751587 - VPN isn't working for kmoir

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: Servicedesk, task)

Description

[Kim Moir [:kmoir] ET]

Since Yesterday, my VPN connections to MV and Releng aren't working.  I'm remote in Ottawa. (Yes, I updated to the new settings for the new releng VPN server).  I use Viscosity on a Mac.  I'm kmoir in #desktop :-)

Comment 1

[Vinh Hua [:vinh]]

May 03 14:50:22: Viscosity 1.3.5 (1051)May 03 14:50:22: Checking reachability status of connection...May 03 14:50:22: Connection is reachable. Starting connection attempt.Viscosity could not start OpenVPN with root/admin rights, which means OpenVPN may not be able to start the connection. Trying to continue anyway...May 03 14:50:24: OpenVPN 2.2.1 x86_64-apple-darwin10.8.0 [SSL] [LZO2]...
1:50 PM
...[PKCS11] [eurephia] built on Aug  1 2011May 03 14:51:09: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.May 03 14:51:09: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executablesMay 03 14:51:09: Control Channel Authentication: using 'ta.key' as a OpenVPN static key...
1:50 PM
...fileMay 03 14:51:09: LZO compression initializedMay 03 14:51:09: UDPv4 link local: [undef]May 03 14:51:09: UDPv4 link remote: 63.245.220.11:1194May 03 14:51:09: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent thisMay 03 14:51:12: [server] Peer Connection Initiated with 63.245.220.11:1194May 03 14:53:10: Viscosity 1.3.5 (1051)May 03...
1:50 PM
...14:53:10: Checking reachability status of connection...May 03 14:53:10: Connection is reachable. Starting connection attempt.Viscosity could not start OpenVPN with root/admin rights, which means OpenVPN may not be able to start the connection. Trying to continue anyway...May 03 14:53:12: OpenVPN 2.2.1 x86_64-apple-darwin10.8.0 [SSL] [LZO2] [PKCS11] [eurephia] built on Aug  1 2011May 03...
1:50 PM
...14:53:25: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.May 03 14:53:25: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executablesMay 03 14:53:25: Control Channel Authentication: using 'ta.key' as a OpenVPN static key fileMay 03 14:53:25: LZO compression initializedMay...
1:50 PM
...03 14:53:25: UDPv4 link local: [undef]May 03 14:53:25: UDPv4 link remote: 63.245.220.11:1194May 03 14:53:25: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent thisMay 03 14:53:28: [server] Peer Connection Initiated with 63.245.220.11:1194

Comment 2

[Vinh Hua [:vinh]]

May 03 16:52:37: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
1:53 PM
May 03 16:52:37: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
1:53 PM
May 03 16:52:37: Re-using SSL/TLS context
1:53 PM
May 03 16:52:37: LZO compression initialized
1:53 PM
May 03 16:52:37: UDPv4 link local: [undef]
1:53 PM
May 03 16:52:37: UDPv4 link remote: 63.245.220.11:1194
1:53 PM
May 03 16:52:40: [server] Peer Connection Initiated with 63.245.220.11:1194
1:53 PM
but still shows as not connected

Comment 3

[Vinh Hua [:vinh]]

Sent Kim a working VPN profile. She is all set. Closing ticket.

Comment 4

[Kim Moir [:kmoir] ET]

I tried to connect to VPN this morning and the same issue is occurred.  Tried to connect, said it was connecting, then could not connect, disconnecting.  I tried importing the connection Vinh had left on my machine as a new connection, but it didn't work.  Help please, I need to connect to some build machines to do my work....

Comment 5

[Kim Moir [:kmoir] ET]

As an additional comment, I shutdown my machine last night.  The last two days when VPN was working I didn't shutdown my machine at night.

Comment 6

[Jonathan Lin - Not watching NI/offline [:jlin] [[e-mail]]]

Starting viscosity from the application folder resolved the permissions issue - viscosity was unable to completely start b/c it couldn't get admin rights.

kmoir is able to connect to vpn.

Comment 7

[Kim Moir [:kmoir] ET]

Thanks Jonathan for your help!