failure reconnecting after network change/drop
586 views
Skip to first unread message
alias...@gmail.com
Sep 19, 2016, 1:24:07 PM9/19/16
to tunnelblick-discuss
I've found a number of threads on this topic, most relevant being: https://groups.google.com/forum/#!searchin/tunnelblick-discuss/Cannot$20resolve$20host$20address|sort:relevance/tunnelblick-discuss/yk5ryxCFAUE/oPQcm2Su8icJ (I think)
I'm hoping that some combination of configuration settings will change this behavior for me (and also the other users at my work).
Basic description:
1) Tunnelblick connects and works reliably until...
2) Network change or drop
3) Network reconnects, but tunnelblick/openvpn is not happy and all internet and internal network traffic fails
My understanding is that this has to do with DNS stuff, but I'm hesitant to start messing with my settings (on the network adapter level) without really understanding what should be going on with the VPN. Does anyone have advice for this situation?
I will try to include as much info as possible, here is the most relevant log section:
I'm hoping that some combination of configuration settings will change this behavior for me (and also the other users at my work).
Basic description:
1) Tunnelblick connects and works reliably until...
2) Network change or drop
3) Network reconnects, but tunnelblick/openvpn is not happy and all internet and internal network traffic fails
My understanding is that this has to do with DNS stuff, but I'm hesitant to start messing with my settings (on the network adapter level) without really understanding what should be going on with the VPN. Does anyone have advice for this situation?
I will try to include as much info as possible, here is the most relevant log section:
2016-09-19 10:40:20 us=854975 write UDPv4: Network is unreachable (code=51)
2016-09-19 10:40:20 us=990756 UDPv4 WRITE [161] to [AF_INET]104.197.75.207:1194: P_DATA_V1 kid=0 DATA len=160
2016-09-19 10:40:20 us=991212 write UDPv4: Network is unreachable (code=51)
2016-09-19 10:40:27 *Tunnelblick process-network-changes: ServerAddresses changed from
* <array> {
* 0 : 10.240.41.12
* }
* to
*
* pre-VPN was
* <array> {
* 0 : 10.0.1.1
* }
2016-09-19 10:40:27 *Tunnelblick process-network-changes: SearchDomains changed from
* <array> {
* 0 : c.mycompany.internal
* }
* to (pre-VPN)
*
2016-09-19 10:40:27 *Tunnelblick process-network-changes: DomainName changed from
* c.mycompany.internal
* to (pre-VPN)
*
2016-09-19 10:40:27 *Tunnelblick process-network-changes: ServerAddresses changed; sending USR1 to OpenVPN (process ID 27235) to restart the connection.
2016-09-19 10:40:28 *Tunnelblick: No 'reconnecting.sh' script to execute
2016-09-19 10:40:28 us=208001 event_wait : Interrupted system call (code=4)
2016-09-19 10:40:28 us=215374 TCP/UDP: Closing socket
2016-09-19 10:40:28 us=215761 SIGUSR1[hard,] received, process restarting
2016-09-19 10:40:28 us=215893 MANAGEMENT: >STATE:1474296028,RECONNECTING,SIGUSR1,,
2016-09-19 10:40:28 us=539077 MANAGEMENT: CMD 'hold release'
2016-09-19 10:40:28 us=539288 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2016-09-19 10:40:28 us=539465 Re-using SSL/TLS context
2016-09-19 10:40:28 us=539683 LZO compression initialized
2016-09-19 10:40:28 us=539933 Control Channel MTU parms [ L:1602 D:1140 EF:110 EB:0 ET:0 EL:3 ]
2016-09-19 10:40:28 us=540129 Socket Buffers: R=[196724->196724] S=[9216->9216]
2016-09-19 10:40:28 us=540286 MANAGEMENT: >STATE:1474296028,RESOLVE,,,
2016-09-19 10:40:28 us=545082 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:40:28 us=545198 Data Channel MTU parms [ L:1602 D:1450 EF:102 EB:143 ET:0 EL:3 AF:3/1 ]
2016-09-19 10:40:28 us=545286 Local Options String: 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client'
2016-09-19 10:40:28 us=545372 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1602,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server'
2016-09-19 10:40:28 us=545719 Local Options hash (VER=V4): 'a5d50645'
2016-09-19 10:40:28 us=545911 Expected Remote Options hash (VER=V4): '14d315e7'
2016-09-19 10:40:28 us=546030 MANAGEMENT: >STATE:1474296028,RESOLVE,,,
2016-09-19 10:40:28 us=547048 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:40:33 us=551879 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:40:38 us=556731 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:40:43 us=577913 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:40:48 us=581838 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:40:55 *Tunnelblick process-network-changes: A system configuration change was ignored
