search

adrienverge / openfortivpn

Client for PPP+TLS VPN tunnel services
GNU General Public License v3.0
2.71k stars 321 forks source link

Permission denied pppd #1238

Open Its-Alex opened 2 months ago

Its-Alex commented 2 months ago

Hello :wave:

Each time I tried sending a file over ssh within the VPN I keep getting disconnected with the following error:

Aug 01 14:58:27 xxii-arch-laptop NetworkManager[105706]: INFO:   Route to gateway exists already.
Aug 01 14:58:27 xxii-arch-laptop NetworkManager[105706]: INFO:   Tunnel is up and running.
Aug 01 14:58:31 xxii-arch-laptop gvfsd[18004]: 2024-08-01 14:58:31,437:wsdd ERROR(pid 18004): error while sending packet on ppp0: [Errno 9] Bad file descriptor
Aug 01 14:58:31 xxii-arch-laptop gvfsd[18004]: 2024-08-01 14:58:31,630:wsdd ERROR(pid 18004): error while sending packet on ppp0: [Errno 9] Bad file descriptor
Aug 01 14:58:32 xxii-arch-laptop gvfsd[18004]: 2024-08-01 14:58:32,016:wsdd ERROR(pid 18004): error while sending packet on ppp0: [Errno 9] Bad file descriptor
Aug 01 14:58:37 xxii-arch-laptop systemd[1]: NetworkManager-dispatcher.service: Deactivated successfully.
Aug 01 14:58:50 xxii-arch-laptop kernel: ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105706]: INFO:   Cancelling threads...
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105706]: INFO:   Cleanup, joining threads...
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105706]: INFO:   Setting ppp0 interface down.
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105706]: INFO:   Restoring routes...
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: Hangup (SIGHUP)
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: Hangup (SIGHUP)
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: Modem hangup
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: Connect time 1.5 minutes.
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: Sent 458651622 bytes, received 8194081 bytes.
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: ioctl(SIOCSIFFLAGS): Operation not permitted (line 3187)
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: ioctl(SIOCSIFADDR): Operation not permitted (line 3339)
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: Can't execute /etc/ppp/ip-down: Permission denied
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: Connection terminated.
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[105707]: unable to delete pid file /run/pppdppp0.pid: Permission denied
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: Modem hangup
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: Connect time 1.5 minutes.
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: Sent 458651622 bytes, received 8194081 bytes.
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: ioctl(SIOCSIFFLAGS): Operation not permitted (line 3187)
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: ioctl(SIOCSIFADDR): Operation not permitted (line 3339)
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: Can't execute /etc/ppp/ip-down: Permission denied
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: Connection terminated.
Aug 01 14:59:56 xxii-arch-laptop pppd[105707]: unable to delete pid file /run/pppdppp0.pid: Permission denied
Aug 01 14:59:56 xxii-arch-laptop NetworkManager[1216]: <info>  [1722517196.6383] device (ppp0): state change: disconnected -> unmanaged (reason 'unmanaged', sys-iface-state: 'removed')
Aug 01 14:59:56 xxii-arch-laptop systemd[1]: Starting Network Manager Script Dispatcher Service...
Aug 01 14:59:56 xxii-arch-laptop systemd[1]: Started Network Manager Script Dispatcher Service.

I use the following command to connect:

$ sudo openfortivpn -u "<user>" -p "<password>" <url> --trusted-cert <cert>

Do you think you can help me solve it? If you need more informations I would be happy to send them to you :pray:

Thanks in advance.

DimitriPapadopoulos commented 2 months ago

I understand the VPN initially works, but fails to transfer a large file. Am I correct? If so, that's probably an MTU issue.

Its-Alex commented 2 months ago

@DimitriPapadopoulos Yes crash occur few seconds to few minutes after beginning upload, some more informations if needed:

I'm using a Dell latitude 3420

OS: archlinux
Kernel: 6.10.2-arch1-1
Packages Version:

PCI:

$ lspci -vn
00:00.0 0600: 8086:9a14 (rev 01)
        Flags: bus master, fast devsel, latency 0, IOMMU group 2
        Capabilities: <access denied>
        Kernel modules: igen6_edac

00:02.0 0300: 8086:9a49 (rev 01) (prog-if 00 [VGA controller])
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 181, IOMMU group 1
        Memory at 601c000000 (64-bit, non-prefetchable) [size=16M]
        Memory at 4000000000 (64-bit, prefetchable) [size=256M]
        I/O ports at 4000 [size=64]
        Expansion ROM at 000c0000 [virtual] [disabled] [size=128K]
        Capabilities: <access denied>
        Kernel driver in use: i915
        Kernel modules: i915, xe

