yuezk / GlobalProtect-openconnect

A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, Yubikey, and client certificate authentication, etc.
GNU General Public License v3.0
1.4k stars 157 forks source link

1.4.8 version shows blank login page #177

Open kurnevsky opened 2 years ago

kurnevsky commented 2 years ago

Version 1.4.7 works fine but 1.4.8 doesn't. It just shows empty login page. In the logs of 1.4.8 I see:

2022-08-16 17:50:31.356 INFO  [530083] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 17:50:40.781 INFO  [530083] [SAMLLoginWindow::SAMLLoginWindow@31] MAX_WAIT_TIME exceeded, display the login window.
yuezk commented 2 years ago

Sorry about that. Please install the older version for now. And can you provide more logs?

kurnevsky commented 2 years ago

No problem, I can use older version for sure. More logs with stripped data (not sure what of it is safe to share):

2022-08-16 18:11:51.053 INFO  [540425] [main@24] GlobalProtect started, version: 1.4.8
2022-08-16 18:11:51.721 INFO  [540425] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:11:53.607 INFO  [540425] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:11:53.706 INFO  [540425] [GPClient::doConnect@244] Start connecting...
2022-08-16 18:11:53.706 INFO  [540425] [GPClient::doConnect@260] Start gateway login using the previously saved gateway...
2022-08-16 18:11:53.706 INFO  [540425] [GPClient::gatewayLogin@367] Performing gateway login...
2022-08-16 18:11:53.717 INFO  [540425] [GatewayAuthenticator::authenticate@28] Start gateway authentication...
2022-08-16 18:11:53.717 INFO  [540425] [GatewayAuthenticator::login@41] Trying to login the gateway at https://.../ssl-vpn/login.esp, with ...
2022-08-16 18:11:54.504 ERROR [540425] [GatewayAuthenticator::onLoginFinished@53] Failed to login the gateway at https://.../ssl-vpn/login.esp, Error transferring https://.../ssl-vpn/login.esp - server replied: Custom error
2022-08-16 18:11:54.504 INFO  [540425] [GatewayAuthenticator::doAuth@81] Perform the gateway prelogin at https://.../ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Linux
2022-08-16 18:11:54.598 INFO  [540425] [GatewayAuthenticator::onPreloginFinished@98] Gateway prelogin succeeded.
2022-08-16 18:11:54.598 INFO  [540425] [PreloginResponse::parse@26] Start parsing the prelogin response...
2022-08-16 18:11:54.598 INFO  [540425] [GatewayAuthenticator::samlAuth@152] Trying to perform SAML login with saml-method POST

DevTools listening on ws://127.0.0.1:12315/devtools/browser/...
Remote debugging server started successfully. Try pointing a Chromium-based browser to http://127.0.0.1:12315
2022-08-16 18:11:54.738 INFO  [540425] [SAMLLoginWindow::onResponseReceived@69] Trying to receive authentication cookie from ...
2022-08-16 18:11:54.738 INFO  [540425] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 18:11:55.563 INFO  [540425] [SAMLLoginWindow::onResponseReceived@69] Trying to receive authentication cookie from https://.../app/panw_globalprotect/.../sso/saml
2022-08-16 18:11:55.563 INFO  [540425] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 18:11:55.842 INFO  [540425] [SAMLLoginWindow::onLoadFinished@109] Load finished https://.../app/panw_globalprotect/.../sso/saml
2022-08-16 18:11:55.923 INFO  [540425] [SAMLLoginWindow::onResponseReceived@69] Trying to receive authentication cookie from https://login.okta.com/discovery/iframe.html
2022-08-16 18:11:55.923 INFO  [540425] [SAMLLoginWindow::checkSamlResult@80] Checking the authentication result...
2022-08-16 18:12:04.781 INFO  [540425] [SAMLLoginWindow::SAMLLoginWindow@31] MAX_WAIT_TIME exceeded, display the login window.
kurnevsky commented 2 years ago

Also this error 2022-08-16 18:11:54.504 ERROR [540425] [GatewayAuthenticator::onLoginFinished@53] doesn't seem critical - I have same error in 1.4.7 but it works fine.

kurnevsky commented 2 years ago

And here are the logs of the working version:

2022-08-16 18:17:24.025 INFO  [543134] [main@24] GlobalProtect started, version: 1.4.7
2022-08-16 18:17:24.222 INFO  [543134] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:17:25.444 INFO  [543134] [GPClient::populateGatewayMenu@139] Populating the Switch Gateway menu...
2022-08-16 18:17:25.526 INFO  [543134] [GPClient::doConnect@244] Start connecting...
2022-08-16 18:17:25.526 INFO  [543134] [GPClient::doConnect@260] Start gateway login using the previously saved gateway...
2022-08-16 18:17:25.526 INFO  [543134] [GPClient::gatewayLogin@367] Performing gateway login...
2022-08-16 18:17:25.538 INFO  [543134] [GatewayAuthenticator::authenticate@33] Start gateway authentication...
2022-08-16 18:17:25.538 INFO  [543134] [GatewayAuthenticator::login@46] Trying to login the gateway at https://.../ssl-vpn/login.esp with ...
2022-08-16 18:17:26.166 ERROR [543134] [GatewayAuthenticator::onLoginFinished@58] Failed to login the gateway at https://.../ssl-vpn/login.esp, Error transferring https://.../ssl-vpn/login.esp - server replied: Custom error
2022-08-16 18:17:26.166 INFO  [543134] [GatewayAuthenticator::doAuth@86] Perform the gateway prelogin at https://.../ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Linux
2022-08-16 18:17:26.265 INFO  [543134] [GatewayAuthenticator::onPreloginFinished@103] Gateway prelogin succeeded.
2022-08-16 18:17:26.265 INFO  [543134] [PreloginResponse::parse@26] Start parsing the prelogin response...
2022-08-16 18:17:26.266 INFO  [543134] [GatewayAuthenticator::samlAuth@161] Trying to perform SAML login with saml-method POST

DevTools listening on ws://127.0.0.1:12315/devtools/browser/...
Remote debugging server started successfully. Try pointing a Chromium-based browser to http://127.0.0.1:12315
2022-08-16 18:17:26.412 INFO  [543134] [SAMLLoginWindow::onResponseReceived@61] Trying to receive from ...
2022-08-16 18:17:27.221 INFO  [543134] [SAMLLoginWindow::onResponseReceived@61] Trying to receive from https://.../app/panw_globalprotect/.../sso/saml
2022-08-16 18:17:27.515 INFO  [543134] [SAMLLoginWindow::onResponseReceived@61] Trying to receive from https://login.okta.com/discovery/iframe.html
2022-08-16 18:17:27.688 INFO  [543134] [SAMLLoginWindow::onLoadFinished@104] Load finished https://.../app/panw_globalprotect/.../sso/saml