Sample Header Ad - 728x90

Stuck connection attempt with Palo GlobalProtect VPN: "looking for portal". What could the issue be?

2 votes
0 answers
114 views
I'm trying to use Palo GlobalProtect VPN to connect to some VPN server. The connection attempt is stuck at "looking for portal". What could the issue be? I use Kubuntu 24.04.1 LTS. enter image description here That works fine on Windows 10 21H2 Pro, so the VPN server is alive. --- From PanGPS.log:
P1004-T-488634688 02/03/2025 10:11:39:744 Debug(2092): Send response to client for request portal
P1004-T-648018240 02/03/2025 10:12:09:673 Debug( 370): WAIT_TIMEOUT
P1004-T-648018240 02/03/2025 10:12:09:673 Debug( 727): HipMonitorThread quits.
Full log:
P 982-T944278400 02/03/2025 10:24:30:275 Debug( 336): PanGPS, working directory is /opt/paloaltonetworks/globalprotect/
P 982-T944278400 02/03/2025 10:24:30:291 Info ( 539): ####################### Start PanGPS service (ver: 6.1.5-715) #######################
P 982-T944278400 02/03/2025 10:24:30:291 Info ( 540): Debug level is 5, log path is /opt/paloaltonetworks/globalprotect/
P 982-T944278400 02/03/2025 10:24:30:292 Info ( 541): User is (null), home is /root, login is (null)
P 982-T944278400 02/03/2025 10:24:30:292 Info ( 150): Predeployed log-path-service is not set
P 982-T944278400 02/03/2025 10:24:30:296 Info ( 439): Get OS info: Ubuntu 24.04.1 LTS
P 982-T944278400 02/03/2025 10:24:30:743 Debug( 464): Serial number is [HIDDEN]
P 982-T944278400 02/03/2025 10:24:30:831 Debug( 107): IsDaemon is 1
P 982-T944278400 02/03/2025 10:24:30:878 Info ( 121): PrelogonEnabled is 0
P 982-T944278400 02/03/2025 10:24:30:878 Info ( 504): cannot open /var/run/PanGPS.pid, assume no old instance running
P 982-T935331520 02/03/2025 10:24:30:878 Info ( 687): debug thread starts
P 982-T944278400 02/03/2025 10:24:31:095 Debug( 285): stopping split tunnel feature!
P 982-T944278400 02/03/2025 10:24:31:095 Debug(  27): split tunnel script dir /opt/paloaltonetworks/globalprotect/network/config
P 982-T944278400 02/03/2025 10:24:31:108 Debug( 397): Uninstalling iptables DNS chain...
P 982-T944278400 02/03/2025 10:24:32:681 Debug(  27): split tunnel script dir /opt/paloaltonetworks/globalprotect/network/config
P 982-T944278400 02/03/2025 10:24:32:682 Debug( 459): Uninstalling iptables Split Tunnel chain & routing tables...
sh: 1: realm: not found
P 982-T944278400 02/03/2025 10:24:33:894 Debug( 306): split tunnel stopped!
P 982-T944278400 02/03/2025 10:24:33:894 Debug(  61): psv init called
P 982-T944278400 02/03/2025 10:24:33:935 Info (2458): CPanMSServiceLinux::findJoinDomain: szDomainName is : 
P 982-T944278400 02/03/2025 10:24:33:935 Debug(  69): PanMSServiceLinux:ctor: m_szJoinDomain , m_szJoinDomainRaw 
P 982-T944278400 02/03/2025 10:24:33:935 Debug(  72): PanMSServiceLinux:ctor: m_domainName , m_domainNameRaw 
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 685): Service-only is no
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 757): Kerberos auth, stopOnKerberosFail=0()
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 762): Prefer ipv6 is yes.
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 785): CPanMSService::Init connect timeout 5, received timeout 30, portal timeout 5 
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 822): CPanMSService::Init fips: fipsc-cc-mode-enabled  
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 832): CPanMSService::Init enable-fips-cc-mode  
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 843): CPanMSService::Init fips: m_bFipsModeRequired 0 
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 238): GetValueBinary size 6
P 982-T944278400 02/03/2025 10:24:33:943 Debug( 921): Mac address is [HIDDEN]
P 982-T944278400 02/03/2025 10:24:33:943 Debug(2416): pan_get_gp_user_agent szGpUserAgent ua is PAN GlobalProtect/6.1.5-715 (Linux Ubuntu 24.04.1 LTS).
