topic Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04? in GlobalProtect Discussions

Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

Jonas_thell — Mon, 27 Mar 2023 13:22:30 GMT

We had a quick test and still got the SSL handshake failure. Anyone got it to work and can share anything on how?

The version 6.1.0 is supposed to work on Ubuntu 22.04.

Thanks!

Jonas

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

JonGross — Mon, 27 Mar 2023 16:09:47 GMT

Yes, we have it working.

When connecting to Global Protect and authenticating to Azure SAML, the embedded browser on Linux machines will fail during TLS handshaking . Force the client to use Firefox or what ever is the default browser.

Stop the Global Protect service.

sudo systemctl stop gpd.service

Create a new entry in the /opt/paloaltonetworks/globalprotect/pangps.xml configuration file. Set the default-browser value to yes under <Settings>.

Example:

<?xml version="1.0" encoding="UTF-8"?>
<GlobalProtect>
   <Settings>
       <default-browser>yes</default-browser>

<Settings>

Reboot.

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

Jonas_thell — Thu, 30 Mar 2023 11:07:01 GMT

Thank you for this solution!

Jonas

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

raghavendra.badiger — Tue, 09 May 2023 15:17:59 GMT

This doesn't work for me, I get following error:

Authentication Failed

Please contact the adminsitrator for further assistance

Error code: -1

I have SAML authentication setup and authentication is successful on the machine. Has anyone seen this error before?

Regards,

Raghav

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

JonGross — Tue, 09 May 2023 15:29:33 GMT

You can try this. It disables OpenSSL version 3. This is using the GUI version on Ubuntu 22.

Modify the file /usr/lib/ssl/openssl.cnf.
At the end of the file you’ll see:

[system_default_sect]
CipherString = DEFAULT:@SECLEVEL=2

Change that to:
[system_default_sect]
CipherString = DEFAULT:@SECLEVEL=1
Options = UnsafeLegacyRenegotiation

Reboot and connect to the GP VPN portal.

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

raghavendra.badiger — Mon, 15 May 2023 07:25:55 GMT

I tried this too, since Ubuntu 22 has issues with SSL.

Both GUI and CLI GlobalProtect doesn't work, tried multiple reboots as well.

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

juan.molleda — Mon, 12 Jun 2023 10:50:11 GMT

Using Okta, the GUI version works for me, but I am struggling to enable the CLI version

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

cdoublejj — Thu, 07 Nov 2024 15:15:13 GMT

i get 90% of the way there but, the 365 auth web page says to click here to relaunch G.P. and GP never launches. PopOs (Ubuntu) 22.04 LTS

Re: Anyone got Global Protect 6.1.0 for Linux to work on Ubuntu 22.04?

cdoublejj — Thu, 07 Nov 2024 15:59:47 GMT

EDIT: well what ever happened, the continue button the cert warning windows is now permanently greyed out. it says the identity can't be verified, continue anyway is greyed out.