00:04.0 1180: 8086:9a03 (rev 01)
        Subsystem: 1028:0b20
        Flags: fast devsel, IRQ 16, IOMMU group 3
        Memory at 601d140000 (64-bit, non-prefetchable) [size=128K]
        Capabilities: <access denied>
        Kernel driver in use: proc_thermal
        Kernel modules: processor_thermal_device_pci_legacy

00:07.0 0604: 8086:9a23 (rev 01) (prog-if 00 [Normal decode])
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 123, IOMMU group 0
        Bus: primary=00, secondary=01, subordinate=2a, sec-latency=0
        I/O behind bridge: 5000-5fff [size=4K] [16-bit]
        Memory behind bridge: 72000000-7e1fffff [size=194M] [32-bit]
        Prefetchable memory behind bridge: 6000000000-601bffffff [size=448M] [32-bit]
        Capabilities: <access denied>
        Kernel driver in use: pcieport

00:0d.0 0c03: 8086:9a13 (rev 01) (prog-if 30 [XHCI])
        Subsystem: 1028:0b20
        Flags: bus master, medium devsel, latency 0, IRQ 127, IOMMU group 4
        Memory at 601d180000 (64-bit, non-prefetchable) [size=64K]
        Capabilities: <access denied>
        Kernel driver in use: xhci_hcd
        Kernel modules: xhci_pci

00:0d.2 0c03: 8086:9a1b (rev 01) (prog-if 40 [USB4 Host Interface])
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 16, IOMMU group 4
        Memory at 601d100000 (64-bit, non-prefetchable) [size=256K]
        Memory at 601d1a1000 (64-bit, non-prefetchable) [size=4K]
        Capabilities: <access denied>
        Kernel driver in use: thunderbolt
        Kernel modules: thunderbolt

00:12.0 0700: 8086:a0fc (rev 20) (prog-if 00 [8250])
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 16, IOMMU group 5
        Memory at 601d170000 (64-bit, non-prefetchable) [size=64K]
        Capabilities: <access denied>
        Kernel driver in use: intel_ish_ipc
        Kernel modules: intel_ish_ipc

00:14.0 0c03: 8086:a0ed (rev 20) (prog-if 30 [XHCI])
        Subsystem: 1028:0b20
        Flags: medium devsel, IRQ 135, IOMMU group 6
        Memory at 601d160000 (64-bit, non-prefetchable) [size=64K]
        Capabilities: <access denied>
        Kernel driver in use: xhci_hcd
        Kernel modules: xhci_pci

00:14.2 0500: 8086:a0ef (rev 20)
        Subsystem: 1028:0b20
        Flags: fast devsel, IOMMU group 6
        Memory at 601d198000 (64-bit, non-prefetchable) [disabled] [size=16K]
        Memory at 601d1a0000 (64-bit, non-prefetchable) [disabled] [size=4K]
        Capabilities: <access denied>

00:14.3 0280: 8086:a0f0 (rev 20)
        Subsystem: 8086:4070
        Flags: bus master, fast devsel, latency 0, IRQ 16, IOMMU group 7
        Memory at 601d194000 (64-bit, non-prefetchable) [size=16K]
        Capabilities: <access denied>
        Kernel driver in use: iwlwifi
        Kernel modules: iwlwifi

00:15.0 0c80: 8086:a0e8 (rev 20)
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 27, IOMMU group 8
        Memory at 4017000000 (64-bit, non-prefetchable) [size=4K]
        Capabilities: <access denied>
        Kernel driver in use: intel-lpss
        Kernel modules: intel_lpss_pci

00:15.1 0c80: 8086:a0e9 (rev 20)
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 40, IOMMU group 8
        Memory at 4017001000 (64-bit, non-prefetchable) [size=4K]
        Capabilities: <access denied>
        Kernel driver in use: intel-lpss
        Kernel modules: intel_lpss_pci

00:16.0 0780: 8086:a0e0 (rev 20)
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 168, IOMMU group 9
        Memory at 601d19d000 (64-bit, non-prefetchable) [size=4K]
        Capabilities: <access denied>
        Kernel driver in use: mei_me
        Kernel modules: mei_me

