Ed Greshko writes:
What also needs to be documented, or I need to get better at searching, is
what are the possible values
for "option" when doing a modify of vpn.secrets and flags=1.
"help" was of no "help".
Error: failed to modify vpn.secrets: 'help' is not valid; use
<option>=<value>.
I was able to figure out that part. Searching for "nmcli save vpn password"
gives
https://unix.stackexchange.com/questions/335999/use-nmcli-to-modify-
vpn-password as the second result, that shows this incantation, but without
password-flags set correctly, this does nothing, and, most importantly,
without providing any kind of feedback to the user. The command just exits
quietly, without any diagnostic.
There were a bunch of hits that said to manually add [vpn-secrets], like
https://serverfault.com/questions/816714/how-do-i-supply-a-password-to-
networkmanager-openconnect-automatically and looking at mine's, that's where
the password is. But unless
password-flags=0
also exists in the [vpn] section, this does nothing. Either one of two
things would've made things smoother: either better documentation, or better
feedback from "nmcli connection modify", something other than quietly
returning without any messages, but doing nothing.