JAicewizard commented 2024年12月15日 13:02:09 +01:00 (Migrated from github.com)

Installation

I used the AUR version of this client

Version

eduVPN GUI version: 4.4.0 with eduvpn-common version: 2.1.0

OS/Distribution

arch linux

Logs

~/.config/eduvpn/log is empty, journalctl does provide useful information.

However, the GUI points tells me to look at ~/.config/eduvpn/log which is empty. ~/.config/eduvpn/log should contain at least some information, or more hints on where to look. Only when filing this bug report did I see I should check the sys logs

# Installation I used the AUR version of this client # Version `eduVPN GUI version: 4.4.0 with eduvpn-common version: 2.1.0` # OS/Distribution arch linux # Logs `~/.config/eduvpn/log` is empty, journalctl does provide useful information. However, the GUI points tells me to look at `~/.config/eduvpn/log` which is empty. `~/.config/eduvpn/log` should contain at least some information, or more hints on where to look. Only when filing this bug report did I see I should check the sys logs

jwijenbergh commented 2024年12月17日 14:01:51 +01:00 (Migrated from github.com)

Hi, that is annoying. What error do you get when connecting?

journalctl does provide useful information

Could you share this?

Hi, that is annoying. What error do you get when connecting? > journalctl does provide useful information Could you share this?

JAicewizard commented 2024年12月17日 14:15:23 +01:00 (Migrated from github.com)

I have found the issue, it was a kernel module not being loaded (I updated my system without restarting so that makes sense). The issue is that eduVPN does not point to journalctl when there is an issue like this, it points to its own logs which are empty.

A solution would be to either write a message to the log file indicating the issue lies elsewhere (e.g. An unexpected error in NetworkManager occurred when connecting. For more information check journalctl .... ), or show a similar message in the GUI/TUI.

I can send the journalctl logs over the weekend, but I don't think they will provide much useful information.

I have found the issue, it was a kernel module not being loaded (I updated my system without restarting so that makes sense). The issue is that eduVPN does not point to `journalctl` when there is an issue like this, it points to its own logs which are empty. A solution would be to either write a message to the log file indicating the issue lies elsewhere (e.g. `An unexpected error in NetworkManager occurred when connecting. For more information check journalctl .... `), or show a similar message in the GUI/TUI. I can send the journalctl logs over the weekend, but I don't think they will provide much useful information.

jwijenbergh commented 2024年12月17日 14:18:32 +01:00 (Migrated from github.com)

I have found the issue, it was a kernel module not being loaded (I updated my system without restarting so that makes sense). The issue is that eduVPN does not point to journalctl when there is an issue like this, it points to its own logs which are empty.

A solution would be to either write a message to the log file indicating the issue lies elsewhere (e.g. An unexpected error in NetworkManager occurred when connecting. For more information check journalctl .... ), or show a similar message in the GUI/TUI.

I can send the journalctl logs over the weekend, but I don't think they will provide much useful information.

Sure that makes sense, but which error did you get in the app? What was the UI message?

> I have found the issue, it was a kernel module not being loaded (I updated my system without restarting so that makes sense). The issue is that eduVPN does not point to `journalctl` when there is an issue like this, it points to its own logs which are empty. > > A solution would be to either write a message to the log file indicating the issue lies elsewhere (e.g. `An unexpected error in NetworkManager occurred when connecting. For more information check journalctl .... `), or show a similar message in the GUI/TUI. > > I can send the journalctl logs over the weekend, but I don't think they will provide much useful information. Sure that makes sense, but which error did you get in the app? What was the UI message?

JAicewizard commented 2024年12月17日 14:40:28 +01:00 (Migrated from github.com)

In the GUI it was a message

I have found the issue, it was a kernel module not being loaded (I updated my system without restarting so that makes sense). The issue is that eduVPN does not point to journalctl when there is an issue like this, it points to its own logs which are empty.
A solution would be to either write a message to the log file indicating the issue lies elsewhere (e.g. An unexpected error in NetworkManager occurred when connecting. For more information check journalctl .... ), or show a similar message in the GUI/TUI.
I can send the journalctl logs over the weekend, but I don't think they will provide much useful information.

Sure that makes sense, but which error did you get in the app? What was the UI message?

In the GUI it showed a generic connection failed screen with a lot of red, with a very generic error message to check ~/.config/eduvpn/log (with ~ replaced by $HOME). I don't have a screenshot, but once I don't need eduVPN anymore for today I will update my kernel and check if it happens again.

