Ed Greshko writes:
>
> What also needs to be documented, or I need to get better at searching, is what are
the possible values
> for "option" when doing a modify of vpn.secrets and flags=1.
>
> "help" was of no "help".
>
> Error: failed to modify vpn.secrets: 'help' is not valid; use
<option>=<value>.
I was able to figure out that part. Searching for "nmcli save vpn password"
gives
https://unix.stackexchange.com/questions/335999/use-nmcli-to-modify-vpn-p... as
the second result, that shows this incantation, but without password-flags set correctly,
this does nothing, and, most importantly, without providing any kind of feedback to the
user. The command just exits quietly, without any diagnostic.
There were a bunch of hits that said to manually add [vpn-secrets], like
https://serverfault.com/questions/816714/how-do-i-supply-a-password-to-ne...
and looking at mine's, that's where the password is. But unless
password-flags=0
also exists in the [vpn] section, this does nothing. Either one of two things
would've made things smoother: either better documentation, or better feedback from
"nmcli connection modify", something other than quietly returning without any
messages, but doing nothing.
Right.
My only point/thought was that <option>=<value> could me more option than just
password. And, even
if there wasn't, "option" should be documented.
In any event all is good and the BZ for the selinux context is getting rapid attention.
:-)