Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 631008 - net-misc/networkmanager-fortisslvpn-1.2.6 breaks fortigate vpn
Summary: net-misc/networkmanager-fortisslvpn-1.2.6 breaks fortigate vpn
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mathy Vanvoorden
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-09-14 20:03 UTC by Konstantin (elxa)
Modified: 2017-11-07 22:59 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Konstantin (elxa) 2017-09-14 20:03:31 UTC
Connecting to the vpn fails, journal error messages:

pppd[4895]: /usr/lib64/pppd/2.4.5/nm-fortisslvpn-pppd-plugin.so: undefined symbol: _nm_utils_ascii_str_to_int64
pppd[4895]: Couldn't load plugin /usr/lib64/pppd/2.4.5/nm-fortisslvpn-pppd-plugin.so

Downgrading to

net-misc/networkmanager-fortisslvpn-1.2.2

and upgrading to

net-vpn/openfortivpn-1.5.0

solved the issue.

Reproducible: Always
Comment 1 Konstantin (elxa) 2017-09-14 20:05:52 UTC
emerge --info
Portage 2.3.8 (python 2.7.13-final-0, default/linux/amd64/13.0/desktop/gnome/systemd, gcc-7.2.0, glibc-2.25-r4, 4.11.8-gentoo x86_64)
=================================================================
System uname: Linux-4.11.8-gentoo-x86_64-Intel-R-_Core-TM-_i7-6700K_CPU_@_4.00GHz-with-gentoo-2.4.1
KiB Mem:    32515188 total,  18516000 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Thu, 07 Sep 2017 15:04:28 +0000
Head commit of repository gentoo: a497f891f1b9440f08109f865854b30c29f67126

sh bash 4.4_p12
ld GNU ld (Gentoo 2.26.1 p1.0) 2.26.1
distcc 3.2rc1 x86_64-pc-linux-gnu [disabled]
app-shells/bash:          4.4_p12::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.24.2::gentoo
dev-lang/python:          2.7.13::gentoo, 3.4.6::gentoo, 3.5.3::gentoo, 3.6.1-r1::gentoo
dev-util/cmake:           3.9.1-r1::gentoo
dev-util/pkgconfig:       0.29.2::gentoo
sys-apps/baselayout:      2.4.1-r2::gentoo
sys-apps/openrc:          0.30::gentoo
sys-apps/sandbox:         2.10-r4::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69-r4::gentoo
sys-devel/automake:       1.4_p6-r2::gentoo, 1.11.6-r2::gentoo, 1.12.6-r1::gentoo, 1.13.4-r1::gentoo, 1.14.1-r1::gentoo, 1.15.1-r1::gentoo
sys-devel/binutils:       2.26.1::gentoo, 2.27-r1::gentoo, 2.28-r2::gentoo, 2.28.1::gentoo
sys-devel/gcc:            6.4.0::gentoo, 7.1.0-r1::gentoo, 7.2.0::gentoo
sys-devel/gcc-config:     1.8-r1::gentoo
sys-devel/libtool:        2.4.6-r4::gentoo
sys-devel/make:           4.2.1-r1::gentoo
sys-kernel/linux-headers: 4.11::gentoo (virtual/os-headers)
sys-libs/glibc:           2.25-r4::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: git
    sync-uri: git://github.com/gentoo-mirror/gentoo.git
    priority: -1000

local
    location: /usr/local/portage
    masters: gentoo

gnome
    location: /var/lib/layman/gnome
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/gnome.git
    masters: gentoo
    priority: 50

steam-overlay
    location: /var/lib/layman/steam-overlay
    sync-type: laymansync
    sync-uri: git://github.com/anyc/steam-overlay.git
    masters: gentoo
    priority: 50

sublime-text
    location: /var/lib/layman/sublime-text
    sync-type: laymansync
    sync-uri: git://github.com/DamnWidget/sublime-text.git
    masters: gentoo
    priority: 50

tamiko
    location: /var/lib/layman/tamiko
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/repo/dev/tamiko.git
    masters: gentoo
    priority: 50

tox-overlay
    location: /var/lib/layman/tox-overlay
    sync-type: laymansync
    sync-uri: git://github.com/Tox/gentoo-overlay-tox.git
    masters: gentoo
    priority: 50

x11
    location: /var/lib/layman/x11
    sync-type: laymansync
    sync-uri: git://anongit.gentoo.org/proj/x11
    masters: gentoo
    priority: 50

