NetworkManager with fortisslvpn unable to connect.

English Network/Internet
1

Hello,

I was unable to find information online, thus posting here.
I am trying to connect via fortisslvpn with Network Manager but no success so far.
I am getting following error in /var/log/NetworkManager

tail -f /var/log/NetworkManager
2019-07-22T13:35:13.983256+04:00 lavagyan-lpt NetworkManager[18901]: <info>  [1563788113.9829] manager: startup complete
2019-07-22T13:35:37.936071+04:00 lavagyan-lpt NetworkManager[18901]: <info>  [1563788137.9358] audit: op="connection-activate" uuid="b8aab714-27f5-4339-a817-bcf4fcfa2035" name="WFAM-vpn" pid=19169 uid=1000 resu
lt="fail" reason="The VPN service 'org.freedesktop.NetworkManager.fortisslvpn' was not installed."

For sure fortisslvpn is installed.


# zypper search forti
Loading repository data...
Reading installed packages...

S  | Name                   | Summary                                  | Type
---+------------------------+------------------------------------------+--------
i+ | openfortivpn           | Client for PPP+SSL VPN tunnel services   | package
i+ | plasma-nm5-fortisslvpn | FortiGate SSL VPN support for plasma-nm5 | package

# zypper info openfortivpn plasma-nm5-fortisslvpn
Loading repository data...
Reading installed packages...


Information for package openfortivpn:
-------------------------------------
Repository     : openSUSE-Leap-15.1-Oss
Name           : openfortivpn
Version        : 1.9.0-lp151.1.1
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 133.1 KiB
Installed      : Yes
Status         : up-to-date
Source package : openfortivpn-1.9.0-lp151.1.1.src
Summary        : Client for PPP+SSL VPN tunnel services
Description    :
    openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd
    process and operates the communication between the gateway and this process.

    It is compatible with Fortinet VPNs.


Information for package plasma-nm5-fortisslvpn:
-----------------------------------------------
Repository     : openSUSE-Leap-15.1-Oss
Name           : plasma-nm5-fortisslvpn
Version        : 5.12.8-lp151.1.1
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 134.8 KiB
Installed      : Yes
Status         : up-to-date
Source package : plasma-nm5-5.12.8-lp151.1.1.src
Summary        : FortiGate SSL VPN support for plasma-nm5
Description    :
    FortiGate SSL VPN plugin for plasma-nm components.

# zypper search plasma-nm5
Loading repository data...
Reading installed packages...

S  | Name                   | Summary                                                       | Type
---+------------------------+---------------------------------------------------------------+--------
i+ | plasma-nm5             | Plasma applet written in QML for managing network connections | package
i+ | plasma-nm5-fortisslvpn | FortiGate SSL VPN support for plasma-nm5                      | package
i+ | plasma-nm5-iodine      | VPN support for plasma-nm5                                    | package
i+ | plasma-nm5-l2tp        | L2TP support for plasma-nm5                                   | package
i+ | plasma-nm5-lang        | Translations for package plasma-nm5                           | package
i+ | plasma-nm5-openconnect | OpenConnect support for plasma-nm5                            | package
   | plasma-nm5-openswan    | Openswan support for plasma-nm5                               | package
i+ | plasma-nm5-openvpn     | OpenVPN support for plasma-nm5                                | package
i+ | plasma-nm5-pptp        | PPTP support for plasma-nm5                                   | package
i+ | plasma-nm5-ssh         | SSH support for plasma-nm5                                    | package
   | plasma-nm5-sstp        | SSTP support for plasma-nm5                                   | package
   | plasma-nm5-strongswan  | strongSwan support for plasma-nm5                             | package
i+ | plasma-nm5-vpnc        | vpnc support for plasma-nm5                                   | package

In fact i am able to connect to fortigate vpn from cli just fine with openfortivpn.


# openfortivpn -c /etc/openfortivpn/config
INFO:   Connected to gateway.
INFO:   Authenticated.
INFO:   Remote gateway has allocated a VPN.
INFO:   Got addresses: [10.212.14.52], ns [10.212.10.10, 10.212.10.11]
INFO:   negotiation complete
INFO:   negotiation complete
INFO:   Interface ppp0 is UP.
INFO:   Setting new routes...
INFO:   Adding VPN nameservers...
INFO:   Tunnel is up and running.
^CINFO:   Cancelling threads...
INFO:   Setting ppp interface down.
INFO:   Restoring routes...
INFO:   Removing VPN nameservers...
INFO:   pppd: The link was terminated by the modem hanging up.
INFO:   Terminated pppd.
INFO:   Closed connection to gateway.
INFO:   Logged out.

Any help is much appreciated!

2

Have you installed your openvpn packages?

TSU

3

You need NetworkManager-fortisslvpn plugin (GitHub - GNOME/NetworkManager-fortisslvpn: Read-only mirror of https://gitlab.gnome.org/GNOME/NetworkManager-fortisslvpn), but it is apparently not built for Leap. You may try contact maintainers asking to enable build for Leap (Show GNOME:Factory / NetworkManager-fortisslvpn - openSUSE Build Service). You may also ask on opensuse-factory list. Package is part of TW so there are some chances it may be included in next Leap release.

Finally you can build it yourself.

4

I have encountered exactly the same problem, running exactly the same versions of openfortivpn and plasma-nm5-fortisslvpn.
Both were installed from the openSUSE Leap 15.1 Main Repository, so I would expect them to work well together.
I ran ldd /usr/lib64/qt5/plugins/libplasmanetworkmanagement_fortisslvpnui.so to check for missing shared libraries, but all libraries seem to be present.

Has there been some progress regarding this issue? Should I try building the plasma-nm5 module from source?

5

Did you report it? If not, what progress do you expect?

Should I try building the plasma-nm5 module from source?

plasma-nm5 is just configuration frontend. You need VPN plugin to do real work.

6

Whoever is puzzled with how to build it yourself - you can reuse SPEC scenario from the link above:

  1. Download NetworkManager-fortisslvpn.spec to /usr/src/packages/SPECS
  2. Download NetworkManager-fortisslvpn-1.2.10.tar.xz to /usr/src/packages/SOURCES
  3. Run from root
rpmbuild -ba NetworkManager-fortisslvpn.spec
  1. It will complain on required packages - search & install via zypper
  2. You’ll see output like

Wrote: /usr/src/packages/SRPMS/NetworkManager-fortisslvpn-1.2.10-0.src.rpm
Wrote: /usr/src/packages/RPMS/x86_64/NetworkManager-fortisslvpn-1.2.10-0.x86_64.rpm
Wrote: /usr/src/packages/RPMS/x86_64/NetworkManager-fortisslvpn-gnome-1.2.10-0.x86_64.rpm
Wrote: /usr/src/packages/RPMS/noarch/NetworkManager-fortisslvpn-lang-1.2.10-0.noarch.rpm

  1. Install built package
zypper in /usr/src/packages/RPMS/x86_64/NetworkManager-fortisslvpn-1.2.10-0.x86_64.rpm
7

Hi everyone!

My problem is a little different to discuss here.

In my case, when using Network Manager to connect with FortiSSLVPN, the connection is established sucessufully, but I believe that I do not write the route tables and cannot use the resources of the destination network. When I use openfortivpn in the terminal, everything works great.

Has anyone ever had this problem?

8

Hello and welcome to the openSUSE forums.

It must be very different. Were it alone because this thread is about openSUSE 15.1 and I hope you are not using that one.

Please do not hang your problem at the end of an old thread were nobody is interested anymore. Start a new thread, with a good title.