NetworkManager fortivpn not working

Hello,
I have installed a 39 , total fresh install, only updates.
I want to connect to a Forti VPN, from CLI openfortivpn, everything works.
From Networkmanager Forti, set up the server, set cert.
When connect, the following is on the log:

Apr 05 10:30:53 workstation NetworkManager[1749]: <info> [1712305853.8669] device (ppp0): state change: unmanaged -> unavailable (reason 'connection-assumed', sys-iface-state: 'external')
Apr 05 10:30:53 workstation NetworkManager[1749]: <info> [1712305853.8680] device (ppp0): state change: unavailable -> disconnected (reason 'none', sys-iface-state: 'external')
Apr 05 10:30:53 workstation pppd[5657]: Can't execute /etc/ppp/ip-up: Permission denied
Apr 05 10:30:53 workstation NetworkManager[5657]: Can't execute /etc/ppp/ip-up: Permission denied
Apr 05 10:30:53 workstation systemd[1]: Starting NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service...
Apr 05 10:30:53 workstation systemd[1]: Started NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service.

After 5 minute, disconnects:

Apr 05 10:35:53 workstation NetworkManager[5656]: INFO: Cancelling threads...
Apr 05 10:35:53 workstation NetworkManager[5656]: INFO: Cleanup, joining threads...
Apr 05 10:35:53 workstation audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 05 10:35:53 workstation pppd[5657]: Hangup (SIGHUP)
Apr 05 10:35:53 workstation NetworkManager[5656]: INFO: Setting ppp0 interface down.
Apr 05 10:35:53 workstation NetworkManager[1749]: <info> [1712306153.7697] device (ppp0): state change: disconnected -> unmanaged (reason 'unmanaged', sys-iface-state: 'removed')
Apr 05 10:35:53 workstation pppd[5657]: Modem hangup
Apr 05 10:35:53 workstation NetworkManager[5657]: Hangup (SIGHUP)
Apr 05 10:35:53 workstation NetworkManager[5657]: Modem hangup
Apr 05 10:35:53 workstation NetworkManager[5657]: Connect time 5.0 minutes.
Apr 05 10:35:53 workstation NetworkManager[5657]: Sent 26212 bytes, received 0 bytes.
Apr 05 10:35:53 workstation NetworkManager[5657]: ioctl(SIOCSIFFLAGS): Operation not permitted (line 3187)
Apr 05 10:35:53 workstation NetworkManager[5657]: ioctl(SIOCSIFADDR): Operation not permitted (line 3339)
Apr 05 10:35:53 workstation NetworkManager[5657]: Can't execute /etc/ppp/ip-down: Permission denied
Apr 05 10:35:53 workstation NetworkManager[5657]: Connection terminated.
Apr 05 10:35:53 workstation NetworkManager[5657]: unable to delete pid file /run/pppdppp0.pid: Permission denied
Apr 05 10:35:53 workstation systemd[1]: Starting NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service...
Apr 05 10:35:53 workstation pppd[5657]: Connect time 5.0 minutes.
Apr 05 10:35:53 workstation NetworkManager[5656]: INFO: pppd: The link was terminated by the modem hanging up.
Apr 05 10:35:53 workstation NetworkManager[5656]: INFO: Terminated pppd.
Apr 05 10:35:53 workstation NetworkManager[5656]: INFO: Closed connection to gateway.
Apr 05 10:35:53 workstation systemd[1]: Started NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service.
Apr 05 10:35:53 workstation pppd[5657]: Sent 26212 bytes, received 0 bytes.
Apr 05 10:35:53 workstation pppd[5657]: ioctl(SIOCSIFFLAGS): Operation not permitted (line 3187)
Apr 05 10:35:53 workstation pppd[5657]: ioctl(SIOCSIFADDR): Operation not permitted (line 3339)
Apr 05 10:35:53 workstation pppd[5657]: Can't execute /etc/ppp/ip-down: Permission denied
Apr 05 10:35:53 workstation pppd[5657]: Connection terminated.
Apr 05 10:35:53 workstation pppd[5657]: unable to delete pid file /run/pppdppp0.pid: Permission denied
Apr 05 10:35:53 workstation pppd[5657]: Exit.
Apr 05 10:35:53 workstation NetworkManager[5656]: INFO: Logged out.
Apr 05 10:36:03 workstation systemd[1]: NetworkManager-dispatcher.service: Deactivated successfully.

I checked the script , it can be executed as non-root user, so i dont thinks its a permission problem.

$ bash /etc/ppp/ip-up
Argument 1 is empty but should contain interface name - skip IPv6to4 initialization

What can be the problem?
SELinux is permissive.
ppp-2.5.0-3.fc39.x86_64
openfortivpn-1.21.0-2.fc39.x86_64
kernel 6.7.11-200.fc39.x86_64

Thank you for your help!

Somewhat unrelated to openfortivpn, I had problems with 2FA while using NetworkManager-openfortivpn and switched to NetworkManager-openconnect to connect to Fortinet SSL VPN and it works fine.

1 Like