Installed sets: @kodi-netflix, @steam
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-pipe -fomit-frame-pointer -march=native -O3 -fno-delete-null-pointer-checks -flifetime-dse=1"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.3/conf /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/chromium/policies/managed/chrome-gnome-shell.json /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/opt/chrome/policies/managed/chrome-gnome-shell.json /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-pipe -fomit-frame-pointer -march=native -O3 -fno-delete-null-pointer-checks -flifetime-dse=1"
DISTDIR="/portage/distfiles"
EMERGE_DEFAULT_OPTS="--jobs=6 --keep-going --autounmask=n"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="ftp://ftp.wh2.tu-dresden.de/pub/mirrors/gentoo http://gentoo.mneisen.org/ http://mirror.netcologne.de/gentoo/ http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ ftp://linux.rz.ruhr-uni-bochum.de/gentoo-mirror/"
LANG="en_US.UTF-8"
LC_ALL=""
LDFLAGS="-Wl,-O1 -Wl,--hash-style=gnu -Wl,--sort-common -Wl,--as-needed -fuse-linker-plugin -pipe -fomit-frame-pointer -march=native -O3 -fno-delete-null-pointer-checks -flifetime-dse=1"
MAKEOPTS="-j9"
PKGDIR="/portage/packages"
PORTAGE_COMPRESS="xz"
PORTAGE_COMPRESS_FLAGS="-9"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="X a52 aac aacplus acl acpi aes aio airplay amd64 audit avahi avx berkdb bluetooth bluray branding bs2b bzip2 cairo call caps cdda cdio cdr clang cli clutter colord connection-sharing cracklib crypt cryptsetup css cups custom-cflags custom-cpuopts custom-optimization cxx dbus dri dri3 dts dvd dvdnav dvdr eds efi emboss encode evo exif faac fam ffmpeg firefox flac fontconfig fortran fprint gdbm geoip gif glamor gnome gnome-keyring gnome-online-accounts gpm gstreamer gtk gtk3 gtkstyle hdaps highlight hires-icons iconv icq icu infinality introspection ios ipod ipv6 irc jabber jpeg lame laptop lastfm lcms ldap libnotify libsamplerate libsecret libsoxr lzma mad map mmx mmxext mng modules mp3 mp4 mpeg multilib nautilus ncurses networkmanager nls nptl ogg opengl openmp openssl optimization optimized-qmake opus pam pango pch pcre pdf pgo playlist png policykit popcnt ppds pulseaudio qemu qt3support qt4 readline scanner sdl sdl2 seccomp sendto session sip sna snappy spell spice sse sse2 sse3 sse4_1 sse4_2 ssl ssse3 startup-notification strong-optimization svg systemd taglib tcpd telepathy theora threads thunderbird tiff tls truetype twolame udev udisks unicode upower usb v4l vaapi vdpau virgl virt-network vnc vorbis vpx wavpack wayland webm webp webrtc-aec widevine wifi wxwidgets x264 x265 xattr xcb xinerama xml xv xvid zeitgeist zeroconf zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev synaptics wacom" KERNEL="linux" L10N="de en" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="de en" NETBEANS_MODULES="cnd enterprise gsf ide j2ee java javafx nb profiler xml soa visualweb webcommon websvccommon mobility" NGINX_MODULES_HTTP="addition" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" POSTGRES_TARGETS="postgres9_5" PYTHON_SINGLE_TARGET="python3_5" PYTHON_TARGETS="python2_7 python3_5" QEMU_SOFTMMU_TARGETS="arm i386 x86_64" QEMU_USER_TARGETS="i386 x86_64" RUBY_TARGETS="ruby21 ruby22 ruby23 ruby24" USERLAND="GNU" VIDEO_CARDS="intel i965 amdgpu radeonsi radeon" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_RSYNC_EXTRA_OPTS
Comment 2 Konstantin (elxa) 2017-09-14 20:11:39 UTC
Timeout logs from systemd journal:

