1.5.3


Old Stuff

 www.your-freedom.net
 www.secure-tunnel.com

Ticket #151 (closed defect: fixed)

Opened 4 years ago

Last modified 4 years ago

Can't connect using 0.9.13

Reported by: fbrunner@myrealbox.com Assigned to: andrei
Priority: normal Milestone: AlmostVPN 0.9.14
Component: PreferencePanel Version: 0.9
Severity: normal Keywords: password expected
Cc:

Description

OS X 10.4.5 Security 002-2006 and 001-2006 applied. Connecting via port redirection through a NAT/firewall. Every time I try "Test Account" I get the message :

"Failed to connect to account password expected"

hand connecting via commandline ssh using same account, port, and credentials works fine to/from same machines. 

03/20/06 14:05:22[7007] VERSION     : Not Set
03/20/06 14:05:22[7007] My PID      : 7007
03/20/06 14:05:22[7007] Who Am I    : fred     tty??    Mar 20 14:05 
03/20/06 14:05:22[7007] USER        : fred
03/20/06 14:05:22[7007] Can Not SUDO!!!
03/20/06 14:05:22[7007] OS          : Tiger
03/20/06 14:05:22[7007] Base DIR    : /Users/fred/Library/PreferencePanes/AlmostVPN.prefPane/Contents/Resources
03/20/06 14:05:22[7007] Working DIR : /Users/fred/Library/Application Support/AlmostVPN
03/20/06 14:05:22[7007] profile     : not set
03/20/06 14:05:22[7007] Tool        : /Users/fred/Library/PreferencePanes/AlmostVPN.prefPane/Contents/Resources/almostVPNTool
03/20/06 14:05:22[7007] Timeout     : 15
03/20/06 14:05:22[7007] Machines    : 1
03/20/06 14:05:22[7007]   <hostname> <ip address>
03/20/06 14:05:22[7007] Sessions    : 1
03/20/06 14:05:22[7007]   <name>@<ip address>:9696  "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"  "-o" "ConnectTimeout=15" "-o" "TCPKeepAlive=yes" "-o" "ServerAliveInterval=15" "-o" "ServerAliveCountMax=4" "-p" "9696" "-c" "3des" "-l" "<name>" "<ip address>"
03/20/06 14:05:22[7007] Options     :
03/20/06 14:05:22[7007] +timeout 15 +test <name>@<ip address>:9696 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx -o ConnectTimeout=15 -o TCPKeepAlive=yes -o ServerAliveInterval=15 -o ServerAliveCountMax=4 -p 9696 -c 3des -l <name> <ip address> +machine <name> <ip address>
03/20/06 14:05:22[7007] Mon Mar 20 14:05:22 CST 2006 -====================================================================================================-
03/20/06 14:05:22[7007] testSSH  "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"  "-o" "ConnectTimeout=15" "-o" "TCPKeepAlive=yes" "-o" "ServerAliveInterval=15" "-o" "ServerAliveCountMax=4" "-p" "9696" "-c" "3des" "-l" "<name>" "<ip address>" : 
03/20/06 14:05:22[7007] Using 0 Proxy
03/20/06 14:05:22[7007] SOCKS5_SERVER=
03/20/06 14:05:22[7007] SOCKS5_USER=
03/20/06 14:05:22[7007] HTTP_PROXY=
03/20/06 14:05:22[7007] HTTP_PROXY_USER=
03/20/06 14:05:22[7007] PROXY_OPTIONS=

Change History

03/20/06 15:18:40 changed by andrei

  • keywords set to password expected.
  • status changed from new to assigned.
  • milestone set to AlmostVPN 0.9.14.

Fred, did it ever worked? Can you see the password when you click on "show (password)"? Can you connect to any other accounts?

03/20/06 15:31:15 changed by fbrunner@myrealbox.com

Yes, I can see the correct password when I select "show password". I have not previously tried this connection before.

I tried adding another account on my local LAN to test, and I get the following error in console.log when I try "Test Account'

2006-03-20 14:29:02.197 System Preferences[3789] *** -[NSCFArray addObject:]: attempt to insert nil

I should note that I have added and deleted a number of account entries in the Accounts tab. Perhaps this information is corrupted.....?

03/21/06 01:57:16 changed by andrei

  1. do you see almostvpn@almostvpn entry in your login keychain ( you can use /Applicaitons/Utilities/Keychain Access to see content of the keychain)
  2. do you see AlmostVPN Keychain ( ~/Library/Keychains/AlmostVPN.keychain )
  3. In AlmostVPN Keychain, do you see entry which correspond to <user name>@<ip address>:<port> you are trying to connect?
  4. what do you see if you run this command: 
    ~/Library/PreferencePanes/AlmostVPN.prefPane/Contents/Resources/almostVPNTool <user name>@<ip address>:<port>
  5. have you tried to restart System Preferences?
  6. have you tried to "kill launchd" ( available on debug support dialog via small wrench and can of pesticide icon)
  7. have you tried to reboot the computer?

03/21/06 11:31:18 changed by fbrunner@myrealbox.com

1. yes 2. yes 3. yes 4. "password is nil" 5. yes 6. yes 7. yes

03/21/06 14:04:37 changed by fbrunner@myrealbox.com

I went ahead and executed the "uninstall" procedure, logged out and back in, and then reinstalled from scratch, creating a single account. I also changed the account to use key based authentication. Now I get "passphrase expected" instead of "password expected".

I tried looking into the Almost VPN keychain entry for the Internet password, but I can't unlock the AVPN keychain - it seems to have a password other than my login keychain password.

03/22/06 07:46:53 changed by andrei

Sorry for delay with my response. I am pushing really hard to have AlmostVPN v1.0 public beta started this week, so it is hard to find time...

The fact that almostVPNTool reports "password nil" is very strange...

Try this:

  1. delete AlmostVPN.keychain
  2. change value for almostvpn@almostvpn entry in your login keychain to something you can type again
  3. type a password for the account in AlmostVPN
  4. look into this password entry in AlmostVPN.keychain. Now you should be able to un-lock it with password you have entered in step 2.

03/22/06 10:35:57 changed by fbrunner@myrealbox.com

  • status changed from assigned to closed.
  • resolution set to fixed.

No problem Andrei, your responses have been much faster than I would expect, and thank you.

So - I did steps 1-3 above, and the problem was solved. AlmostVPN now stores the password for the profile and I can connect to my host.

It appears that at least in my case the almost.vpn login keychain password was getting created set to some random value. One thing you could look at is that I am not sure if when I originally entered the sudo password that I checked "Save password" checkbox. I think I did, but perhaps not.

03/26/06 22:49:10 changed by andrei

It looks like sometimes AlmostVPN produced "bad" passwords. Just to be on safe side, I reduced character set used to generate passwords ( '0' - 'z' ).