{"action":"created","issue":{"url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/12","repository_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp","labels_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/12/labels{/name}","comments_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/12/comments","events_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/12/events","html_url":"https://github.com/nm-l2tp/network-manager-l2tp/issues/12","id":162823303,"number":12,"title":"Ubuntu and Debian known issues","user":{"login":"dkosovic","id":2002761,"avatar_url":"https://avatars.githubusercontent.com/u/2002761?v=3","gravatar_id":"","url":"https://api.github.com/users/dkosovic","html_url":"https://github.com/dkosovic","followers_url":"https://api.github.com/users/dkosovic/followers","following_url":"https://api.github.com/users/dkosovic/following{/other_user}","gists_url":"https://api.github.com/users/dkosovic/gists{/gist_id}","starred_url":"https://api.github.com/users/dkosovic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkosovic/subscriptions","organizations_url":"https://api.github.com/users/dkosovic/orgs","repos_url":"https://api.github.com/users/dkosovic/repos","events_url":"https://api.github.com/users/dkosovic/events{/privacy}","received_events_url":"https://api.github.com/users/dkosovic/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"dkosovic","id":2002761,"avatar_url":"https://avatars.githubusercontent.com/u/2002761?v=3","gravatar_id":"","url":"https://api.github.com/users/dkosovic","html_url":"https://github.com/dkosovic","followers_url":"https://api.github.com/users/dkosovic/followers","following_url":"https://api.github.com/users/dkosovic/following{/other_user}","gists_url":"https://api.github.com/users/dkosovic/gists{/gist_id}","starred_url":"https://api.github.com/users/dkosovic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkosovic/subscriptions","organizations_url":"https://api.github.com/users/dkosovic/orgs","repos_url":"https://api.github.com/users/dkosovic/repos","events_url":"https://api.github.com/users/dkosovic/events{/privacy}","received_events_url":"https://api.github.com/users/dkosovic/received_events","type":"User","site_admin":false},"assignees":[{"login":"dkosovic","id":2002761,"avatar_url":"https://avatars.githubusercontent.com/u/2002761?v=3","gravatar_id":"","url":"https://api.github.com/users/dkosovic","html_url":"https://github.com/dkosovic","followers_url":"https://api.github.com/users/dkosovic/followers","following_url":"https://api.github.com/users/dkosovic/following{/other_user}","gists_url":"https://api.github.com/users/dkosovic/gists{/gist_id}","starred_url":"https://api.github.com/users/dkosovic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkosovic/subscriptions","organizations_url":"https://api.github.com/users/dkosovic/orgs","repos_url":"https://api.github.com/users/dkosovic/repos","events_url":"https://api.github.com/users/dkosovic/events{/privacy}","received_events_url":"https://api.github.com/users/dkosovic/received_events","type":"User","site_admin":false}],"milestone":null,"comments":2,"created_at":"2016-06-29T01:37:11Z","updated_at":"2016-07-27T06:37:13Z","closed_at":null,"body":"## Package prerequisites for building and running\r\nIssue the following on the command-line to install the prerequisite packages (note: the backslash character `\\` is the shell line continuation character and is safe to copy and paste) :\r\n\r\n```sh\r\nsudo apt install \\\r\nintltool \\\r\nlibtool \\\r\nnetwork-manager-dev \\\r\nlibnm-util-dev \\\r\nlibnm-glib-dev \\\r\nlibnm-glib-vpn-dev \\\r\nlibnm-gtk-dev \\\r\nlibnm-dev \\\r\nlibnma-dev \\\r\nppp-dev \\\r\nlibdbus-glib-1-dev \\\r\nlibsecret-1-dev \\\r\nlibgtk-3-dev \\\r\nlibglib2.0-dev \\\r\nxl2tpd \\\r\nstrongswan\r\n```\r\n\r\n## NetworkManager on Ubuntu 16.04\r\n\r\nUbuntu 16.04 originally shipped with _network-manager-1.1.93_ (a developer release-candidate version of NetworkManager 1.2), which amongst other things, required the NetworkManager-l2tp  `--enable-absolute-paths` configure switch.\r\n\r\nOn Ubuntu 16.04, it is recommended to upgrade the _network-manager_ package to version 1.2.0 or later.\r\n\r\n## IPsec\r\nstrongSwan's  `charon` and `stroke` daemons are prevented from performing correctly as child processes under NetworkManager-l2tp due to an [AppArmor name space issue involving NetworkManager ](https://bugs.launchpad.net/bugs/1587886) and the AppArmor profiles for `charon` and `stroke`.\r\n\r\nCurrently the simplest workaround is to disable two strongSwan AppArmor profiles :\r\n```sh\r\nsudo apparmor_parser -R /etc/apparmor.d/usr.lib.ipsec.charon\r\nsudo apparmor_parser -R /etc/apparmor.d/usr.lib.ipsec.stroke\r\n```\r\n## L2TP\r\nIn some situations a L2TP connection isn't able to be established with the system xl2tpd package, while it can be established with a locally built xl2tpd installed to /usr/local/ :\r\n```\r\nsudo apt remove xl2tpd\r\nsudo apt install libpcap0.8-dev\r\n\r\nwget https://github.com/xelerance/xl2tpd/archive/v1.3.6/xl2tpd-1.3.6.tar.gz\r\ntar xvzf xl2tpd-1.3.6.tar.gz\r\ncd xl2tpd-1.3.6\r\nmake\r\nsudo make install\r\n```\r\n\r\n### Debugging\r\n\r\nIssuing `sudo journalctl -b`  on the command-line may provide hints for the cause of AppArmor, strongSwan and xl2tpd issues.\r\n"},"comment":{"url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/comments/235499557","html_url":"https://github.com/nm-l2tp/network-manager-l2tp/issues/12#issuecomment-235499557","issue_url":"https://api.github.com/repos/nm-l2tp/network-manager-l2tp/issues/12","id":235499557,"user":{"login":"dkosovic","id":2002761,"avatar_url":"https://avatars.githubusercontent.com/u/2002761?v=3","gravatar_id":"","url":"https://api.github.com/users/dkosovic","html_url":"https://github.com/dkosovic","followers_url":"https://api.github.com/users/dkosovic/followers","following_url":"https://api.github.com/users/dkosovic/following{/other_user}","gists_url":"https://api.github.com/users/dkosovic/gists{/gist_id}","starred_url":"https://api.github.com/users/dkosovic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkosovic/subscriptions","organizations_url":"https://api.github.com/users/dkosovic/orgs","repos_url":"https://api.github.com/users/dkosovic/repos","events_url":"https://api.github.com/users/dkosovic/events{/privacy}","received_events_url":"https://api.github.com/users/dkosovic/received_events","type":"User","site_admin":false},"created_at":"2016-07-27T06:37:13Z","updated_at":"2016-07-27T06:37:13Z","body":"Been waiting for the AppArmor fix and want to incorporate a compatibility fix for older IPsec VPN servers than only support weak cyphers that are no longer included with the strongSwan default proposal before doing a PPA. Maybe in the next couple of weeks.\r\n\r\nI'm hoping to eventually submit a package to Debian so it makes it to all the Debian derivatives including Ubuntu."}}
{"actor":{"display_login":"dkosovic"}}