NetworkManager[699]: <warn>  [1505418727.4108] vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn connection name",0]: VPN connection: connect timeout exceeded.
nm-fortisslvpn-[24457]: Connect timer expired, disconnecting.
nm-fortisslvpn-[24457]: Terminated ppp daemon with PID 24464.
pppd[24465]: Hangup (SIGHUP)
pppd[24465]: Modem hangup
pppd[24465]: Connection terminated.
NetworkManager[699]: <warn>  [1505418727.4177] vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn connection name",0]: VPN plugin: failed: connect-failed (1)
NetworkManager[699]: <info>  [1505418727.4178] vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn connection name",0]: VPN plugin: state changed: stopping (5)
NetworkManager[699]: <info>  [1505418727.4180] vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn connection name",0]: VPN plugin: state changed: stopped (6)
systemd-timesyncd[693]: Network configuration changed, trying to establish connection.
NetworkManager[699]: <info>  [1505418727.4202] vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn connection name",0]: VPN service disappeared
pppd[24465]: Exit.
Comment 3 Konstantin (elxa) 2017-10-22 19:16:03 UTC
(In reply to Konstantin (elxa) from comment #2)
> Timeout logs from systemd journal:
> 
> NetworkManager[699]: <warn>  [1505418727.4108]
> vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn
> connection name",0]: VPN connection: connect timeout exceeded.
> nm-fortisslvpn-[24457]: Connect timer expired, disconnecting.
> nm-fortisslvpn-[24457]: Terminated ppp daemon with PID 24464.
> pppd[24465]: Hangup (SIGHUP)
> pppd[24465]: Modem hangup
> pppd[24465]: Connection terminated.
> NetworkManager[699]: <warn>  [1505418727.4177]
> vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn
> connection name",0]: VPN plugin: failed: connect-failed (1)
> NetworkManager[699]: <info>  [1505418727.4178]
> vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn
> connection name",0]: VPN plugin: state changed: stopping (5)
> NetworkManager[699]: <info>  [1505418727.4180]
> vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn
> connection name",0]: VPN plugin: state changed: stopped (6)
> systemd-timesyncd[693]: Network configuration changed, trying to establish
> connection.
> NetworkManager[699]: <info>  [1505418727.4202]
> vpn-connection[0x29184e0,f59b95a8-2f0e-440b-bc9f-39758c67d9e5,"foobar vpn
> connection name",0]: VPN service disappeared
> pppd[24465]: Exit.

fyi, the owner updated his device from FortiOS 5.4.2 to 5.6.2 and was no longer happening. I can connect without issues now.
Before the update the commit (for the networkmanager-fortisslvpn source) mentioned here broke the support on the older FortiOS:

https://bugzilla.redhat.com/show_bug.cgi?id=1490874#c2
Comment 4 Mathy Vanvoorden 2017-11-07 19:38:45 UTC
I created a PR to address this:

https://github.com/gentoo/gentoo/pull/6144
Comment 5 Larry the Git Cow gentoo-dev 2017-11-07 22:59:21 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fffd4eeec18894724408f7930599b707504121a1

commit fffd4eeec18894724408f7930599b707504121a1
Author:     Mathy Vanvoorden <mathy@vanvoorden.be>
AuthorDate: 2017-11-07 19:33:37 +0000
Commit:     Patrice Clement <monsieurp@gentoo.org>
CommitDate: 2017-11-07 22:58:57 +0000

    net-misc/networkmanager-fortisslvpn-1.2.6: fix dependency on nm-utils.
    
    This applies upstream patch 4195187fbe5be348222c9a8472f7c9cf0e51d346 to
    prevent the error 'undefined symbol: _nm_utils_ascii_str_to_int64' from
    happening.
    
    Closes: https://bugs.gentoo.org/631008
    Closes: https://github.com/gentoo/gentoo/pull/6144
    Package-Manager: Portage-2.3.8, Repoman-2.3.4

 ...r-fortisslvpn-1.2.6-nm-utils-dependency-fix.diff | 21 +++++++++++++++++++++
 .../networkmanager-fortisslvpn-1.2.6.ebuild         |  2 ++
 2 files changed, 23 insertions(+)