VPN passwords save when they shouldn't
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
network-manager (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
I use network-manager to connect to openVPN servers.
First, when adding a new VPN config, entering a login is required, and we are unable to save if we do not enter a username. This is a security flaw as we need the ability to enter login and password each and every time as an option.
Second, I enter a login username, but not a password. On first connection it asks for a password, but never again. I have never been asked for a password on the same VPN after entering it the first time. This persists across reboots also. This is a substantial security flaw, and this should be an option, not the default behaviour.
ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: network-manager 1.2.6-0ubuntu1.1
ProcVersionSign
Uname: Linux 4.8.0-53-generic x86_64
ApportVersion: 2.20.3-0ubuntu8.3
Architecture: amd64
CurrentDesktop: Unity
Date: Sat May 27 21:35:10 2017
IfupdownConfig:
# interfaces(5) file used by ifup(8) and ifdown(8)
auto lo
iface lo inet loopback
InstallationDate: Installed on 2017-02-18 (99 days ago)
InstallationMedia: Ubuntu 16.10 "Yakkety Yak" - Release amd64 (20161012.2)
NetworkManager.
[main]
NetworkingEnab
WirelessEnable
WWANEnabled=true
SourcePackage: network-manager
UpgradeStatus: No upgrade log present (probably fresh install)
nmcli-dev:
DEVICE TYPE STATE DBUS-PATH CONNECTION CON-UUID CON-PATH
tun0 tun connected /org/freedeskto
wlp3s0 wifi connected /org/freedeskto
enp0s25 ethernet unavailable /org/freedeskto
lo loopback unmanaged /org/freedeskto
nmcli-nm:
RUNNING VERSION STATE STARTUP CONNECTIVITY NETWORKING WIFI-HW WIFI WWAN-HW WWAN
running 1.2.6 connected started full enabled enabled enabled enabled enabled