Global Protect in Linux error

cancel
Showing results for 
Search instead for 
Did you mean: 

Global Protect in Linux error

L4 Transporter

Hi,

 

We are trying to connect to our VPN using Global Protect client in a Fedora laptop. We have tested the following articles: https://docs.paloaltonetworks.com/globalprotect/4-1/globalprotect-app-user-guide/globalprotect-app-f...


but we are getting a certificate error:

pcdavid - david - / home / david
· Globalprotect connect --gateway 191.xx.xx.2xx -u David
Connecting ...
Connecting ...
Failed to connect to 191.xx.xx.2xx
Error: Gateway 191.xx.xx.2xx: The server certificate is invalid. Please contact your IT administrator.

We have tried to import the certificate and it seems that it has done it correctly.

We have also tested it with different certificate formats (crt and p12).

 

So do you have ny manual about working GP with linux? or what is wrong for getting this certificate error.

 

6 REPLIES 6

L4 Transporter

AFAIK Fedora is not a supported distrobution. PAN actually hard codes the allowed distros into the compiled binary. There are ways around this but I will not post that informtion here (you can find it using a Google search) 

L0 Member

So I get this error too, but on Centos

 

Oddly enough I don't get this certificate error with connecting to the same gateways via another portal. 

 

The main differences is the other portal has a GP license, which according to support is not needed. 

 

No other OS has the issue. 

@ccscott,

Support is definitely wrong on that one. The Linux GlobalProtect Agent is a licensed feature, if you don't have a GlobalProtect license the Linux agent isn't going to work.

I stopped trying to make the GlobalProtect for Linux Client work several months ago.  Any "programmer" hard coding specific Distribution uname match strings into their "Client" to narrow their Client to 2-3 distros, is not taking the subject seriously enough.

Simply switched to using NetworkManager with the NetworkManager-openconnect add-on.  There is a Profile template built-in for GlobalProtect, it works like a charm on Fedora (32), and OpenSuSE (Tumbleweed).

Good luck out there!

 

Correct support for this client is not great. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!