The problems connecting to openvpn are unrelated to the kernel version. They occur if one uses the updated default /etc/sudoers
content.
There has been an update recently: https://gitlab.archlinux.org/archlinux/packaging/packages/sudo/-/commit/4791df5c3deb6355e6a1fe0b40a13ef27ad060b0
that changes
# Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
to
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
Activating the secure_path
setting will prevent cyberghostvpn from running the /usr/local/cyberghost/openvpn wrapper. This means the original /usr/bin/openvpn
wrapper gets called with the unsupported --ncp-disable
parameter again - and fails.
To make cyberghostvpn work again with openvpn
a) either comment out the Defaults secure_path=...
line in /etc/sudoers again
b) or add /usr/local/cyberghost
to the beginning of that line
/etc/sudoers
Defaults secure_path="/usr/local/cyberghost:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
c) or downgrade openvpn to <2.6 - that makes it support the --ncp-disable
command line parameter again
Pinned Comments
moormaster commented on 2024-08-09 22:32 (UTC) (edited on 2024-08-09 22:33 (UTC) by moormaster)
The problems connecting to openvpn are unrelated to the kernel version. They occur if one uses the updated default
/etc/sudoers
content.There has been an update recently: https://gitlab.archlinux.org/archlinux/packaging/packages/sudo/-/commit/4791df5c3deb6355e6a1fe0b40a13ef27ad060b0
that changes
to
Activating the
secure_path
setting will prevent cyberghostvpn from running the /usr/local/cyberghost/openvpn wrapper. This means the original/usr/bin/openvpn
wrapper gets called with the unsupported--ncp-disable
parameter again - and fails.To make cyberghostvpn work again with openvpn
a) either comment out the
Defaults secure_path=...
line in /etc/sudoers againb) or add
/usr/local/cyberghost
to the beginning of that line/etc/sudoers
c) or downgrade openvpn to <2.6 - that makes it support the
--ncp-disable
command line parameter again