P 982-T944278400 02/03/2025 10:24:33:943 Info (10935): CheckPrelogon: Portal is , PrelogonEnabled is no
P 982-T944278400 02/03/2025 10:24:34:027 Debug( 971): override-cc-username is no
P 982-T944278400 02/03/2025 10:24:34:029 Debug(5151): event log file is /opt/paloaltonetworks/globalprotect//pan_gp_event.log
P 982-T944278400 02/03/2025 10:24:34:030 Debug( 981): Event log thread started
P 982-T944278400 02/03/2025 10:24:34:030 Debug( 167): Time zone GMT offset is -480
P 982-T924845760 02/03/2025 10:24:34:030 Debug(5120): event log thread started.
P 982-T944278400 02/03/2025 10:24:34:034 Info (10824): Portal config does not exist, try registry/plist
P 982-T944278400 02/03/2025 10:24:34:034 Debug( 354): default cert path is /etc/ssl/certs
P 982-T944278400 02/03/2025 10:24:34:034 Debug( 379): default private key path is /etc/ssl/private
P 982-T944278400 02/03/2025 10:24:34:034 Debug(1485): cfg no client cert.
P 982-T944278400 02/03/2025 10:24:34:034 Debug( 259): DLSA- agent is enable, restore lar during start up
P 982-T944278400 02/03/2025 10:24:34:034 Debug( 261): DLSA- Pan LAR file is /opt/paloaltonetworks/globalprotect/pan_lar.dat
P 982-T944278400 02/03/2025 10:24:34:035 Debug( 266): LAR file does not exist. 
P 982-T944278400 02/03/2025 10:24:34:035 Debug(  72): CControlManagerLinux::StartServer() isFipsModeRequired() 0
P 982-T944278400 02/03/2025 10:24:34:035 Debug( 554): Start tunnel driver.
P 982-T944278400 02/03/2025 10:24:34:038 Info ( 114): Service callback table gets set.
P 982-T944278400 02/03/2025 10:24:34:038 Debug( 231): set virtual interface driver started as yes
P 982-T944278400 02/03/2025 10:24:34:038 Debug( 592): Virtual interface is started
P 982-T903874240 02/03/2025 10:24:34:038 Info ( 102): Start ServerThread
P 982-T903874240 02/03/2025 10:24:34:038 Info (  71): It is running in Ubuntu.
P 982-T903874240 02/03/2025 10:24:34:038 Debug(10961): CPanMSService::StartPrelogonThread DaemonProcess: yes, InPrelogon: no
P 982-T903874240 02/03/2025 10:24:34:038 Debug(13545): Enforcer is not enabled
P 982-T914360000 02/03/2025 10:24:34:049 Debug( 440): RecvThread started.
P 982-T903874240 02/03/2025 10:24:44:672 Info ( 202): New Connection(127.0.0.1:34552) with socket(6)
P 982-T903874240 02/03/2025 10:24:44:672 Debug( 280): Checking connected App begin ...
P 982-T903874240 02/03/2025 10:24:45:205 Debug( 308): Connected by PanGPA from GP folder
P 982-T903874240 02/03/2025 10:24:45:205 Debug(1684): PanGPA pid 1423, uid 1000, gid 1000
P 982-T903874240 02/03/2025 10:24:45:205 Debug( 321): CPanListenerLinux::InitialConnectionTasks: Performing initial tasks upon GPA connection
P 982-T903874240 02/03/2025 10:24:45:384 Debug( 296): Checking connected App completed.
P 982-T903874240 02/03/2025 10:24:45:389 Info ( 542): msgtype = portal
P 982-T903874240 02/03/2025 10:24:45:389 Debug(2778): ----Portal Processing starts----
P 982-T903874240 02/03/2025 10:24:45:389 Debug(2808): User profile type is 0(not roaming)
P 982-T903874240 02/03/2025 10:24:45:391 Debug(2841): pg, source = 0, old source is 0
P 982-T903874240 02/03/2025 10:24:45:391 Debug(2863): pg, preferred gateway not set in message, old prefergateway=:)
P 982-T903874240 02/03/2025 10:24:45:391 Debug(2921): CheckUpdate is false.
)P 982-T903874240 02/03/2025 10:24:45:391 Debug(2936): portal-certificate-verification is yes
P 982-T903874240 02/03/2025 10:24:45:391 Debug(2993): No saml-load-cache tag.
P 982-T903874240 02/03/2025 10:24:45:391 Debug(3016): no saml-auth-error tag.
P 982-T903874240 02/03/2025 10:24:45:391 Debug(3029): allow-cached-portal is yes
P 982-T903874240 02/03/2025 10:24:45:391 Debug(3072): NewWinUser is f, WinUser is , PreviousSwitchOffMsg is false
P 982-T903874240 02/03/2025 10:24:45:391 Debug(3074): GetPrelogonStatus() 0, m_userName , m_preUsername 
P 982-T903874240 02/03/2025 10:24:45:391 Debug(3932): Grace period is 0
P 982-T903874240 02/03/2025 10:24:45:391 Debug(7391): StopThreads starts:
P 982-T903874240 02/03/2025 10:24:45:391 Debug(7394): threads have already stopped, StopThreads ends.
