GlobalProtect "Cannot connect to local gpd service."

[witziege]

Hello everyone!

I need to connect to my universitys vpn server via the GlobalProtect protocol. The IT services provides a rpm packages which I installed with Yast.

This is the terminal output:

user@computer:~> globalprotect 
Cannot connect to local gpd service. 
user@computer:~> systemctl status gpd 
Unit gpd.service could not be found.

I don't know how to solve this issue. Can anyone help?
Re-installing the packages does not solve the problem.

Thanks in advance!

[JulinaB]

Hello everyone!

I need to connect to my universitys vpn server via the GlobalProtect protocol. The IT services provides a rpm packages which I installed with Yast.

This is the terminal output:

user@computer:~> globalprotect 
Cannot connect to local gpd service. 
user@computer:~> systemctl status gpd 
Unit gpd.service could not be found.

I don't know how to solve this issue. Can anyone help?
Re-installing the packages does not solve the problem.

Thanks in advance!

I know nothing about GlobalProtect but I am sure you will need to provide a destination either in the command line or a config file.

I am sure the IT services department can help you (maybe ) but I also found this link that may help:

https://docs.paloaltonetworks.com/gl...for-linux.html

[witziege]

Thanks for the link. Unfortunately adding the server address is not changing the output.

And sadly my universitys IT service takes multiple months (no joke) to respond.

[marel]

My employer is using GlobalProtect but my work-laptop is Win10 although it's primary use is VNC to Linux machines and email/browser.

What you can try for Linux is to use Openconnect

> sudo openconnect --help 
Usage:  openconnect [options] <server> 
Open client for multiple VPN protocols, version v8.10 

Using GnuTLS 3.7.1. Features present: PKCS#11, RSA software token, HOTP software token, TOTP software token, Yubikey OATH, System keys, DTLS, ESP 
      --config=CONFIGFILE         Read options from config file 
  -V, --version                   Report version number 
  -h, --help                      Display help text 

Set VPN protocol: 
      --protocol=anyconnect       Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default) 
      --protocol=nc               Compatible with Juniper Network Connect 
      --protocol=gp               Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN 
      --protocol=pulse            Compatible with Pulse Connect Secure SSL VPN 

Authentication: 
  -u, --user=NAME                 Set login username 
      --no-passwd                 Disable password/SecurID authentication 
      --non-inter                 Do not expect user input; exit if it is required 
      --passwd-on-stdin           Read password from standard input 
      --authgroup=GROUP           Choose authentication login selection

...

So --protocol=gp and some more arguments.

[marel]

Before trying Openconnect it is likely good to check the GlobalProtect version as I see in the the Openconnect changelog:

Emulated a newer version of GlobalProtect official clients, 5.1.5-8; was 4.0.2-19

And that is not yet in the v8.10 on Tumbleweed. I do not know which version Leap has but it will not be newer.

[witziege]

I have checked the openconnect version which I installed and noticed that 7.08 was still installed. I added the network repo and and upgraded openconnect to version 8.10.
But I still can not choose PAN in the Gnome networkmanager. How do I add a new protocol to the menu?

[marel]

Good you upgraded openconnect to version 8.10.

Before worrying about adding it to the NetWorkManager, are things working from the command prompt?
If that is not the case, the NetworkManager comes later.

[witziege]

are things working from the command prompt?

Yes, openconnect works fine inside the command prompt.

[marel]

Okay, if openconnect works from the command prompt you can try nmcli or the OpenConnect GUI.

For issues with the NetworkManager, see https://gitlab.freedesktop.org/Netwo...nager/-/issues