2016-09-19 10:41:23 us=622468 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:41:58 us=669878 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:42:33 us=687333 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:43:08 us=703822 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:43:43 us=721934 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:44:18 us=738756 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:44:53 us=755304 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:45:28 us=772817 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:46:03 us=788863 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:46:38 us=808791 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:47:13 us=823033 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:47:48 us=848783 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:48:23 us=866884 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:48:58 us=933358 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:49:33 us=941381 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:50:09 us=29 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:50:44 us=80938 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:51:19 us=118552 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
2016-09-19 10:51:54 us=205246 RESOLVE: Cannot resolve host address: vpn0.mycompany.com: nodename nor servname provided, or not known
---diagnostic output---
Configuration preferences:
-resetPrimaryInterfaceAfterDisconnect = 1
-useRouteUpInsteadOfUp = 1
-keychainHasPrivateKey = 1
-loadTun =
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-keepConnected = 1
-loggingLevel = 6
-lastConnectionSucceeded = 1
================================================================================
Wildcard preferences:
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
================================================================================
Program preferences:
skipWarningThatIPAddressDidNotChangeAfterConnection = 1
placeIconInStandardPositionInStatusBar = 1
launchAtNextLogin = 1
notOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
"3.6.7 (build 4602)",
"3.6.6 (build 4582)",
"3.6.5 (build 4566)",
"3.6.4a (build 4561)"
)
statusDisplayNumber = 0
lastLaunchTime = 495987736.244568
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
lastConnectedDisplayName = vpn0.michael
keyboardShortcutIndex = 1
updateCheckAutomatically = 1
updateSendProfileInfo = 1
NSWindow Frame ConnectingWindow = 525 536 389 187 0 0 1440 877
detailsWindowFrameVersion = 4582
detailsWindowFrame = {{520, 409}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = settings
leftNavSelectedDisplayName = vpn0.michael
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
SUEnableAutomaticChecks = 1
SUFeedURL = https://www.tunnelblick.net/appcast-s.rss
SUScheduledCheckInterval = 86400
SUSendProfileInfo = 1
SULastCheckTime = 2016-09-19 14:22:17 +0000
SULastProfileSubmissionDate = 2016-09-12 16:51:53 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 11
WebKitStandardFont = .AppleSystemUIFont
tunnelblickdHash = 004cdba8e08abd144bc48409040bc80e29c12ee9741ed7d73754f51d2547f7ea
tunnelblickdPlistHash = ce400d395d1801b003398461b5420021f4d591822783a04b79b2f43956d28620
================================================================================
Tunnelblick Log:
================================================================================
"Sanitized" full configuration file
client
dev tun
proto udp
remote vpn0.mycompany.com 1194
resolv-retry infinite
nobind
remote-cert-tls server
persist-key
persist-tun
comp-lzo
verb 3
tls-auth ta.key 1
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA
auth SHA512
link-mtu 1602
cipher AES-256-CBC
keysize 256
<ca>
[Security-related line(s) omitted]
</ca>
<cert>
[Security-related line(s) omitted]
</cert>
<key>
[Security-related line(s) omitted]
</key>
Tunnelblick developer
Sep 19, 2016, 2:02:14 PM9/19/16
to tunnelblick-discuss, alias...@gmail.com
You can control what Tunnelblick does (if you are using the default "Set nameserver" setting) on the "While Connected" tab of the "Advanced" window.
To get to that window:
- Launch Tunnelblick, click on the Tunnelblick icon, and click on "VPN Details..."
- In the new window, click on the "Configurations" tab
- Select the configuration(s) that you want to modify in the list on the left side
- Click on the "Settings" tab
- Click on the "Advanced" button
In the "Advanced" window, click on the "While Connected" tab and make whatever adjustments you need to. You might need to "Restart" instead of "Restore", for example.
(It is usually more helpful to include the entire "diagnostic info", instead of the pieces of it that you posted. If you need more help, that would be a good idea. Edit out private information, of course.)
alias...@gmail.com
Sep 19, 2016, 2:22:50 PM9/19/16
to tunnelblick-discuss, alias...@gmail.com
Thanks so much for your help! Yes I understand that having 'the whole' rather than what I think is relevant is better, but I don't know enough to know what is private/dangerous info to share on a public forum like this, and what isn't. That said, I want to be providing the necessary info, so I'll past that below.
I tried updating the settings to 'Restart' instead of 'Restore' for everything, but I was surprised that that didn't work. I reproduced the problem and grabbed the diagnostic info again.
Do you have any more thoughts on this?
Do you have any more thoughts on this?
*Tunnelblick: OS X 10.11.5; Tunnelblick 3.6.7 (build 4602); prior version 3.6.6 (build 4582); Admin user
git commit 6505e35d5b3725156bbf24254c3158dfe204e622
Configuration vpn0.michael
"Sanitized" condensed configuration file for /Users/mwebber/Library/Application Support/Tunnelblick/Configurations/vpn0.michael.tblk:
================================================================================
Non-Apple kexts that are loaded:
Index Refs Address Size Wired Name (Version) UUID <Linked Against>
================================================================================
There are no unusual files in vpn0.michael.tblk
================================================================================
Configuration preferences:
-resetPrimaryInterfaceAfterDisconnect = 1
-useRouteUpInsteadOfUp = 0
-keychainHasPrivateKey = 1
-loadTun =
-notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
-keepConnected = 1
-loggingLevel = 10
-changeDNSServersAction = restart
-changeDomainAction = restart
-changeSearchDomainAction = restart
-changeWINSServersAction = restart
-changeNetBIOSNameAction = restart
-changeWorkgroupAction = restart
NSWindow Frame SettingsSheetWindow = 1851 110 829 524 1440 -252 2048 1129
NSWindow Frame ConnectingWindow = 525 536 389 187 0 0 1440 877
detailsWindowFrameVersion = 4602
detailsWindowFrame = {{2004, -14}, {1182, 725}}
detailsWindowLeftFrame = {{0, 0}, {215, 607}}
================================================================================
ifconfig output:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=3<RXCSUM,TXCSUM>
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=1<PERFORMNUD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8823<UP,BROADCAST,SMART,SIMPLEX,MULTICAST> mtu 1500
ether c8:69:cd:9b:ce:9a
media: autoselect (<unknown type>)
status: inactive
en1: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
options=60<TSO4,TSO6>
ether 9a:00:05:27:1d:30
media: autoselect <full-duplex>
status: inactive
p2p0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 2304
ether 0a:69:cd:9b:ce:9a
media: autoselect
status: inactive
awdl0: flags=8902<BROADCAST,PROMISC,SIMPLEX,MULTICAST> mtu 1484
ether fa:b4:b9:00:75:92
nd6 options=1<PERFORMNUD>
media: autoselect
status: inactive
bridge0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether ca:69:cd:b9:76:00
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en1 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 5 priority 0 path cost 0
media: <unknown type>
status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500
inet 10.8.0.26 --> 10.8.0.25 netmask 0xffffffff
en3: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=4<VLAN_MTU>
ether a0:ce:c8:06:fc:16
inet 10.0.1.40 netmask 0xffffff00 broadcast 10.0.1.255
media: autoselect (100baseTX <full-duplex>)
status: active
================================================================================
Console Log:
2016-09-19 10:21:33 Tunnelblick[27171] Tunnelblick: OS X 10.11.5; Tunnelblick 3.6.6 (build 4582)
2016-09-19 10:21:34 Tunnelblick[27171] Set program update feedURL to https://www.tunnelblick.net/appcast-s.rss
2016-09-19 10:21:34 Tunnelblick[27171] Error returned from setAttributes: {
NSFilePosixPermissions = 448;
} ofItemAtPath: /Users/mwebber/Library/LaunchAgents; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “LaunchAgents” in the folder “Library”." UserInfo={NSFilePath=/Users/mwebber/Library/LaunchAgents, NSUnderlyingError=0x10040e720 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (
0 Tunnelblick 0x000000010003b946 -[NSFileManager(TB) tbChangeFileAttributes:atPath:] + 161
1 Tunnelblick 0x0000000100075bea createDir + 303
2 Tunnelblick 0x000000010002b38b -[NSApplication(LoginItem) setupNewAutoLaunchOnLogin] + 282
3 Tunnelblick 0x000000010001ce51 -[MenuController applicationDidFinishLaunching:] + 206
4 CoreFoundation 0x00007fff8f983bbc __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ + 12
5 CoreFoundation 0x00007fff8f983b4f ___CFXRegistrationPost_block_invoke + 63
6 CoreFoundation 0x00007fff8f983ac7 _CFXRegistrationPost + 407
7 CoreFoundation 0x00007fff8f983832 ___CFXNotificationPost_block_invoke + 50
8 CoreFoundation 0x00007fff8f9405e2 -[_CFXNotificationRegistrar find:object:observer:enumerator:] + 1922
9 CoreFoundation 0x00007fff8f93f835 _CFXNotificationPost + 693
10 Foundation 0x00007fff8305017a -[NSNotificationCenter postNotificationName:object:userInfo:] + 66
11 AppKit 0x00007fff870a7355 -[NSApplication _postDidFinishNotification] + 297
12 AppKit 0x00007fff870a70bf -[NSApplication _sendFinishLaunchingNotification] + 203
13 AppKit 0x00007fff86f61d99 -[NSApplication(NSAppleEventHandling) _handleAEOpenEvent:] + 557
14 AppKit 0x00007fff86f61843 -[NSApplication(NSAppleEventHandling) _handleCoreEvent:withReplyEvent:] + 250
15 Foundation 0x00007fff8309e72d -[NSAppleEventManager dispatchRawAppleEvent:withRawReply:handlerRefCon:] + 290
16 Foundation 0x00007fff8309e5a7 _NSAppleEventManagerGenericHandler + 102
17 AE 0x00007fff87e8b261 _Z20aeDispatchAppleEventPK6AEDescPS_jPh + 531
18 AE 0x00007fff87e8afe8 _ZL25dispatchEventAndSendReplyPK6AEDescPS_ + 31
19 AE 0x00007fff87e8af04 aeProcessAppleEvent + 288
20 HIToolbox 0x00007fff89545af9 AEProcessAppleEvent + 55
21 AppKit 0x00007fff86f5d290 _DPSNextEvent + 2245
22 AppKit 0x00007fff86f5c226 -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
23 AppKit 0x00007fff86f50d80 -[NSApplication run] + 682
24 AppKit 0x00007fff86f1a368 NSApplicationMain + 1176
25 Tunnelblick 0x00000001000013c8 start + 52
26 ??? 0x0000000000000001 0x0 + 1
)
2016-09-19 10:21:34 Tunnelblick[27171] Warning: Unable to change permissions from 755 to 700 on /Users/mwebber/Library/LaunchAgents
2016-09-19 10:21:34 Tunnelblick[27171] open on /Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist: Permission denied
2016-09-19 10:21:34 Tunnelblick[27171] Error returned from copyItemAtPath: /Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist toPath: /Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist; Error was Error Domain=NSCocoaErrorDomain Code=513 "“net.tunnelblick.tunnelblick.LaunchAtLogin.plist” couldn’t be copied because you don’t have permission to access “LaunchAgents”." UserInfo={NSSourceFilePathErrorKey=/Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, NSUserStringVariant=(
Copy
), NSDestinationFilePath=/Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, NSFilePath=/Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, NSUnderlyingError=0x1004ede20 {Error Domain=NSPOSIXErrorDomain Code=13 "Permission denied"}}; stack trace: (
0 Tunnelblick 0x000000010003ba42 -[NSFileManager(TB) tbCopyPath:toPath:handler:] + 161
1 Tunnelblick 0x000000010002b3ad -[NSApplication(LoginItem) setupNewAutoLaunchOnLogin] + 316
2 Tunnelblick 0x000000010001ce51 -[MenuController applicationDidFinishLaunching:] + 206
3 CoreFoundation 0x00007fff8f983bbc __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ + 12
4 CoreFoundation 0x00007fff8f983b4f ___CFXRegistrationPost_block_invoke + 63
5 CoreFoundation 0x00007fff8f983ac7 _CFXRegistrationPost + 407
6 CoreFoundation 0x00007fff8f983832 ___CFXNotificationPost_block_invoke + 50
7 CoreFoundation 0x00007fff8f9405e2 -[_CFXNotificationRegistrar find:object:observer:enumerator:] + 1922
8 CoreFoundation 0x00007fff8f93f835 _CFXNotificationPost + 693
9 Foundation 0x00007fff8305017a -[NSNotificationCenter postNotificationName:object:userInfo:] + 66
10 AppKit 0x00007fff870a7355 -[NSApplication _postDidFinishNotification] + 297
11 AppKit 0x00007fff870a70bf -[NSApplication _sendFinishLaunchingNotification] + 203
12 AppKit 0x00007fff86f61d99 -[NSApplication(NSAppleEventHandling) _handleAEOpenEvent:] + 557
13 AppKit 0x00007fff86f61843 -[NSApplication(NSAppleEventHandling) _handleCoreEvent:withReplyEvent:] + 250
14 Foundation 0x00007fff8309e72d -[NSAppleEventManager dispatchRawAppleEvent:withRawReply:handlerRefCon:] + 290
15 Foundation 0x00007fff8309e5a7 _NSAppleEventManagerGenericHandler + 102
16 AE 0x00007fff87e8b261 _Z20aeDispatchAppleEventPK6AEDescPS_jPh + 531
17 AE 0x00007fff87e8afe8 _ZL25dispatchEventAndSendReplyPK6AEDescPS_ + 31
18 AE 0x00007fff87e8af04 aeProcessAppleEvent + 288
19 HIToolbox 0x00007fff89545af9 AEProcessAppleEvent + 55
20 AppKit 0x00007fff86f5d290 _DPSNextEvent + 2245
21 AppKit 0x00007fff86f5c226 -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
22 AppKit 0x00007fff86f50d80 -[NSApplication run] + 682
23 AppKit 0x00007fff86f1a368 NSApplicationMain + 1176
24 Tunnelblick 0x00000001000013c8 start + 52
25 ??? 0x0000000000000001 0x0 + 1
)
2016-09-19 10:21:34 Tunnelblick[27171] Failed to copy: /Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist to /Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist
2016-09-19 10:21:52 kernel[0] hfs: mounted Tunnelblick on device disk3s1
2016-09-19 10:21:54 kernel[0] hfs: unmount initiated on Tunnelblick on device disk3s1
2016-09-19 10:21:55 Tunnelblick[27171] updater:willInstallUpdate: Starting cleanup.
2016-09-19 10:21:55 Tunnelblick[27171] updater:willInstallUpdate: Cleanup finished.
2016-09-19 10:22:07 Tunnelblick[27171] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2016-09-19 10:22:07 Tunnelblick[27171] pthread_mutex_trylock( &cleanupMutex ) failed; status = 16, errno = 3
2016-09-19 10:22:07 Tunnelblick[27171] pthread_mutex_trylock( &cleanupMutex ) failed is normal and expected when Tunnelblick is updated
2016-09-19 10:22:07 Tunnelblick[27171] Finished shutting down Tunnelblick; allowing termination
2016-09-19 10:22:08 Tunnelblick[27210] Tunnelblick: OS X 10.11.5; Tunnelblick 3.6.7 (build 4602)
2016-09-19 10:22:08 Tunnelblick[27210] Need to replace and/or reload 'tunnelblickd'
2016-09-19 10:22:15 Tunnelblick[27210] Tunnelblick needs to:
• Complete the update
2016-09-19 10:22:15 Tunnelblick[27210] Beginning installation or repair
2016-09-19 10:22:15 authexec[27221] executing /Applications/Tunnelblick.app/Contents/Resources/installer
2016-09-19 10:22:16 Tunnelblick[27210] Installation or repair succeeded; Log:
Tunnelblick installer started 2016-09-19 10:22:15. 1 arguments: 0x0101
Replaced /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
Used launchctl to load tunnelblickd
Tunnelblick installer finished without error
2016-09-19 10:22:16 Tunnelblick[27210] Set program update feedURL to https://www.tunnelblick.net/appcast-s.rss
2016-09-19 10:22:16 Tunnelblick[27210] Error returned from setAttributes: {
NSFilePosixPermissions = 448;
} ofItemAtPath: /Users/mwebber/Library/LaunchAgents; Error was Error Domain=NSCocoaErrorDomain Code=513 "You don’t have permission to save the file “LaunchAgents” in the folder “Library”." UserInfo={NSFilePath=/Users/mwebber/Library/LaunchAgents, NSUnderlyingError=0x7ff643a94b60 {Error Domain=NSPOSIXErrorDomain Code=1 "Operation not permitted"}}; stack trace: (
0 Tunnelblick 0x0000000103982fae -[NSFileManager(TB) tbChangeFileAttributes:atPath:] + 161
1 Tunnelblick 0x00000001039bd50c createDir + 303
2 Tunnelblick 0x000000010397229f -[NSApplication(LoginItem) setupNewAutoLaunchOnLogin] + 282
3 Tunnelblick 0x0000000103963d64 -[MenuController applicationDidFinishLaunching:] + 206
4 CoreFoundation 0x00007fff8f983bbc __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ + 12
5 CoreFoundation 0x00007fff8f983b4f ___CFXRegistrationPost_block_invoke + 63
6 CoreFoundation 0x00007fff8f983ac7 _CFXRegistrationPost + 407
7 CoreFoundation 0x00007fff8f983832 ___CFXNotificationPost_block_invoke + 50
8 CoreFoundation 0x00007fff8f9405e2 -[_CFXNotificationRegistrar find:object:observer:enumerator:] + 1922
9 CoreFoundation 0x00007fff8f93f835 _CFXNotificationPost + 693
10 Foundation 0x00007fff8305017a -[NSNotificationCenter postNotificationName:object:userInfo:] + 66
11 AppKit 0x00007fff870a7355 -[NSApplication _postDidFinishNotification] + 297
12 AppKit 0x00007fff870a70bf -[NSApplication _sendFinishLaunchingNotification] + 203
13 AppKit 0x00007fff86f61d99 -[NSApplication(NSAppleEventHandling) _handleAEOpenEvent:] + 557
14 AppKit 0x00007fff86f61843 -[NSApplication(NSAppleEventHandling) _handleCoreEvent:withReplyEvent:] + 250
15 Foundation 0x00007fff8309e72d -[NSAppleEventManager dispatchRawAppleEvent:withRawReply:handlerRefCon:] + 290
16 Foundation 0x00007fff8309e5a7 _NSAppleEventManagerGenericHandler + 102
17 AE 0x00007fff87e8b261 _Z20aeDispatchAppleEventPK6AEDescPS_jPh + 531
18 AE 0x00007fff87e8afe8 _ZL25dispatchEventAndSendReplyPK6AEDescPS_ + 31
19 AE 0x00007fff87e8af04 aeProcessAppleEvent + 288
20 HIToolbox 0x00007fff89545af9 AEProcessAppleEvent + 55
21 AppKit 0x00007fff86f5d290 _DPSNextEvent + 2245
22 AppKit 0x00007fff86f5c226 -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
23 AppKit 0x00007fff86f50d80 -[NSApplication run] + 682
24 AppKit 0x00007fff86f1a368 NSApplicationMain + 1176
25 Tunnelblick 0x0000000103948558 start + 52
26 ??? 0x0000000000000001 0x0 + 1
)
2016-09-19 10:22:16 Tunnelblick[27210] Warning: Unable to change permissions from 755 to 700 on /Users/mwebber/Library/LaunchAgents
2016-09-19 10:22:16 Tunnelblick[27210] open on /Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist: Permission denied
2016-09-19 10:22:16 Tunnelblick[27210] Error returned from copyItemAtPath: /Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist toPath: /Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist; Error was Error Domain=NSCocoaErrorDomain Code=513 "“net.tunnelblick.tunnelblick.LaunchAtLogin.plist” couldn’t be copied because you don’t have permission to access “LaunchAgents”." UserInfo={NSSourceFilePathErrorKey=/Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, NSUserStringVariant=(
Copy
), NSDestinationFilePath=/Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, NSFilePath=/Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist, NSUnderlyingError=0x7ff641471670 {Error Domain=NSPOSIXErrorDomain Code=13 "Permission denied"}}; stack trace: (
0 Tunnelblick 0x00000001039830aa -[NSFileManager(TB) tbCopyPath:toPath:handler:] + 161
1 Tunnelblick 0x00000001039722c1 -[NSApplication(LoginItem) setupNewAutoLaunchOnLogin] + 316
2 Tunnelblick 0x0000000103963d64 -[MenuController applicationDidFinishLaunching:] + 206
3 CoreFoundation 0x00007fff8f983bbc __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ + 12
4 CoreFoundation 0x00007fff8f983b4f ___CFXRegistrationPost_block_invoke + 63
5 CoreFoundation 0x00007fff8f983ac7 _CFXRegistrationPost + 407
6 CoreFoundation 0x00007fff8f983832 ___CFXNotificationPost_block_invoke + 50
7 CoreFoundation 0x00007fff8f9405e2 -[_CFXNotificationRegistrar find:object:observer:enumerator:] + 1922
8 CoreFoundation 0x00007fff8f93f835 _CFXNotificationPost + 693
9 Foundation 0x00007fff8305017a -[NSNotificationCenter postNotificationName:object:userInfo:] + 66
10 AppKit 0x00007fff870a7355 -[NSApplication _postDidFinishNotification] + 297
11 AppKit 0x00007fff870a70bf -[NSApplication _sendFinishLaunchingNotification] + 203
12 AppKit 0x00007fff86f61d99 -[NSApplication(NSAppleEventHandling) _handleAEOpenEvent:] + 557
13 AppKit 0x00007fff86f61843 -[NSApplication(NSAppleEventHandling) _handleCoreEvent:withReplyEvent:] + 250
14 Foundation 0x00007fff8309e72d -[NSAppleEventManager dispatchRawAppleEvent:withRawReply:handlerRefCon:] + 290
15 Foundation 0x00007fff8309e5a7 _NSAppleEventManagerGenericHandler + 102
16 AE 0x00007fff87e8b261 _Z20aeDispatchAppleEventPK6AEDescPS_jPh + 531
17 AE 0x00007fff87e8afe8 _ZL25dispatchEventAndSendReplyPK6AEDescPS_ + 31
18 AE 0x00007fff87e8af04 aeProcessAppleEvent + 288
19 HIToolbox 0x00007fff89545af9 AEProcessAppleEvent + 55
20 AppKit 0x00007fff86f5d290 _DPSNextEvent + 2245
21 AppKit 0x00007fff86f5c226 -[NSApplication _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 454
22 AppKit 0x00007fff86f50d80 -[NSApplication run] + 682
23 AppKit 0x00007fff86f1a368 NSApplicationMain + 1176
24 Tunnelblick 0x0000000103948558 start + 52
25 ??? 0x0000000000000001 0x0 + 1
)
2016-09-19 10:22:16 Tunnelblick[27210] Failed to copy: /Applications/Tunnelblick.app/Contents/Resources/net.tunnelblick.tunnelblick.LaunchAtLogin.plist to /Users/mwebber/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist
2016-09-19 10:22:17 Tunnelblick[27210] Sparkle: ===== Tunnelblick.app =====
2016-09-19 10:22:17 Tunnelblick[27210] Sparkle: Verified appcast signature
2016-09-19 10:24:17 Tunnelblick[27210] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-vpn0.michael' account = 'privateKey'
2016-09-19 10:40:43 WindowServer[147] CGError post_notification(const CGSNotificationType, void *const, const size_t, const bool, const CGSRealTimeDelta, const int, const CGSConnectionID *const, const pid_t): Timed out 0.250 second wait for reply from "Tunnelblick" for synchronous notification type 100 (kCGSDisplayWillReconfigure) (CID 0x167b7, PID 27210)
