Unable to Connect Palo Alto Global Protect
I am unable to connect to Palo Alto Global Protect VPN using NetworkManager VPN plugin. The login page is opened and I was logged in, and "Login Successful!" also displayed in GUI login page.
Here the environment information.
OS: Ubuntu 22.04.3 LTS
Kernel: 6.2.0-31-generic
NetworkManager: 1.36.6
nmcli: 1.36.6
Gnome: 42.9
Last month it still work, I don't know why now I am unable to connect. Please find out, is it bug caused by palo alto system update or what? Thanks
Here is the log from syslog.
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0557] active-connection[0x55d5af30a8e0]: set device "wlo1" [0x55d5af15e170]
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0557] device[8c94c9d69c7ca350] (wlo1): add_pending_action (1): 'activation-18'
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0561] active-connection[0x55d5af30a8e0]: constructed (NMVpnConnection, version-id 18, type managed)
Dec 27 21:59:57 localheart NetworkManager[709]: <info> [1703689197.0609] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: starting openconnect
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0609] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: starting: watch D-Bus service org.freedesktop.NetworkManager.openconnect.Connection_18
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0612] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: set state: prepare (was waiting)
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0612] active-connection[0x55d5af30a8e0]: set state activating (was unknown)
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0613] active-connection[0x55d5af30a8e0]: check-master-ready: not signalling (state activating, no master)
Dec 27 21:59:57 localheart NetworkManager[709]: <info> [1703689197.0617] audit: op="connection-activate" uuid="adae038f-e9ed-4845-9eb3-93f63a5be037" name="PaloAltoGP" pid=3466 uid=1000 result="success"
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0659] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: starting: VPN service has PID 6945
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0773] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: set state: need-auth (was prepare)
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0775] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: secrets: requesting VPN secrets pass #1
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0779] Secrets requested for connection /org/freedesktop/NetworkManager/Settings/47 (PaloAltoGP/vpn)
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0779] settings-connection[485d516bcb41110d,adae038f-e9ed-4845-9eb3-93f63a5be037]: (vpn:0x55d5af2831e0) secrets requested flags 0x80000004 hints '(none)'
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0780] agent-manager: ([89c64e59491bc7c5/"PaloAltoGP"/"vpn"]) system settings secrets sufficient
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0782] settings-connection[485d516bcb41110d,adae038f-e9ed-4845-9eb3-93f63a5be037]: (vpn:0x55d5af0dfb20) existing secrets returned
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0782] settings-connection[485d516bcb41110d,adae038f-e9ed-4845-9eb3-93f63a5be037]: (vpn:0x55d5af0dfb20) secrets request completed
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0784] settings-connection[485d516bcb41110d,adae038f-e9ed-4845-9eb3-93f63a5be037]: (vpn:0x55d5af0dfb20) new agent secrets processed
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0792] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: secrets: asking service if additional secrets are required
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0793] device[19f2e2aeede35963] (p2p-dev-wlo1): add_pending_action (1): 'autoactivate'
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0794] device[19f2e2aeede35963] (p2p-dev-wlo1): remove_pending_action (0): 'autoactivate'
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0810] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: service indicated additional secrets required
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0810] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: secrets: requesting VPN secrets pass #2
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0812] Secrets requested for connection /org/freedesktop/NetworkManager/Settings/47 (PaloAltoGP/vpn)
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0812] agent-manager: agent[9ecc2ea682ca5f09,:1.95/org.gnome.Shell.NetworkAgent/1000]: agent allowed for secrets request [2edde483ba3005bb/"PaloAltoGP"/"vpn"]
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0812] settings-connection[485d516bcb41110d,adae038f-e9ed-4845-9eb3-93f63a5be037]: (vpn:0x55d5af29a3f0) secrets requested flags 0x4 hints '(none)'
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0814] agent-manager: ([2edde483ba3005bb/"PaloAltoGP"/"vpn"]) system settings secrets insufficient, asking agents
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0814] agent-manager: agent[9ecc2ea682ca5f09,:1.95/org.gnome.Shell.NetworkAgent/1000]: agent getting secrets for request [2edde483ba3005bb/"PaloAltoGP"/"vpn"]
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0814] agent-manager: ([2edde483ba3005bb/"PaloAltoGP"/"vpn"]) request has system secrets; checking agent :1.95 for MODIFY
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.0836] agent-manager: agent[9ecc2ea682ca5f09,:1.95/org.gnome.Shell.NetworkAgent/1000]: agent [2edde483ba3005bb/"PaloAltoGP"/"vpn"] MODIFY check result YES
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1258] agent-manager: agent[9ecc2ea682ca5f09,:1.95/org.gnome.Shell.NetworkAgent/1000]: agent returned no secrets for request [2edde483ba3005bb/"PaloAltoGP"/"vpn"]
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1258] settings-connection[485d516bcb41110d,adae038f-e9ed-4845-9eb3-93f63a5be037]: (vpn:0x55d5af2af140) secrets request error: No agents were available for this request.
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1259] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: secrets: asking service if additional secrets are required
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1268] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: service indicated additional secrets required
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1268] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: secrets: requesting VPN secrets pass #3
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1269] Secrets requested for connection /org/freedesktop/NetworkManager/Settings/47 (PaloAltoGP/vpn)
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1270] agent-manager: agent[9ecc2ea682ca5f09,:1.95/org.gnome.Shell.NetworkAgent/1000]: agent allowed for secrets request [781696dda6a3471e/"PaloAltoGP"/"vpn"]
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1270] settings-connection[485d516bcb41110d,adae038f-e9ed-4845-9eb3-93f63a5be037]: (vpn:0x55d5af2833c0) secrets requested flags 0x5 hints '(none)'
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1271] agent-manager: ([781696dda6a3471e/"PaloAltoGP"/"vpn"]) system settings secrets insufficient, asking agents
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1271] agent-manager: agent[9ecc2ea682ca5f09,:1.95/org.gnome.Shell.NetworkAgent/1000]: agent getting secrets for request [781696dda6a3471e/"PaloAltoGP"/"vpn"]
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1271] agent-manager: ([781696dda6a3471e/"PaloAltoGP"/"vpn"]) request has system secrets; checking agent :1.95 for MODIFY
Dec 27 21:59:57 localheart NetworkManager[709]: <debug> [1703689197.1294] agent-manager: agent[9ecc2ea682ca5f09,:1.95/org.gnome.Shell.NetworkAgent/1000]: agent [781696dda6a3471e/"PaloAltoGP"/"vpn"] MODIFY check
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1705] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: secrets: asking service if additional secrets are required
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1707] device[19f2e2aeede35963] (p2p-dev-wlo1): add_pending_action (1): 'autoactivate'
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1708] device[19f2e2aeede35963] (p2p-dev-wlo1): remove_pending_action (0): 'autoactivate'
Dec 27 22:00:31 localheart NetworkManager[709]: <warn> [1703689231.1725] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: final secrets request failed to provide sufficient secrets
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1726] vpn[0x55d5af30a8e0,adae038f-e9ed-4845-9eb3-93f63a5be037,"PaloAltoGP"]: set state: failed (was need-auth)
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1726] active-connection[0x55d5af30a8e0]: set state deactivated (was activating)
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1727] active-connection[0x55d5af30a8e0]: check-master-ready: not signalling (state deactivated, no master)
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1727] device[8c94c9d69c7ca350] (wlo1): remove_pending_action (0): 'activation-18'
Dec 27 22:00:31 localheart NetworkManager[709]: <debug> [1703689231.1731] active-connection[0x55d5af30a8e0]: disposing