Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1580192 - Package openconnect-gp -- there isnt globalprotect alternative for palo alto vpn
Summary: Package openconnect-gp -- there isnt globalprotect alternative for palo alto vpn
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: openconnect
Version: 28
Hardware: Unspecified
OS: Linux
unspecified
urgent
Target Milestone: ---
Assignee: David Woodhouse
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-05-21 00:57 UTC by Jose Mantilla
Modified: 2019-01-11 04:34 UTC (History)
3 users (show)

Fixed In Version: openconnect-8.01-1.fc29
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-01-11 04:34:01 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Jose Mantilla 2018-05-21 00:57:17 UTC 
Description of problem:

There isn't the package openconnect-gp --openconnect extended with glopalprotect -- to connect with Palo Alto vpn, please look at the:

https://github.com/dlenski/network-manager-openconnect
https://github.com/dlenski/openconnect/blob/globalprotect/README.md

Unfortunately, VPNC doesn't work with Palo Alto and there isn't alternatives with global protect in Fedora -- exist with android, ios, ubuntu but no with Fedora nor Rhel.

Version-Release number of selected component (if applicable):


How reproducible:
Try to connect using vpns

Steps to Reproduce:
1. dnf install vpnc
2. configure the user, pass, group and group pass in a config file.
3. $sudo vpnc file.conf created previously

Actual results:
vpnc: no response from target

Expected results:
Connection

Additional info:
The alternative is the openconnect extended with GP protocol --global protect-- but doesnt work with Fedora nor Rhel nor Centos
Comment 1 David Woodhouse 2018-05-21 07:32:10 UTC 
We are →← this close to having GP support merged upstream. Just a few trivial memory leak issues left, IIRC.

I think I'm waiting for those to be fixed and for Dan to send a (hopefully) final pull request. Apologies if that's already happened and I've missed it.

I'm planning to do a new OpenConnect release once the GP support is merged, and I've rounded up anything else that's pending (I know Nikos has one or two patches I haven't applied yet).
Comment 2 Scott Williams 2018-08-14 20:15:00 UTC 
It has been merged upstream for openconnect - https://www.infradead.org/openconnect/changelog.html
Comment 3 Scott Williams 2018-08-14 20:19:35 UTC 
I've been running openconnect off of the dlenski repo for work for almost a year, so I would be happy to help you test this now that it's merged upstream.
Comment 4 Scott Williams 2018-10-22 17:03:08 UTC 
Any update on this since it's been merged upstream?  I'd love to quit compiling it from a git repo on my system.
Comment 5 Scott Williams 2018-12-18 20:20:05 UTC 
Any update on this?  We had another request about this in the #Fedora channel on IRC today and we advised them to build openconnect from the github repo directly.
Comment 6 Fedora Update System 2019-01-07 07:43:02 UTC 
openconnect-8.01-1.fc29 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2019-267b29539a
Comment 7 Fedora Update System 2019-01-08 02:04:54 UTC 
openconnect-8.01-1.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-267b29539a
Comment 8 Scott Williams 2019-01-10 22:51:47 UTC 
Looks good here.  I'm able to connect via openconnect --protocol=gp .  It looks like it's not yet enabled in the NetworkManager-openconnect{,-gnome}, but that seems like a case where upstream hasn't caught up to v8 yet.
Comment 9 Fedora Update System 2019-01-11 04:34:01 UTC 
openconnect-8.01-1.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.