> I can offer a bit of context. I had possession of this laptop originally, > running Ubuntu 18.04. I initially configured the VPN connection a few years > ago, and it worked successfully on a day-to-day basis up until I last tested > it a few weeks ago. (I have forgotten any headaches that may have been > involved in the initial setup.) It should be the current version in the > Ubuntu 18.04 repos, so... openconnect 7.08? > > In case it's relevant, the VPN connection requires a smart card with a PIN > for authentication. > > Upon leaving the organization, I transferred the laptop to Amirali (created a > new user, deleted my old one), and unfortunately the VPN connection didn't > "just work" for him. We tried bypassing the GUI by running openconnect from > the command line, which resulted in the output Amirali has shown previously. > I'm confident I've never seen the "Error in the push function" message > before, so I suggested Amirali reach out to the OpenConnect community for > assistance.
Huh. So, running the EXACT SAME openconnect binary on the EXACT SAME laptop and connecting to the EXACT SAME organization's VPN… it work(ed,s) for one of you, but not for the other? 🤷🏻♂️ That's interesting and exceedingly strange, but we'd still need a bunch more information here in order to make any progress. The CLI is indeed much better than the GUI for logging and debugging. Please confirm *exactly* what version you're running (`openconnect --version`) including what crypto library it's built against. If it is OpenConnect v7.08, that's very old, and there have been a bunch of smartcard-related fixes since then. Try building the latest development version from source (https://gitlab.com/openconnect/openconnect/commits/master), or failing that, at least upgrade to v8.10 (the latest release, although it's now >> 1 year old). If upgrading to a newer version doesn't help, a detailed log (`openconnect -vvv --dump-http-traffic`) will likely provide more information. -Dan On Thu, Nov 18, 2021 at 7:17 PM Mitchell Dorrell <m...@udel.edu> wrote: > > Hello Dan, > > I can offer a bit of context. I had possession of this laptop originally, > running Ubuntu 18.04. I initially configured the VPN connection a few years > ago, and it worked successfully on a day-to-day basis up until I last tested > it a few weeks ago. (I have forgotten any headaches that may have been > involved in the initial setup.) It should be the current version in the > Ubuntu 18.04 repos, so... openconnect 7.08? > > In case it's relevant, the VPN connection requires a smart card with a PIN > for authentication. > > Upon leaving the organization, I transferred the laptop to Amirali (created a > new user, deleted my old one), and unfortunately the VPN connection didn't > "just work" for him. We tried bypassing the GUI by running openconnect from > the command line, which resulted in the output Amirali has shown previously. > I'm confident I've never seen the "Error in the push function" message > before, so I suggested Amirali reach out to the OpenConnect community for > assistance. > > I hope this additional context helps! > Mitchell Dorrell > > On Thu, Nov 18, 2021, 20:25 Daniel Lenski <dlen...@gmail.com> wrote: >> >> On Thu, Nov 18, 2021 at 1:33 PM Amirali Hossein <amirali....@gmail.com> >> wrote: >> > How should I resolve "Error in the push function."? >> >> Can you give us more information? Start with the complete output of >> `openconnect --version`, and what operating system you're running on. >> >> All I can tell from the messages ("SSL connection failure" and "Failed >> to obtain WebVPN cookie") is that you're using a GnuTLS-based build, >> and it must be older than >> https://gitlab.com/openconnect/openconnect/-/commit/ce8c6968f524aaa6d8387a3c63e9cdbce88f3c59. >> >> > VPN Log: >> >> What is this "VPN Log"? How was it generated? It doesn't appear to >> contain any useful information at all. >> >> Dan >> >> _______________________________________________ >> openconnect-devel mailing list >> openconnect-devel@lists.infradead.org >> http://lists.infradead.org/mailman/listinfo/openconnect-devel _______________________________________________ openconnect-devel mailing list openconnect-devel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/openconnect-devel