P 982-T903874240 02/03/2025 10:24:45:391 Debug(7355): StartThreads starts:
P 982-T893388480 02/03/2025 10:24:45:391 Debug(5624): CaptivePortalDetectionThread: captive portal detection thread starts.
P 982-T893388480 02/03/2025 10:24:45:391 Debug(5789): CaptivePortalDetectionThread: wait (-1 ms) for captive portal detection event.
P 982-T882902720 02/03/2025 10:24:45:391 Debug(5970): NetworkDiscoverThread: network discover thread starts.
P 982-T882902720 02/03/2025 10:24:45:391 Debug(5998): NetworkDiscoverThread: wait for fed mandate event.
P 982-T792725184 02/03/2025 10:24:45:391 Debug(6985): NetworkConnectionMonitorThread: network connection monitor thread starts.
P 982-T761267904 02/03/2025 10:24:45:391 Debug(1690): RouteReadThread entered.
P 982-T771753664 02/03/2025 10:24:45:392 Debug( 176): Start HipMissingPatchThread
P 982-T771753664 02/03/2025 10:24:45:392 Debug( 407): HipMissingPatchThread started...
P 982-T782239424 02/03/2025 10:24:45:392 Debug( 167): Start HipCheckThread
P 982-T782239424 02/03/2025 10:24:45:392 Debug( 210): HipCheckThread started...
P 982-T782239424 02/03/2025 10:24:45:392 Debug( 216): HipCheckThread: wait for hip check event for 3600000 ms);
P 982-T903874240 02/03/2025 10:24:45:392 Debug(3104): Update GP disable status to false
P 982-T803210944 02/03/2025 10:24:45:392 Debug(6687): HipReportThread: HipReportThread starts up.
P 982-T803210944 02/03/2025 10:24:45:392 Debug(6713): HipReportThread: wait for HIP report ready event.
P 982-T750782144 02/03/2025 10:24:45:393 Debug( 186): Start HipMonitorThread
P 982-T750782144 02/03/2025 10:24:45:393 Info ( 723): HipMonitorThread starts
P 982-T903874240 02/03/2025 10:24:45:395 Info (  49): It is running in Ubuntu.
P 982-T903874240 02/03/2025 10:24:45:395 Debug(11569): Saved password is empty.
P 982-T903874240 02/03/2025 10:24:45:395 Debug(3301): Portal , user ___empty_username___, logonDomain , saved user , path /home/dernoncourt/.GlobalProtect/
P 982-T903874240 02/03/2025 10:24:45:395 Debug(3368): use proxy is 1
P 982-T903874240 02/03/2025 10:24:45:395 Debug(11586): SSO password is empty
P 982-T903874240 02/03/2025 10:24:45:395 Debug(3564): m_preUsername 
P 982-T903874240 02/03/2025 10:24:45:395 Debug(11546): Password is empty.
P 982-T903874240 02/03/2025 10:24:45:395 Debug(8676): Empty user for GetCachedPortalCfgOldNewFileName
P 982-T903874240 02/03/2025 10:24:45:395 Debug(3584): CheckCachedPortalForPrelogon 0, PrelogonNeedTimeout 0, RenameTimeout -1, userName ___empty_username___, preUsername 
P 982-T903874240 02/03/2025 10:24:45:395 Debug(3773): Use ssl tunnel is no
P 982-T903874240 02/03/2025 10:24:45:395 Debug(3783): bCheckCachedPortalForPrelogon: 0, m_bOnDemand: 0
P 982-T903874240 02/03/2025 10:24:45:395 Debug(7519): --Set state to Retrieving configuration...
P 982-T903874240 02/03/2025 10:24:45:444 Debug(8733): pszPortal is empty. Returns false.
P 982-T903874240 02/03/2025 10:24:45:444 Debug(7519): --Set state to Disconnected
P 982-T903874240 02/03/2025 10:24:45:447 Debug(2092): Send response to client for request portal
P 982-T750782144 02/03/2025 10:25:15:394 Debug( 370): WAIT_TIMEOUT
P 982-T750782144 02/03/2025 10:25:15:394 Debug( 727): HipMonitorThread quits.
Asked by Franck Dernoncourt (5533 rep)
Feb 3, 2025, 04:32 PM
Last activity: Feb 3, 2025, 06:31 PM