1 Reply
      Latest reply: Dec 19, 2016 2:25 PM by eskimo RSS
      xwu Level 1 Level 1 (0 points)

        Hi,

         

        We are using Network Extension Framework(tunnel provider) to build a VPN app and extension for Mac, and using Apple Configurator 2 to generate the VPN profile. But I got error "Failed to find the VPN app for plugin type ..." when I try to connect the vpn. Below is the logs and piece of VPN profile and entitlements:

         

        Logs:

        10:31:57.630458 -0800 nesessionmanager NESMVPNSession[MacTestVPN:F25915A2-BA33-4A0C-9194-9CD7D8FA6347]: Received a start command from mactestvpn[1457]

        10:31:57.632121 -0800 nesessionmanager NESMVPNSession[MacTestVPN:F25915A2-BA33-4A0C-9194-9CD7D8FA6347]: status changed to connecting

        10:31:57.632789 -0800 nesessionmanager subsystem: com.apple.securityd, category: storagemgr, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2, enable_private_data: 0

        10:31:57.632858 -0800 nesessionmanager using system preferences

        10:31:57.632944 -0800 nesessionmanager subsystem: com.apple.securityd, category: secpref, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2, enable_private_data: 0

        10:31:57.634260 -0800 nesessionmanager subsystem: com.apple.securityd, category: integrity, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2, enable_private_data: 0

        10:31:57.634302 -0800 nesessionmanager not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

        10:31:57.634349 -0800 nesessionmanager not switching as we're not in ~/Library/Keychains/: /Library/Keychains/System.keychain (0)

        10:31:57.634602 -0800 nesessionmanager switching to keychain-db: /var/root/Library/Keychains/login.keychain-db from /var/root/Library/Keychains/login.keychain (0 1 0 0)

        10:31:57.634746 -0800 nesessionmanager subsystem: com.apple.securityd, category: security_exception, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2, enable_private_data: 0

        10:31:57.634786 -0800 nesessionmanager MacOS error: -25307

        10:31:57.636331 -0800 nesessionmanager Unable to access keychain preference domain: 0. A default keychain could not be found.

        10:31:57.644516 -0800 nesessionmanager subsystem: com.apple.SystemConfiguration, category: SCPreferences, enable_level: 0, persist_level: 0, default_ttl: 0, info_ttl: 0, debug_ttl: 0, generate_symptoms: 0, enable_oversize: 0, privacy_setting: 2, enable_private_data: 0

        10:31:57.644614 -0800 nesessionmanager Failed to find the VPN app for plugin type com.mycompany.mac.testvpn

        10:31:57.648089 -0800 nesessionmanager Failed to find the primary plugin (type = com.mycompany.mac.testvpn)


        Profile:

        <dict>

            <key>IPv4</key>

            <dict>

                  <key>OverridePrimary</key>

                  <integer>0</integer>

            </dict>

            <key>PayloadDescription</key>

            <string>Configures VPN settings</string>

            <key>PayloadDisplayName</key>

            <string>VPN</string>

            <key>PayloadIdentifier</key>

            <string>com.apple.vpn.managed.D7C1A93F-009E-4486-8B6E-3A3FAF17F96C</string>

            <key>PayloadType</key>

            <string>com.apple.vpn.managed</string>

            <key>PayloadUUID</key>

            <string>E643B9CF-01D8-4B5D-9FCB-93A9FFFB5FDF</string>

            <key>PayloadVersion</key>

            <integer>1</integer>

            <key>Proxies</key>

            <dict>

                  key>HTTPEnable</key>

                  <integer>0</integer>

                  <key>HTTPSEnable</key>

                  <integer>0</integer>

            </dict>

            <key>UserDefinedName</key>

            <string>mac test vpn</string>

            <key>VPN</key>

            <dict>

                  <key>AuthName</key>

                  <string>test</string>

                  <key>AuthenticationMethod</key>

                  <string>Certificate</string>

                  <key>PayloadCertificateUUID</key>

                  <string>CBFF90D2-A3B1-4812-B220-1866AA16A71E</string>

                  <key>ProviderType</key>

                  <string>packet-tunnel</string>

                  <key>RemoteAddress</key>

                  <string>vpn.mycompany.com</string>

            </dict>

            <key>VPNSubType</key>

            <string>com.mycompany.mac.testvpn</string>

            <key>VPNType</key>

            <string>VPN</string>

            <key>ProviderBundleIdentifier</key>

            <string>com.mycompany.mac.testvpn.extn</string>

            <key>VendorConfig</key>

            <dict>

            </dict>

        </dict>

         

        Entitlement:

        <dict>

          <key>com.apple.developer.networking.networkextension</key>

          <array>

          <string>packet-tunnel-provider</string>

          </array>

          <key>com.apple.developer.networking.vpn.api</key>

          <array>

          <string>allow-vpn</string>

          </array>

          <key>keychain-access-groups</key>

          <array>

          <string>com.apple.managed.vpn.shared</string>

          </array>

        </dict>