search

yuezk / GlobalProtect-openconnect

A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, Yubikey, and client certificate authentication, etc.
GNU General Public License v3.0
1.2k stars 140 forks source link

Cannot install in Ubuntu 24.04 LTS, GNOME 46 #351

Open sfa77 opened 2 months ago

sfa77 commented 2 months ago

Describe the bug Cannot install the package in Ubuntu 24.04 LTS, GNOME 46

Logs sudo apt-get install globalprotect-openconnect Reading package lists... Done Building dependency tree... Done Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation:

The following packages have unmet dependencies: globalprotect-openconnect : Depends: libjavascriptcoregtk-4.0-18 but it is not Depends: libwebkit2gtk-4.0-37 (>= 2.21.1) but it is not installable E: Unable to correct problems, you have held broken packages.

Environment:

eitzenbe commented 2 months ago

I am affected by this too, seems the lib versions have moved up on ubuntu 24.04

yuezk commented 2 months ago

Hi @sfa77 @eitzenbe libjavascriptcoregtk-4.0-18 and libwebkit2gtk-4.0-37 were deleted (status is Deleted) in the Ubuntu 24.04 repository. Current workaround is to download and install these packages manually before installing globalprotect-openconnect.

wget http://launchpadlibrarian.net/704701349/libwebkit2gtk-4.0-37_2.43.3-1_amd64.deb
wget http://launchpadlibrarian.net/704701345/libjavascriptcoregtk-4.0-18_2.43.3-1_amd64.deb

sudo dpkg --install *.deb
eitzenbe commented 2 months ago

THANX - installation succeeds and gui comes up but issues an error:

[2024-04-28T08:09:39Z WARN gpgui::app::app_initializer] Can't read the config key from the keyring: Couldn't access platform secure storage: SS error: result not returned from SS API [2024-04-28T08:09:40Z WARN gpapi::utils::window] Failed to raise window: Failed to raise window: GlobalProtect [2024-04-28T08:09:46Z INFO gpgui::config::private_data] Generating config key [2024-04-28T08:09:46Z WARN gpgui::app::app_initializer] Can't read the config key from the keyring: Couldn't access platform secure storage: SS error: result not returned from SS API

step by step :)

yuezk commented 2 months ago

@eitzenbe, I encountered this problem yesterday and it is back to normal after a restart. And what' the output of ps aux | grep 'gnome-keyring\|kwalletd5' | grep -v grep?

eitzenbe commented 2 months ago

yields /usr/bin/gnome-keyring-daemon --foreground --components=pkcs11,secrets --control-directory=/run/user/1000/keyring as local user, fwiw: I hadn't set up my wallet in KDE, did that, rebooted, but still same error

eitzenbe commented 2 months ago

https://github.com/microsoft/vscode/issues/187380

seems to be related?

yuezk commented 2 months ago

Yes. should be the same problem, but this client currently doesn't support the file keychain. Others encountered this issue and resolved it in this comment in https://github.com/yuezk/GlobalProtect-openconnect/issues/321#issuecomment-1938876002 Not sure whether it works for you.

And what's your desktop environment, KDE?

Anyway, I will add the file-based fallback keychain soon.

eitzenbe commented 2 months ago

not an expert on that gnome-keyring/kwallet issue, but tried and failed, running KDE ... Any timeline for the "support on filebased" ? No pressure here, THANX for the quick support so far and the work you did!

yuezk commented 2 months ago

It should be quick, I'm planning to release a new version with several enhancements.

yuezk commented 2 months ago

Add the link to the official issue: https://bugs.launchpad.net/ubuntu/+source/webkit2gtk/+bug/2061914

yuezk commented 2 months ago

I'm afraid it is impractical to ask the Ubuntu team to reintroduce webkit2gtk-4.0.

Tauri 1.x, which depends on webkit2gtk-4.0. Tauri started to use webkit2gtk-4.1 in 2.0, but it has not been released yet. Since few breaking changes exist between webkit2gtk-4.1 and webkit2gtk-4.0, I plan to port the Tauri 1.x to use webkit2gtk-4.1. I have managed to make this work but with one error. And I'm currently working on it.

yuezk commented 2 months ago

not an expert on that gnome-keyring/kwallet issue, but tried and failed, running KDE ... Any timeline for the "support on filebased" ? No pressure here, THANX for the quick support so far and the work you did!

Hi @eitzenbe it has been fixed in 2.2.0, you can follow this instruction to upgrade it in 24.04.

https://github.com/yuezk/GlobalProtect-openconnect?tab=readme-ov-file#ubuntu-2404

eitzenbe commented 2 months ago

works perfectly, also sso via azure works, THANX A TON!