search

vfosterm / NordVPN-NetworkManager-Gui

A NordVPN GUI client for linux using the native Network Manager
GNU General Public License v3.0
132 stars 19 forks source link

Keeps asking for password #23

Open FrenchGithubUser opened 3 years ago

FrenchGithubUser commented 3 years ago

I'm using it on pop os. I can log in normally, I click to connect on a server, I enter my sudo password, it says 'connecting...' and then it keeps asking for a password with a pop up.

Any idea of what could go wrong ?

vfosterm commented 3 years ago

not sure, which version are you on? You could try launching the application from the terminal, there is a good chance that an error would be logged there.

asqwerth commented 3 years ago

Hi, thanks for this GUI, which I'm using on MX19. It was just freshly packaged for the distro by the packaging team on my request, and is still in MX's Test Repo for testing and feedback.

I believe the issue is not a repeated request for the nordvpn account password, but the continued request for the sudo password to disable IPV6. I note that if you choose to "cancel" the request for password, VPN will still connect. But every fresh connection to another VPN server will cause the sudo password request to pop up again.

This is despite:

  1. the closure of this IPv6-related bug https://github.com/vfosterm/NordVPN-NetworkManager-Gui/issues/6
  2. you stating twice on the front page of this project that root password/permission is not required
  3. the instruction on the homepage to simply disable WebRTC (no mention of disabling IPv6) to prevent dns leaks, which I do with the "Disable WebRTC" firefox extension.

I give full details of my observation of this issue (and a few other issues) in this MX forum thread for this package: https://forum.mxlinux.org/viewtopic.php?p=624268#p624268

ksnip_20210218-125859

vfosterm commented 3 years ago

Hi, the readme is outdated in this regard. The last time I tested, NordVPN did not support IPV6. The only way to prevent leaks is to disable it system wide which requires root privileges. Of course it is possible to not disable ipv6 by pressing cancel but it is currently programmed to attempt to disable and enable ipv6 after every connection/disconnection.

On Sun, 21 Feb 2021, 19:03 asqwerth, notifications@github.com wrote:

Hi, thanks for this GUI, which I'm using on MX19. It was just freshly packaged for the distro by the packaging team on my request, and is still in MX's Test Repo for testing and feedback.

I believe the issue is not the repeated request for the nordvpn account password, but the continued request for the sudo password to disable IPV6. I note that if you choose to "cancel" the request for password, VPN will still connect. But every fresh connection to another VPN server will cause the sudo password request to pop up again.

This is despite:

  1. the closure of this IPv6-related bug #6 https://github.com/vfosterm/NordVPN-NetworkManager-Gui/issues/6
  2. you stating twice on the front page of this project that root password/permission is not required
  3. the instruction on the homepage to simply disable WebRTC (no mention of disabling IPv6) to prevent dns leaks, which I do with the "Disable WebRTC" firefox extension.

I give full details of my observation of this issue (and a few other issues) in this MX forum thread for this package: https://forum.mxlinux.org/viewtopic.php?p=624268#p624268

[image: ksnip_20210218-125859] https://user-images.githubusercontent.com/22598625/108632333-4cb29880-74a9-11eb-8007-218782984812.png

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/vfosterm/NordVPN-NetworkManager-Gui/issues/23#issuecomment-782889420, or unsubscribe https://github.com/notifications/unsubscribe-auth/AGEVVBPXGATGEUPQNEJ6RHLTAE4GZANCNFSM4TTXOUQA .

asqwerth commented 3 years ago

Thanks. So the action taken by Nordvpn as set out in this blog entry doesn't help with leaks due to users having IPv6 addresses?

https://nordvpn.com/blog/nordvpn-implements-ipv6-leak-protection/

vfosterm commented 3 years ago

It looks like their official binaries block ipv6 much like application does. I haven't tested their official binaries in quite some time but it does not seem, even years later, that they support ipv6. Currently I am disabling ipv6 system wide using sysctl (which requires elevated privileges), there is probably a more elegant solution to this. If you have any suggestions feel free to submit a pull request or suggest them here.