topic systemd-resolved support for GlobalProtect Linux in General Topics

systemd-resolved support for GlobalProtect Linux

mickael — Fri, 10 Jul 2020 12:47:04 GMT

My system is using systemd-resolved to manage name resolution.

my /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf

When I connect to GP, my systemd is not aware that new DNS server and search domains are available.

Is there a way to support this ? (like a post connection hook script)

(note that /opt/paloaltonetworks/globalprotect/network/config/resolv.conf is properly filled)

Re: systemd-resolved support for GlobalProtect Linux

BPry — Fri, 10 Jul 2020 14:56:48 GMT

@mickael,

I'm not actually sure that the Linux application supports the ability for post-connection scripts. This would be a relatively easy script to do though, as you would simply modify the symlink between GlobalProtect's resolv.conf and and stub-resolv.conf. I'm just not sure that the Linux agent actually supports the ability to run scripts like the macOS and Windows agents.

Re: systemd-resolved support for GlobalProtect Linux

smithplatts — Tue, 06 Apr 2021 07:02:25 GMT

Distribution-specific resolution, but on Ubuntu 17.10 and onwards, the package 'resolvconf' needs to be installed. Work was done between Ubuntu 17.04 and 17.10 to ensure that 'resolvconf' would integrate seamlessly into 'systemd-resolved', as a ancillary process to help integrate applications and configurations with systemd.

I have confirmed this in our environment, with 18.04 and 20.04 working exactly as required once the 'resolvconf' package is installed.

Re: systemd-resolved support for GlobalProtect Linux

juan.molleda — Thu, 10 Aug 2023 10:39:52 GMT

This really helped. Thank you so much!!