00:17.0 0106: 8086:a0d3 (rev 20) (prog-if 01 [AHCI 1.0])
        Subsystem: 1028:0b20
        Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 126, IOMMU group 10
        Memory at 7e400000 (32-bit, non-prefetchable) [size=8K]
        Memory at 7e404000 (32-bit, non-prefetchable) [size=256]
        I/O ports at 4080 [size=8]
        I/O ports at 4088 [size=4]
        I/O ports at 4060 [size=32]
        Memory at 7e403000 (32-bit, non-prefetchable) [size=2K]
        Capabilities: <access denied>
        Kernel driver in use: ahci

00:1c.0 0604: 8086:a0bc (rev 20) (prog-if 00 [Normal decode])
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 124, IOMMU group 11
        Bus: primary=00, secondary=2b, subordinate=2b, sec-latency=0
        I/O behind bridge: [disabled] [16-bit]
        Memory behind bridge: 7e300000-7e3fffff [size=1M] [32-bit]
        Prefetchable memory behind bridge: [disabled] [64-bit]
        Capabilities: <access denied>
        Kernel driver in use: pcieport

00:1d.0 0604: 8086:a0b3 (rev 20) (prog-if 00 [Normal decode])
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 125, IOMMU group 12
        Bus: primary=00, secondary=2c, subordinate=2c, sec-latency=0
        I/O behind bridge: 3000-3fff [size=4K] [16-bit]
        Memory behind bridge: 7e200000-7e2fffff [size=1M] [32-bit]
        Prefetchable memory behind bridge: [disabled] [64-bit]
        Capabilities: <access denied>
        Kernel driver in use: pcieport

00:1f.0 0601: 8086:a082 (rev 20)
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IOMMU group 13

00:1f.3 0401: 8086:a0c8 (rev 20)
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 64, IRQ 182, IOMMU group 13
        Memory at 601d190000 (64-bit, non-prefetchable) [size=16K]
        Memory at 601d000000 (64-bit, non-prefetchable) [size=1M]
        Capabilities: <access denied>
        Kernel driver in use: sof-audio-pci-intel-tgl
        Kernel modules: snd_hda_intel, snd_soc_avs, snd_sof_pci_intel_tgl

00:1f.4 0c05: 8086:a0a3 (rev 20)
        Subsystem: 1028:0b20
        Flags: medium devsel, IRQ 16, IOMMU group 13
        Memory at 601d19c000 (64-bit, non-prefetchable) [size=256]
        I/O ports at efa0 [size=32]
        Kernel driver in use: i801_smbus
        Kernel modules: i2c_i801

00:1f.5 0c80: 8086:a0a4 (rev 20)
        Subsystem: 1028:0b20
        Flags: fast devsel, IOMMU group 13
        Memory at 70800000 (32-bit, non-prefetchable) [size=4K]
        Kernel driver in use: intel-spi
        Kernel modules: spi_intel_pci

2b:00.0 0108: 144d:a80b (rev 02) (prog-if 02 [NVM Express])
        Subsystem: 144d:a80b
        Flags: bus master, fast devsel, latency 0, IRQ 16, IOMMU group 14
        Memory at 7e300000 (64-bit, non-prefetchable) [size=16K]
        Capabilities: <access denied>
        Kernel driver in use: nvme
        Kernel modules: nvme

2c:00.0 0200: 10ec:8168 (rev 15)
        Subsystem: 1028:0b20
        Flags: bus master, fast devsel, latency 0, IRQ 19, IOMMU group 15
        I/O ports at 3000 [size=256]
        Memory at 7e204000 (64-bit, non-prefetchable) [size=4K]
        Memory at 7e200000 (64-bit, non-prefetchable) [size=16K]
        Capabilities: <access denied>
        Kernel driver in use: r8169
        Kernel modules: r8169

Output of dmesg:

$ sudo dmesg -H
Aug 1 19:40] ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1
[Aug 1 19:42] ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1
[Aug 1 19:43] ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1
[Aug 1 19:44] ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1
[Aug 1 19:46] ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1
[Aug 1 19:47] ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1
[Aug 1 19:48] ish-hid {33AECD58-B679-4E54-9BD9-A04D34F0C226}: [hid-ish]: enum_devices_done OK, num_hid_devices=1

Logs of network manager: https://pastebin.com/ADdwNJPb

Its-Alex commented 2 months ago

@DimitriPapadopoulos

I understand the VPN initially works, but fails to transfer a large file. Am I correct? If so, that's probably an MTU issue.

Maybe, I forgot to tell that everything was working perfectly until today, how should I change the MTU to test?