[eduVPN-deploy] problem using eduvpn clients with version 3

Mon Jun 13 13:52:03 CEST 2022

Hi Pascal,

The Debian package for Linux v3 client will be released this week. Be aware that the commandline version is still a bit outdated but GUI works fine with V3 server.

Regards Rogier

Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Pascal Panneels via eduVPN-deploy <eduvpn-deploy at list.surfnet.nl>
Sent: Monday, June 13, 2022 1:33:30 PM
To: François Kooman <fkooman at tuxed.net>; eduvpn-deploy at list.surfnet.nl <eduvpn-deploy at list.surfnet.nl>
Subject: Re: [eduVPN-deploy] problem using eduvpn clients with version 3

re,

Ok, manually reinstalling the client on a windows VM makes it work back indeed.

Thanks,

Pascal

Le 13/06/2022 à 13:00, François Kooman a écrit :
Hi Pascal,

For both Windows and Linux you need the 3.0 client of the application. For Windows this requires currently a manual upgrade (app.eduvpn.org) or a new installation, the default is 3.0.0 for new installations.

The Linux client has been partially released (for RPM distros), but not yet for Debian based distributions. Hopefully we'll resolve this also very soon!

Regards,
François

On 13.06.22 12:39, Pascal Panneels via eduVPN-deploy wrote:
re,

ok, i've digging in it a little bit more :

when connecting to v3 server, the returned data to eduvpn-python-client is :

{"api":{"http://eduvpn.org/api#3"<http://eduvpn.org/api#3>:{"api_endpoint":"https://eduvpn-uhasselt.belnet.be/vpn-user-portal/api/v3"<https://eduvpn-uhasselt.belnet.be/vpn-user-portal/api/v3>,"authorization_endpoint":"https://eduvpn-uhasselt.belnet.be/vpn-user-portal/oauth/authorize"<https://eduvpn-uhasselt.belnet.be/vpn-user-portal/oauth/authorize>,"token_endpoint":"https://eduvpn-uhasselt.belnet.be/vpn-user-portal/oauth/token"<https://eduvpn-uhasselt.belnet.be/vpn-user-portal/oauth/token>}},"v":"3.0.1-1+bullseye+1"}

Clearly, the problem is that the eduvpn clients are not up-to-date to handle connections to eduvpn server v3 (as it looks for ... request(uri)['api']['http://eduvpn.org/api#2']).

Is that supposed to be not in sync with the release of version 3 ?

I guess, I'm now forced to turn back to version 2 to be able for my non-linux-techy users  be able to use the vpn, right ?

PP

Le 13/06/2022 à 09:03, Pascal Panneels via eduVPN-deploy a écrit :

Hi François, all,

I've installed version 3 of the server a couple of days ago on our (Belnet) server and upgraded for one of our customer (Hasselt University) this week-end.

On my Ubuntu (client) machines, I'm using NetworkManager to handle the [edu:open]vpn connexions and it works perfectly well.

I've tried to connect using the client on my iPhone. I'm adding a connexion ("+" button, search for the server (ie: University Hasselt), gets to the user authentication page, authentication my user,  and the I get a problem in the phase where I need to approve the use of the app in the server)   -see attached screenshot if it can be of any help.

I've tried the eduvpn client on Ubuntu and gets similar problem :

-8<---8<---8<---8<---8<---8<---8<---8<---8<---8<---8<---8<---8<--

pep at pep-laptop:~$ eduvpn-cli search hasselt

...

Institute access:
[92] Hasselt University

pep at pep-laptop:~$ eduvpn-cli interactive

> 92

INFO:/usr/lib/python3/dist-packages/eduvpn/actions.py:starting procedure with auth_url https://eduvpn-uhasselt.belnet.be/
INFO:/usr/lib/python3/dist-packages/eduvpn/actions.py:token exists, restoring
INFO:eduvpn.remote:Requesting https://eduvpn-uhasselt.belnet.be/.well-known/vpn-user-portal
Traceback (most recent call last):
  File "/usr/bin/eduvpn-cli", line 33, in <module>
    sys.exit(load_entry_point('eduvpn-client==2.2.1', 'console_scripts', 'eduvpn-cli')())
  File "/usr/lib/python3/dist-packages/eduvpn/cli.py", line 139, in eduvpn
    parse_eduvpn(argv[1:])
  File "/usr/lib/python3/dist-packages/eduvpn/cli.py", line 105, in parse_eduvpn
    parsed.func(parsed)
  File "/usr/lib/python3/dist-packages/eduvpn/cli.py", line 67, in interactive
    enroll(auth_url, display_name, support_contact, secure_internets, interactive=True)
  File "/usr/lib/python3/dist-packages/eduvpn/cli.py", line 42, in enroll
    api_url, oauth, token_endpoint, auth_endpoint = actions.fetch_token(auth_url)
  File "/usr/lib/python3/dist-packages/eduvpn/actions.py", line 68, in fetch_token
    api_url, token_endpoint, auth_endpoint = get_info(auth_url)
  File "/usr/lib/python3/dist-packages/eduvpn/remote.py", line 89, in get_info
    info = get_full_info(base_uri)
  File "/usr/lib/python3/dist-packages/eduvpn/remote.py", line 85, in get_full_info
    return request(uri)['api']['http://eduvpn.org/api#2']
KeyError: 'http://eduvpn.org/api#2'
-8<---8<---8<---8<---8<---8<---8<---8<---8<---8<---8<---8<---8<--

Any idea of the cause ?

--
*Pascal Panneels*
System Architect
Belnet - Services
WTC III
Simon Bolivarlaan 30 Boulevard Simon Bolivar
Brussel 1000 Bruxelles
België - Belgique
T: +32 2 790 33 33
*www.belnet.be <http://www.belnet.be><http://www.belnet.be>*

_______________________________________________
eduVPN-deploy mailing list
eduVPN-deploy at list.surfnet.nl<mailto:eduVPN-deploy at list.surfnet.nl>
https://list.surfnet.nl/mailman/listinfo/eduvpn-deploy
--
*Pascal Panneels*
System Architect
Belnet - Services
WTC III
Simon Bolivarlaan 30 Boulevard Simon Bolivar
Brussel 1000 Bruxelles
België - Belgique
T: +32 2 790 33 33
*www.belnet.be <http://www.belnet.be><http://www.belnet.be>*

_______________________________________________
eduVPN-deploy mailing list
eduVPN-deploy at list.surfnet.nl<mailto:eduVPN-deploy at list.surfnet.nl>
https://list.surfnet.nl/mailman/listinfo/eduvpn-deploy

--
Pascal Panneels
System Architect
Belnet - Services
WTC III
Simon Bolivarlaan 30 Boulevard Simon Bolivar
Brussel 1000 Bruxelles
België - Belgique
T: +32 2 790 33 33
www.belnet.be<http://www.belnet.be>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://list.surfnet.nl/pipermail/eduvpn-deploy/attachments/20220613/4dab3df9/attachment.html>