Global Protect new Linux UI

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Global Protect new Linux UI

L4 Transporter

I have the GP Linux CLI client working without any issues, however I wanted to test the UI client that just came out (5.1.0) Does anyone know how to actually use this? The PAN documentation has not been updated to mention this new version or the Linux UI yet. Installing it goes fine but I do not see anything installed to my desktop and when attempting to launch it from a command shell all I see is:

 

"Unable to run GlobalProtect CLI while GlobalProtect UI is running. Please consider installing the CLI only install package."

 

Which is great... but how do I find and launch the UI from my desktop? *confused*

18 REPLIES 18

You can blacklist the PanGPUI process from being saved in KDE session saves with:

kwriteconfig --file ksmserverrc --group General --key excludeApps PanGPUI

Warning: this will overwrite anything you have for that key already. it'll also remove any comments in your ksmsserverrc file. This is a PER-USER change as is. (you could create an override in /etc/xdg with the same effect for all users. 

Or...  manually:

kcmshell5 kcmsmserver

And either selecting "Start with an empty session", use "Restore manually saved session" (that doesn't have PanGPUI in it already), or if using "Restore previous session", specify: "PanGPUI" in the field titled "Applications to be excluded from sessions:"

Another thing that's REALLY annoying is:

/etc/profile.d/PanMSInit.sh

 

(guh, no POSIX/Bash Shell language in thisforum editor's <code> widget???)

#!/bin/bash
PANGPA=/opt/paloaltonetworks/globalprotect/PanGPA
pgrep -u $USER PanGPA > /dev/null 2>&1
if [ $? -ne 0 ]; then
  if [ -f $PANGPA ]; then 
    $PANGPA start &
  fi
fi

 

This unconditionally spins off a PanGP process for ALL interactive users.  That's absurd.  It also means, that when you login interactively, you get:

 

# exit
logout
There are running jobs.
[1]+ Running $PANGPA start &

#

 

requiring you exit twice, orkill thesejobs.  Spinning that process up should be done some other way (suid exe called by the user-agent (globalprotect | panGUI) or somethign else. 

 

At least please check if it's the 'root' user and don't do it.

 

thanks,

--stephen

L0 Member

Use command 'globalprotect launch-ui' in terminal whenever you want to view the UI. 

L0 Member

From terminal:

(/opt/paloaltonetworks/globalprotect/PanGPUI &> /dev/null &)

All one line and include parentheses.

I think newer versions also allow you to do it from the globalprotect cli. From terminal:

globalprotectlaunch-ui

Or something to that effect. Just hit tab while in the globalprotect cli and it should show all the options.

  • 32881 Views
  • 18 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!