Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Im on RHEL, and found that my VPN stopped working.

I discovered that I could use the command line utility, nmcli, to try to get more info about what was happening.

However, Im finding that the vpn still seems to fail and the error has no clear meaning:

[jvyas@jvyas jvyas]# nmcli con up id "XXXXXXXXX"
Active connection state: unknown
Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/11
state: VPN connecting (need authentication) (2)
state: VPN connecting (3)
state: VPN connecting (getting IP configuration) (4)suggested tags: vpnnetworkingwireless-networking
Error: Connection activation failed: unknown reason.

So , to try some googling - I found the switch statement that this error message is being returned from, and it looks like most conditions are handled pretty well, which means something very funny must be going wrong when i try to connect to VPN:

+static const char *
+vpn_connection_state_reason_to_string (NMVPNConnectionStateReason reason)
+ switch (reason) {
+ return _("unknown reason");
+ return _("none");
+ return _("the user was disconnected");
+ return _("the base network connection was interrupted");
+ return _("the VPN service stopped unexpectedly");
+ return _("the VPN service returned invalid configuration");
+ return _("the connection attempt timed out");
+ return _("the VPN service did not start in time");
+ return _("the VPN service failed to start");
+ return _("no valid VPN secrets");
+ return _("invalid VPN secrets");
+ return _("the connection was removed");
+ default:
+ return _("unknown");
+ }

The above switch statement looks pretty comprehensive ! I wonder... what ELSE could possibly be going wrong with my vpn connection attempt?

Im assuming maybe there are some directories or files whose permissions may have recently been modified or corrupted... maybe there is a way to reset my nmcli (or its config files, or whatever else may have suddenly gone wrong) to previous settings?

* UPDATE ****

My acute issue was due to a bad password. I think this might constitute a bug in the nm or nmcli app. I assume that it should be possible to interpret if a login is "rejected" with a more explicit error.

share|improve this question
Update: Ive confirmed that the exact same error happens when i enter a known gibberish password. So - maybe a bad password can lead to failure for "unknown reason" ? Also, Ive confirmed that entering no password yeilds a "there were no valid secrets" error message – jayunit100 Jun 1 '13 at 16:08
What version of RHEL? what version of NM?are you running both NM and networking daemon? – Dejan Jun 3 '13 at 13:47
This was due to a locked/unsynchronized login password token. But the cryptic error message is still very troubling. nmcli version "0.8.1-33.el6", nm version : " 20100205" – jayunit100 Jun 3 '13 at 20:18
RE RHEL version, 6.2 - but thats probably not relevant. I think this is a bug in the error message displayed by NM – jayunit100 Jun 3 '13 at 23:36
My problem was incorrect password too!! This should be fixed! – MJafar Mash Oct 25 '15 at 7:24

NetworkManager is a bit lacking when it comes to reporting VPN errors. Best thing to do is to consult the VPN sections over here:

In other words (for openvpn debugging) run in a terminal:

/usr/libexec/nm-openvpn-service --debug

Then fire up your VPN connection and see what happens.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .