Remembering your password in 3.2beta22

906 views
Skip to first unread message

smsm1

unread,
Jul 12, 2011, 4:27:24 AM7/12/11
to tunnelblick-discuss
Hi,

I'm using 3.2beta22 on Lion GM, and have found that the password isn't
remembered even so save in Keychain is selecting in the username and
password dialog. That is the only problem that I have found so far in
using this version on Lion, now change was needed from the old config
from the sys admin on the older version.

Shaun

jkbull...gmail.com

unread,
Jul 12, 2011, 6:10:33 AM7/12/11
to tunnelbli...@googlegroups.com
I do not have this problem. If I put a check in the "Save in Keychain" checkbox, the username and password are saved in the Keychain, and are used the next time I try to connect.

Is anyone else having this problem on Lion?

smsm1: After you put a check in the "Save in Keychain" checkbox, enter the username and password, and connect successfully, please do the following, substituting the name of your configuration for XXXX;
  1. Launch /Applications/Utilities/Keychain Assistant and see if there are any entries named Tunnelblick-Auth-XXXX. There should be two "application password" entries -- one is for the username and one is for the password.
  2. Launch /Applications/Terminal and type the following, all on one line:
defaults read net.tunnelblick.tunnelblick "XXXX-keychainHasUsernameAndPassword"

The result should be a line with a "1" in it. 
 

jkbull...gmail.com

unread,
Jul 12, 2011, 6:41:35 AM7/12/11
to tunnelbli...@googlegroups.com
Also, are there any relevant messages on The Console Log?

smsm1

unread,
Jul 12, 2011, 9:58:59 AM7/12/11
to tunnelblick-discuss
I'm getting the following error in the Console log, when I login:
12/07/2011 14:52:03.364 Tunnelblick: Could not save username in
Keychain
12/07/2011 14:52:03.406 Tunnelblick: Could not save password in
Keychain

There is the two entries in Keychain Access, with the appropriate
username and password. These are possibly from the previous version. I
have a 1 in the preferences for the XXXX-
keychainHasUsernameAndPassword setting, where XXXX is the profile
name.

I have just tried deleting the two entries in Keychain Access and
reconnecting. I'm asked for my password again (but not my username),
which I enter and the two entries in Keychain access are recreated.
When I subsequently try to reconnect, I get asked for my password, but
not my username, and the above two log entires appear im my Console
log.

I hope that this additional information helps.

Shaun

On Jul 12, 11:41 am, "jkbull...gmail.com" <jkbull...@gmail.com> wrote:
> Also, are there any relevant messages on The Console Log<http://code.google.com/p/tunnelblick/wiki/zConsoleLog>
> ?

jkbull...gmail.com

unread,
Jul 12, 2011, 10:18:56 AM7/12/11
to tunnelbli...@googlegroups.com
Thanks for the information.

Try using Keychain Access to delete all existing Tunnelblick entries and then connecting again.

It seems that Tunnelblick is unable to access the keychain at all. It can't read the existing username/password (although it knows they are there) -- that's why it is asking you for them. And it can't write the new ones you enter -- that's why the error message appears in the Console log. Because Tunnelblick is digitally signed, OS X should have allowed a new version of Tunnelblick to access Keychain entries created by an old version of Tunnelblick, but maybe that doesn't survive the move to Lion. If that's the case, though, OS X should ask you if you want to let Tunnelblick access the Keychain for each of the two entries.

Please answer two questions:
  1. How did you move your programs and settings to Lion (for example, did you use Migration Assistant)?
  2. Did you have a different version of Tunnelblick, and then updated to 3.2beta22, or have you always used 3.2beta22?

smsm1

unread,
Jul 12, 2011, 10:51:07 AM7/12/11
to tunnelblick-discuss
Previously I was using version 3.0b16 on Snow Leopard. I run an
upgrade install in place to get to Lion. 3.0b16 didn't work, thus I
installed I looked to the Tunnelblick website to see that version
3.2beta22 worked with the exception of this this problem.

I have tried deleting the entries in Keychain access and restarting
Tunnelblick again, and now it is reading the username and password
from Keychain access. If in doubt turn it of and turn it on again.

Thanks for your help.

Shaun

On Jul 12, 2:18 pm, "jkbull...gmail.com" <jkbull...@gmail.com> wrote:
> Thanks for the information.
>
> Try using Keychain Access to delete all existing Tunnelblick entries and
> then connecting again.
>
> It seems that Tunnelblick is unable to access the keychain at all. It can't
> read the existing username/password (although it knows they are there) --
> that's why it is asking you for them. And it can't write the new ones you
> enter -- that's why the error message appears in the Console log. Because
> Tunnelblick is digitally signed, OS X should have allowed a new version of
> Tunnelblick to access Keychain entries created by an old version of
> Tunnelblick, but maybe that doesn't survive the move to Lion. If that's the
> case, though, OS X should ask you if you want to let Tunnelblick access the
> Keychain for each of the two entries.
>
> Please answer two questions:
>
>    1. How did you move your programs and settings to Lion (for example, did
>    you use Migration Assistant)?
>    2. Did you have a different version of Tunnelblick, and then updated to

jkbull...gmail.com

unread,
Aug 19, 2012, 1:58:59 PM8/19/12
to tunnelbli...@googlegroups.com
If you are having a problem with Tunnelblick, please include the following with your question.
  • the entire contents of the Tunnelblick log; and
  • the contents of your configuration file
Be sure to X out any sensitive information such as server IP addresses.

To get the Tunnelblick log on the Clipboard so you can paste it into an email:
  1. Click the Tunnelblick icon
  2. Click "VPN Details…"
  3. Select the "Configurations" panel if it is not already selected
  4. Select the configuration whose file you want to look at in the list on the left
  5. Select the "Log" tab if it is not already selected
  6. Click "Copy Log to Clipboard"

To put the contents of your configuration file on the Clipboard so you can paste it into an email, open it in TextEdit as follows:
  1. Click the Tunnelblick icon
  2. Click "VPN Details…"
  3. Select the "Configurations" panel if it is not already selected
  4. Select the configuration whose file you want to look at in the list on the left
  5. Click the little "gear" icon at the bottom of the list on the left
  6. Select "Edit OpenVPN Configuration File…" (or possibly "Examine OpenVPN Configuration File…").
In TextEdit you can Edit : Select All and then Edit : Copy to get the contents of the configuration file put into the clipboard.


On Sunday, August 19, 2012 12:13:36 PM UTC-4, Dada Nabhaniilananda wrote:
I'm having the same problem with Lion. When I do as you suggest there are no entries listed in Keychain access. And when I did step to it confirmed this - instead of the 1 result I got a message saying the tunnelblick entries do not exist in keychain. I do not know how to put a check in the save in keychain checkbox - how do I get that checkbox to come up?
Reply all
Reply to author
Forward
0 new messages