In the TUI it showed a similarly vague warning, I will also check later today

In the GUI it was a message > > I have found the issue, it was a kernel module not being loaded (I updated my system without restarting so that makes sense). The issue is that eduVPN does not point to `journalctl` when there is an issue like this, it points to its own logs which are empty. > > A solution would be to either write a message to the log file indicating the issue lies elsewhere (e.g. `An unexpected error in NetworkManager occurred when connecting. For more information check journalctl .... `), or show a similar message in the GUI/TUI. > > I can send the journalctl logs over the weekend, but I don't think they will provide much useful information. > > Sure that makes sense, but which error did you get in the app? What was the UI message? In the GUI it showed a generic connection failed screen with a lot of red, with a very generic error message to check `~/.config/eduvpn/log` (with `~` replaced by `$HOME`). I don't have a screenshot, but once I don't need eduVPN anymore for today I will update my kernel and check if it happens again. In the TUI it showed a similarly vague warning, I will also check later today

JAicewizard commented 2024年12月21日 22:11:20 +01:00

So I got to reproducing this. For me it is as easy as booting -> updating kernel (but not rebooting) -> using eduvpn

$ eduvpn-cli connect -n 1
Authorization needed. Your browser has been opened with url: {LONG_URL}
$ cat .config/eduvpn/log
{NOTHING}
$ journalctl -u NetworkManager
Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6582] audit: op="connection-delete" uuid="e22c48d8-5dbc-4c27-82fa-3792d67df66b" name="eduVPN" pid=68821 uid=1>
Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6609] audit: op="connection-add" uuid="4cbef1ca-cd05-47c0-a3e0-13c887f91baf" name="eduVPN" pid=68821 uid=1000>
Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6635] vpn[0x5f12c73fbbf0,4cbef1ca-cd05-47c0-a3e0-13c887f91baf,"eduVPN"]: starting openvpn
Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6640] audit: op="connection-activate" uuid="4cbef1ca-cd05-47c0-a3e0-13c887f91baf" name="eduVPN" pid=68821 uid>
Dec 21 21:58:08 antergos NetworkManager[68917]: modprobe: FATAL: Module tun not found in directory /lib/modules/6.12.4-arch1-1
Dec 21 21:58:08 antergos nm-openvpn[68922]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case.>
Dec 21 21:58:08 antergos nm-openvpn[68922]: OpenVPN 2.6.12 [git:makepkg/038a94bae57a446c+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD]>
Dec 21 21:58:08 antergos nm-openvpn[68922]: library versions: OpenSSL 3.4.0 22 Oct 2024, LZO 2.10
Dec 21 21:58:08 antergos nm-openvpn[68922]: DCO version: N/A
Dec 21 21:58:08 antergos nm-openvpn[68922]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 21 21:58:08 antergos nm-openvpn[68922]: TCP/UDP: Preserving recently used remote address: [AF_INET]145.100.179.52:1195
Dec 21 21:58:08 antergos nm-openvpn[68922]: UDPv4 link local: (not bound)
Dec 21 21:58:08 antergos nm-openvpn[68922]: UDPv4 link remote: [AF_INET]145.100.179.52:1195
Dec 21 21:58:08 antergos nm-openvpn[68922]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Dec 21 21:58:08 antergos nm-openvpn[68922]: [radboud-institute.ru.eduvpn.nl] Peer Connection Initiated with [AF_INET]145.100.179.52:1195
Dec 21 21:58:08 antergos nm-openvpn[68922]: Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:5: block-outside-dns (2.6.12)
Dec 21 21:58:08 antergos nm-openvpn[68922]: sitnl_send: rtnl: generic error (-101): Network is unreachable
Dec 21 21:58:08 antergos nm-openvpn[68922]: ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)
Dec 21 21:58:08 antergos nm-openvpn[68922]: Exiting due to fatal error
Dec 21 21:58:08 antergos NetworkManager[870]: <warn> [1734814688.7804] vpn[0x5f12c73fbbf0,4cbef1ca-cd05-47c0-a3e0-13c887f91baf,"eduVPN"]: dbus: failure: connect-failed (1)
Dec 21 21:58:08 antergos NetworkManager[870]: <warn> [1734814688.7804] vpn[0x5f12c73fbbf0,4cbef1ca-cd05-47c0-a3e0-13c887f91baf,"eduVPN"]: dbus: failure: connect-failed (1)

Attached is also a the error in the GUI, note that after running the GUI the log is still empty

