Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.
Sign upGlobalProtect vpn client will not connect #4069
Comments
This comment has been minimized.
Show comment
Hide comment
This comment has been minimized.
andrewdavidwong
Jul 13, 2018
Member
Based on our issue reporting guidelines, this does not appear to be suitable for qubes-issues. We ask that you please send this to the qubes-users mailing list instead. If, after reading our issue reporting guidelines, you believe we are mistaken, please leave a brief comment explaining why. We'll be happy to take another look, and, if appropriate, reopen this issue. Thank you for your understanding.
|
Based on our issue reporting guidelines, this does not appear to be suitable for |
blissjoe commentedJul 12, 2018
Qubes OS version:
Qubes release 4.0 (R4.0)
Affected component(s):
Debian 9 and Fedora 28 template
StandaloneVM based on Fedora 28 template
GlobalProtect Linux Client
Steps to reproduce the behavior:
1.1 RPM - https://drive.google.com/open?id=114b9qKCb6B9piwU7z5olaBM88cV7n3Hk
1.2 DEB - https://drive.google.com/open?id=1w4vsEEwIXBCKreyP2SIj7P40Zc7auYL2
Expected behavior:
Normally running
globalprotect connect --portal portaladdress.comwill result in the terminal requesting your username/passwordActual behavior:
The GlobalProtect agent is unable to get input from the terminal.
[user@work ~]$ globalprotectCannot connect to local gpd service.[user@work globalprotect]$ systemctl status gpd● gpd.service - GlobalProtect VPN client daemonLoaded: loaded (/usr/lib/systemd/system/gpd.service; enabled; vendor preset: disabled)Active: active (running) since Wed 2018-07-11 07:22:17 EDT; 1 day 1h agoProcess: 525 ExecStartPre=/opt/paloaltonetworks/globalprotect/pre_exec_gps.sh (code=exited, status=0/>Main PID: 547 (PanGPS)Tasks: 10 (limit: 4671)Memory: 20.7MCGroup: /system.slice/gpd.service└─547 /opt/paloaltonetworks/globalprotect/PanGPSWarning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.Sample log output -
cat /opt/paloaltonetworks/globalprotect/PanGPS.logP 547-T-210675968 Jul 12 07:40:33:30146 Debug( 756): Display hip report V4 on the UIP 547-T-210675968 Jul 12 07:40:33:30745 Error(1117): Failed to send 512 bytes to clientP 547-T-210675968 Jul 12 07:40:33:31450 Error(1117): Failed to send 464 bytes to clientGeneral notes:
I opened the issue here instead of with PaloAlto because the client works under a non-Qubes Debian or Fedora installation. I tried to run yum groups install "Fedora Workstation" thinking that it may be a missing dependency. I'm under the assumption that this may be a Qubes security feature, but I'm unsure what terminology I would need to search for or how to troubleshoot further.
Any help would be appreciated.