Tunnelblick asking for password to create shadow copy EVERY time in connect

1,279 views

Skip to first unread message

Bernd Bread

unread,

Oct 6, 2013, 11:45:42 AM10/6/13

to tunnelbli...@googlegroups.com

Hi there,

I have a VPN connection to my university set up in Tunnelblick. It works fine EXCEPT that Tunnelblick asks for my password to create shadow copies (so it says) every single time it starts the VPN connection. I have not found any information on how to remedy this and would very much appreciate your help. I hope I have attached all the necessary files; please let me know if anything is missing.

Thanks in advance, and best wishes!

config.txt

console.txt

protocol.txt

jkbull...gmail.com

unread,

Oct 6, 2013, 11:59:55 AM10/6/13

to tunnelbli...@googlegroups.com

Thanks for posting all the information.

You need to change the line

log openvpn.log

in your OpenVPN configuration file to

#log openvpn.log

so OpenVPN does not create a log file.

Explanation: Tunnelblick takes care of the logging. By having this line in the configuration file, you cause OpenVPN to create a log file whenever you make a connection. The log file is created within the Tunnelblick VPN Configuration. Each time you connect, Tunnelblick checks to make sure the Tunnelblick VPN Configuration has not changed. Since it has changed (because of the log file), it asks you for your password to update it.

Bernd Bread

unread,

Oct 7, 2013, 4:18:53 PM10/7/13

to tunnelbli...@googlegroups.com

Great - many, many thanks for this!!!

mso...@gmail.com

unread,

Oct 30, 2013, 6:32:11 PM10/30/13

to tunnelbli...@googlegroups.com

By using this answer I was able to find a solution to my problem. I had a line like this in one of my configurations:

status openvpn-status.log

Having seen your answer, it seemed likely this was doing the same thing. I commented it out, and no more shadow copy prompts! Woohoo!

It might be a good idea to add this as a FAQ or put it somewhere in the docs that a search for "shadow copy" will find it.

Thanks for saving me hundreds of future password entries!

mike

jkbull...gmail.com

unread,

Nov 1, 2013, 1:47:38 PM11/1/13

to tunnelbli...@googlegroups.com

I have committed changes to the source code as r2556 and r2557 that complain if the following problematic OpenVPN options do not refer to the file they are to write to using an absolute path:

log
log-append
replay-persist
status
write-pid

Tunnelblick could actually examine the path of the file and allow the option if the file is outside of the .tblk, but even that isn't foolproof -- it could refer to a file that is in another .tblk, for example -- or anywhere. But usually the path is just a filename (indeed, the OpenPVN man page calls it a "file"), so this should catch most problems but still allow the use of these options.

philli...@gmail.com

unread,

Oct 23, 2016, 10:08:27 PM10/23/16

to tunnelblick-discuss

Hi, i'm having some issues with this error message as well. it happened after i accidentally uninstallled tunnelblick (4639 or some other numbers). below is the diagnostic info. i think i deleted the configuration file... i'm not super tech savvy. Anyway your help would be appreciated.

*Tunnelblick: OS X 10.10.5; Tunnelblick 3.6.9beta01 (build 4651); Admin user

git commit 1cc618e816eb8f7d8834c890ebeb41ddeda88650

Configuration Sweden

"Sanitized" condensed configuration file for /Users/philliplsalem/Library/Application Support/Tunnelblick/Configurations/Sweden.tblk:

(No configuration file found or configuration file could not be sanitized. See the Console Log for details.)

================================================================================

Non-Apple kexts that are loaded:

Index Refs Address Size Wired Name (Version) <Linked Against>

138 0 0xffffff7f830e5000 0x3000 0x3000 com.avast.PacketForwarder (2.1) <4 1>

139 0 0xffffff7f830e8000 0x8000 0x8000 com.avast.AvastFileShield (3.0.0) <5 4 1>

================================================================================

There are no unusual files in Sweden.tblk

================================================================================

Configuration preferences:

================================================================================

Wildcard preferences:

================================================================================

Program preferences:

connectionWindowDisplayCriteria = showWhenConnecting

maxLogDisplaySize = 102400

keyboardShortcutIndex = 1

NSWindow Frame SettingsSheetWindow = 580 353 829 524 0 0 1440 877

detailsWindowFrameVersion = 4651

detailsWindowFrame = {{507, 410}, {920, 467}}

detailsWindowLeftFrame = {{0, 0}, {165, 350}}

detailsWindowViewIndex = 0

detailsWindowConfigurationsTabIdentifier = log

leftNavSelectedDisplayName = Sweden

AdvancedWindowTabIdentifier = connectingAndDisconnecting

SULastCheckTime = 2016-10-24 01:51:32 +0000

WebKitDefaultFontSize = 16

WebKitStandardFont = Times

================================================================================

Tunnelblick Log:

*Tunnelblick: OS X 10.10.5; Tunnelblick 3.6.9beta01 (build 4651)

================================================================================

"Sanitized" full configuration file

(No configuration file found or configuration file could not be sanitized. See the Console Log for details.)

================================================================================

ifconfig output:

lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384

options=3<RXCSUM,TXCSUM>

inet6 ::1 prefixlen 128

inet 127.0.0.1 netmask 0xff000000

inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1

nd6 options=1<PERFORMNUD>

gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280

stf0: flags=0<> mtu 1280

en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

ether b8:f6:b1:19:a4:e5

inet 192.168.1.14 netmask 0xffffff00 broadcast 192.168.1.255

inet6 fe80::baf6:b1ff:fe19:a4e5%en0 prefixlen 64 duplicated scopeid 0x4

nd6 options=9<PERFORMNUD,IFDISABLED>

media: autoselect

status: active

en1: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=60<TSO4,TSO6>

ether 32:00:13:ec:60:40

media: autoselect <full-duplex>

status: inactive

en2: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500

options=60<TSO4,TSO6>

ether 32:00:13:ec:60:41

media: autoselect <full-duplex>

status: inactive

bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500

options=63<RXCSUM,TXCSUM,TSO4,TSO6>

ether ba:f6:b1:91:af:00

Configuration:

id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0

maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200

root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0

ipfilter disabled flags 0x2

member: en1 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 5 priority 0 path cost 0

member: en2 flags=3<LEARNING,DISCOVER>

ifmaxaddr 0 port 6 priority 0 path cost 0

nd6 options=1<PERFORMNUD>

media: <unknown type>

status: inactive

p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304

ether 0a:f6:b1:19:a4:e5

media: autoselect

status: inactive

awdl0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1452

ether 22:55:6a:b0:89:cf

inet6 fe80::2055:6aff:feb0:89cf%awdl0 prefixlen 64 scopeid 0x9

nd6 options=1<PERFORMNUD>

media: autoselect

status: active

utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380

inet6 fe80::7852:df06:be0f:edfd%utun0 prefixlen 64 scopeid 0xa

inet6 fd81:6fdd:2c06:88bc:7852:df06:be0f:edfd prefixlen 64

nd6 options=1<PERFORMNUD>

================================================================================

Console Log:

2016-10-24 11:14:42 tunnelblickd[3438] Status = 1 from tunnelblick-helper command 'printSanitizedConfigurationFile AU Melbourne.tblk 0'

2016-10-24 11:14:42 Tunnelblick[1883] tunnelblickd status from printSanitizedConfigurationFile: 1

2016-10-24 11:14:42 Tunnelblick[1883] Internal failure (1) of openvpnstart printSanitizedConfigurationFile AU Melbourne.tblk 0