2016-09-19 10:52:26 Tunnelblick[27210] Communications error: <OS_xpc_error: <error: 0x7fff7643db90> { count = 1, contents =
"XPCErrorDescription" => <string: 0x7fff7643df40> { length = 22, contents = "Connection interrupted" }
}>
2016-09-19 10:53:01 Tunnelblick[27210] Communications error: <OS_xpc_error: <error: 0x7fff7643db90> { count = 1, contents =
"XPCErrorDescription" => <string: 0x7fff7643df40> { length = 22, contents = "Connection interrupted" }
}>
2016-09-19 10:53:15 Tunnelblick[27210] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-vpn0.michael' account = 'privateKey'
2016-09-19 14:06:59 Tunnelblick[27210] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-vpn0.michael' account = 'privateKey'
2016-09-19 14:09:21 Tunnelblick[27210] startDisconnectingUserKnows: while already disconnecting 'vpn0.michael'; OpenVPN state = 'DISCONNECTING'
2016-09-19 14:09:24 Tunnelblick[27210] startDisconnectingUserKnows: while already disconnecting 'vpn0.michael'; OpenVPN state = 'DISCONNECTING'
2016-09-19 14:09:24 tunnelblickd[29952] Status = 248 from tunnelblick-helper command 'kill 29750'
2016-09-19 14:09:24 Tunnelblick[27210] tunnelblickd status from kill: 248
tunnelblickd stderr:
'killOneOpenvpn(29750): Process does not exist
'
2016-09-19 14:09:34 Tunnelblick[27210] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-vpn0.michael' account = 'privateKey'
2016-09-19 14:11:05 Tunnelblick[27210] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-vpn0.michael' account = 'privateKey'
2016-09-19 14:17:23 Tunnelblick[27210] Keychain item retrieved successfully for service = 'Tunnelblick-Auth-vpn0.michael' account = 'privateKey'
Tunnelblick developer
Sep 19, 2016, 3:30:37 PM9/19/16
to tunnelblick-discuss, alias...@gmail.com
I agree, if you don't know what should be kept private, be selective. For the most part, Tunnelblick redacts the most critical security-sensitive info (the keys and certificates); usually the only other sensitive item is the remote server address.
Some thoughts:
1. This may fix it: Disable the "persist-tun" option by prefixing it with a # so it looks like
#persist-tun
(Select the configuration in the list on the left of Tunnelblick's "VPN Details" window, then click the little "gear" icon at the bottom of the list and click on "Edit OpenVPN Configuration File..." to open the file in TextEdit. After making the change and saving the file, the next time you try to connect you will need to enter an admin username/password to authorize the change.)
2. Put back the "While Connected" settings to the default: "Restore" in the left column, and "Restart" in the right column.
3. Leave the logging level set to 3, that should show everything that is relevant and not fill up the log with unnecessary detail.
4. Your installation of OS X is messed up. One of the system folders, /Users/mwebber/Library/LaunchAgents has incorrect permissions (and possibly incorrect ownership). This is the first time I've seen this, so it isn't very common. Probably the result of installing a program with a "package" installer that was not properly set up. You should be able to fix it but it may be just a symptom of some other problem. You should be able to fix it with the following commands in Terminal:
sudo chown mwebber:staff /Users/mwebber/Librarysudo chown mwebber:admin /Users/mwebber/Library/LaunchAgentschmod 700 /Users/mwebber/Library /Users/mwebber/Library/LaunchAgents
alias...@gmail.com
Sep 19, 2016, 3:40:38 PM9/19/16
to tunnelblick-discuss, alias...@gmail.com
WOOO
That totally fixed it for me. Thanks !!!!!!!
Reply all
Reply to author
Forward
0 new messages