GlobalProtect-openconnect icon indicating copy to clipboard operation
GlobalProtect-openconnect copied to clipboard

1.4.8 version shows blank login page

Open kurnevsky opened this issue 2 years ago • 4 comments

Version 1.4.7 works fine but 1.4.8 doesn't. It just shows empty login page. In the logs of 1.4.8 I see:

2022-08-16 17:50:31.356 INFO  [530083] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 17:50:40.781 INFO  [530083] [SAMLLoginWindow::SAMLLoginWindow@31] MAX_WAIT_TIME exceeded, display the login window.

kurnevsky avatar Aug 16 '22 14:08 kurnevsky

Sorry about that. Please install the older version for now. And can you provide more logs?

yuezk avatar Aug 16 '22 15:08 yuezk

No problem, I can use older version for sure. More logs with stripped data (not sure what of it is safe to share):

2022-08-16 18:11:51.053 INFO  [540425] [main@24] GlobalProtect started, version: 1.4.8
2022-08-16 18:11:51.721 INFO  [540425] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:11:53.607 INFO  [540425] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:11:53.706 INFO  [540425] [GPClient::doConnect@244] Start connecting...
2022-08-16 18:11:53.706 INFO  [540425] [GPClient::doConnect@260] Start gateway login using the previously saved gateway...
2022-08-16 18:11:53.706 INFO  [540425] [GPClient::gatewayLogin@367] Performing gateway login...
2022-08-16 18:11:53.717 INFO  [540425] [GatewayAuthenticator::authenticate@28] Start gateway authentication...
2022-08-16 18:11:53.717 INFO  [540425] [GatewayAuthenticator::login@41] Trying to login the gateway at https://.../ssl-vpn/login.esp, with ...
2022-08-16 18:11:54.504 ERROR [540425] [GatewayAuthenticator::onLoginFinished@53] Failed to login the gateway at https://.../ssl-vpn/login.esp, Error transferring https://.../ssl-vpn/login.esp - server replied: Custom error
2022-08-16 18:11:54.504 INFO  [540425] [GatewayAuthenticator::doAuth@81] Perform the gateway prelogin at https://.../ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Linux
2022-08-16 18:11:54.598 INFO  [540425] [GatewayAuthenticator::onPreloginFinished@98] Gateway prelogin succeeded.
2022-08-16 18:11:54.598 INFO  [540425] [PreloginResponse::parse@26] Start parsing the prelogin response...
2022-08-16 18:11:54.598 INFO  [540425] [GatewayAuthenticator::samlAuth@152] Trying to perform SAML login with saml-method POST

DevTools listening on ws://127.0.0.1:12315/devtools/browser/...
Remote debugging server started successfully. Try pointing a Chromium-based browser to http://127.0.0.1:12315
2022-08-16 18:11:54.738 INFO  [540425] [SAMLLoginWindow::onResponseReceived@69] Trying to receive authentication cookie from ...
2022-08-16 18:11:54.738 INFO  [540425] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 18:11:55.563 INFO  [540425] [SAMLLoginWindow::onResponseReceived@69] Trying to receive authentication cookie from https://.../app/panw_globalprotect/.../sso/saml
2022-08-16 18:11:55.563 INFO  [540425] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 18:11:55.842 INFO  [540425] [SAMLLoginWindow::onLoadFinished@109] Load finished https://.../app/panw_globalprotect/.../sso/saml
2022-08-16 18:11:55.923 INFO  [540425] [SAMLLoginWindow::onResponseReceived@69] Trying to receive authentication cookie from https://login.okta.com/discovery/iframe.html
2022-08-16 18:11:55.923 INFO  [540425] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 18:12:04.781 INFO  [540425] [SAMLLoginWindow::SAMLLoginWindow@31] MAX_WAIT_TIME exceeded, display the login window.

kurnevsky avatar Aug 16 '22 15:08 kurnevsky

Also this error 2022-08-16 18:11:54.504 ERROR [540425] [GatewayAuthenticator::onLoginFinished@53] doesn't seem critical - I have same error in 1.4.7 but it works fine.

kurnevsky avatar Aug 16 '22 15:08 kurnevsky

And here are the logs of the working version:

2022-08-16 18:17:24.025 INFO  [543134] [main@24] GlobalProtect started, version: 1.4.7
2022-08-16 18:17:24.222 INFO  [543134] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:17:25.444 INFO  [543134] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:17:25.526 INFO  [543134] [GPClient::doConnect@244] Start connecting...
2022-08-16 18:17:25.526 INFO  [543134] [GPClient::doConnect@260] Start gateway login using the previously saved gateway...
2022-08-16 18:17:25.526 INFO  [543134] [GPClient::gatewayLogin@367] Performing gateway login...
2022-08-16 18:17:25.538 INFO  [543134] [GatewayAuthenticator::authenticate@33] Start gateway authentication...
2022-08-16 18:17:25.538 INFO  [543134] [GatewayAuthenticator::login@46] Trying to login the gateway at https://.../ssl-vpn/login.esp with ...
2022-08-16 18:17:26.166 ERROR [543134] [GatewayAuthenticator::onLoginFinished@58] Failed to login the gateway at https://.../ssl-vpn/login.esp, Error transferring https://.../ssl-vpn/login.esp - server replied: Custom error
2022-08-16 18:17:26.166 INFO  [543134] [GatewayAuthenticator::doAuth@86] Perform the gateway prelogin at https://.../ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Linux
2022-08-16 18:17:26.265 INFO  [543134] [GatewayAuthenticator::onPreloginFinished@103] Gateway prelogin succeeded.
2022-08-16 18:17:26.265 INFO  [543134] [PreloginResponse::parse@26] Start parsing the prelogin response...
2022-08-16 18:17:26.266 INFO  [543134] [GatewayAuthenticator::samlAuth@161] Trying to perform SAML login with saml-method POST

DevTools listening on ws://127.0.0.1:12315/devtools/browser/...
Remote debugging server started successfully. Try pointing a Chromium-based browser to http://127.0.0.1:12315
2022-08-16 18:17:26.412 INFO  [543134] [SAMLLoginWindow::onResponseReceived@61] Trying to receive from ...
2022-08-16 18:17:27.221 INFO  [543134] [SAMLLoginWindow::onResponseReceived@61] Trying to receive from https://.../app/panw_globalprotect/.../sso/saml
2022-08-16 18:17:27.515 INFO  [543134] [SAMLLoginWindow::onResponseReceived@61] Trying to receive from https://login.okta.com/discovery/iframe.html
2022-08-16 18:17:27.688 INFO  [543134] [SAMLLoginWindow::onLoadFinished@104] Load finished https://.../app/panw_globalprotect/.../sso/saml

kurnevsky avatar Aug 16 '22 15:08 kurnevsky