So I got to reproducing this. For me it is as easy as booting -> updating kernel (but not rebooting) -> using eduvpn ``` $ eduvpn-cli connect -n 1 Authorization needed. Your browser has been opened with url: {LONG_URL} $ cat .config/eduvpn/log {NOTHING} $ journalctl -u NetworkManager Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6582] audit: op="connection-delete" uuid="e22c48d8-5dbc-4c27-82fa-3792d67df66b" name="eduVPN" pid=68821 uid=1> Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6609] audit: op="connection-add" uuid="4cbef1ca-cd05-47c0-a3e0-13c887f91baf" name="eduVPN" pid=68821 uid=1000> Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6635] vpn[0x5f12c73fbbf0,4cbef1ca-cd05-47c0-a3e0-13c887f91baf,"eduVPN"]: starting openvpn Dec 21 21:58:08 antergos NetworkManager[870]: <info> [1734814688.6640] audit: op="connection-activate" uuid="4cbef1ca-cd05-47c0-a3e0-13c887f91baf" name="eduVPN" pid=68821 uid> Dec 21 21:58:08 antergos NetworkManager[68917]: modprobe: FATAL: Module tun not found in directory /lib/modules/6.12.4-arch1-1 Dec 21 21:58:08 antergos nm-openvpn[68922]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case.> Dec 21 21:58:08 antergos nm-openvpn[68922]: OpenVPN 2.6.12 [git:makepkg/038a94bae57a446c+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD]> Dec 21 21:58:08 antergos nm-openvpn[68922]: library versions: OpenSSL 3.4.0 22 Oct 2024, LZO 2.10 Dec 21 21:58:08 antergos nm-openvpn[68922]: DCO version: N/A Dec 21 21:58:08 antergos nm-openvpn[68922]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Dec 21 21:58:08 antergos nm-openvpn[68922]: TCP/UDP: Preserving recently used remote address: [AF_INET]145.100.179.52:1195 Dec 21 21:58:08 antergos nm-openvpn[68922]: UDPv4 link local: (not bound) Dec 21 21:58:08 antergos nm-openvpn[68922]: UDPv4 link remote: [AF_INET]145.100.179.52:1195 Dec 21 21:58:08 antergos nm-openvpn[68922]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay Dec 21 21:58:08 antergos nm-openvpn[68922]: [radboud-institute.ru.eduvpn.nl] Peer Connection Initiated with [AF_INET]145.100.179.52:1195 Dec 21 21:58:08 antergos nm-openvpn[68922]: Options error: Unrecognized option or missing or extra parameter(s) in [PUSH-OPTIONS]:5: block-outside-dns (2.6.12) Dec 21 21:58:08 antergos nm-openvpn[68922]: sitnl_send: rtnl: generic error (-101): Network is unreachable Dec 21 21:58:08 antergos nm-openvpn[68922]: ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19) Dec 21 21:58:08 antergos nm-openvpn[68922]: Exiting due to fatal error Dec 21 21:58:08 antergos NetworkManager[870]: <warn> [1734814688.7804] vpn[0x5f12c73fbbf0,4cbef1ca-cd05-47c0-a3e0-13c887f91baf,"eduVPN"]: dbus: failure: connect-failed (1) Dec 21 21:58:08 antergos NetworkManager[870]: <warn> [1734814688.7804] vpn[0x5f12c73fbbf0,4cbef1ca-cd05-47c0-a3e0-13c887f91baf,"eduVPN"]: dbus: failure: connect-failed (1) ``` Attached is also a the error in the GUI, note that after running the GUI the log is still empty

jwijenbergh commented 2025年01月06日 10:25:24 +01:00

Right, so the issue is more about better UI/UX? You should always reboot when your kernel gets an update

Right, so the issue is more about better UI/UX? You should always reboot when your kernel gets an update

JAicewizard commented 2025年01月06日 12:19:44 +01:00

right, it is indeed. I usually keep y system running after upgrading my kernel, since usually all the kernel modules are already loaded.

I don't expect eduvpn to diagnose the issue for me, I don't think it needs to let me know a kernel module is not loaded, but a message indicating that the networkmonitor logs could contain more information (much like the issue template) would be very helpful.

right, it is indeed. I usually keep y system running after upgrading my kernel, since usually all the kernel modules are already loaded. I don't expect eduvpn to diagnose the issue for me, I don't think it needs to let me know a kernel module is not loaded, but a message indicating that the networkmonitor logs could contain more information (much like the issue template) would be very helpful.

frankier commented 2025年08月05日 08:23:53 +02:00

I ran into this, and I mildly disagree. I think it would be good to advise to check the logs for more information when there's a problem, but I also think perhaps this condition could be detected and message saying that a restart might be necessary could be shown. After all, my understanding is one of the aims of the project is to make these institutional VPNs easier to use.

I ran into this, and I mildly disagree. I think it would be good to advise to check the logs for more information when there's a problem, but I also think perhaps this condition could be detected and message saying that a restart might be necessary could be shown. After all, my understanding is one of the aims of the project is to make these institutional VPNs easier to use.

jwijenbergh commented 2026年02月23日 15:06:15 +01:00

fix has been committed, will be in a new version this week

fix has been committed, will be in a new version this week