriate information.
►

Sign in to add a comment