GP 5.2.6 - Post-VPN-Connect error

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

GP 5.2.6 - Post-VPN-Connect error

L2 Linker

Hi 

 

Just wondering if anyone is seeing this issue by chance on windows with post-vpn-connect on GP 5.2.6 I am pretty sure it worked fine with older versions... but we have had other bugs with the older client so can't really roll back

 

Scenario 1 - If a machine is rebooted the behaviour we see is the post connect command is called however it errors out  "Failed to open process 0. Error 87"

 

(P6440-T10060)Debug(3390): 05/21/21 16:45:58:179 Full path is "C:\LocalData\_temp\test.bat"
(P6440-T10060)Debug(3395): 05/21/21 16:45:58:179 Full command is "C:\LocalData\_temp\test.bat"
(P6440-T10060)Debug( 181): 05/21/21 16:45:58:181 Run cmd "C:\LocalData\_temp\test.bat" in session -1 as user
(P6440-T10060)Debug( 265): 05/21/21 16:45:58:194 didn't find the specific process.
(P6440-T10060)Error(3420): 05/21/21 16:45:58:195 Failed to open process 0. Error 87
(P6440-T10060)Error(3472): 05/21/21 16:45:58:195 Failed to launch command. Error 87. Command "C:\LocalData\_temp\test.bat" as user, timeout 0.
(P6440-T10060)Debug(3475): 05/21/21 16:45:58:195 Result is false for run command "C:\LocalData\_temp\test.bat". as user, timeout 0

 

Scenario 2 - Log out and log back in the post connect command is not called at all do not see any event in the log file for it

 

 

Scenario 3 - Refresh the VPN client connection the command is called and it runs fine with no issues

 

(P6400-T2680)Debug(3525): 05/21/21 16:39:39:897 Expanded "C:\LocalData\_temp\test.bat" to "C:\LocalData\_temp\test.bat"
(P6400-T2680)Debug( 190): 05/21/21 16:39:39:897 Vpn event post-vpn-connect has empty checksum
(P6400-T2680)Debug( 193): 05/21/21 16:39:39:897 Vpn event post-vpn-connect is valid
(P6400-T2680)Debug(3368): 05/21/21 16:39:39:897 Command file is "C:\LocalData\_temp\test.bat". Parameters
(P6400-T2680)Debug(3390): 05/21/21 16:39:40:034 Full path is "C:\LocalData\_temp\test.bat"
(P6400-T2680)Debug(3395): 05/21/21 16:39:40:034 Full command is "C:\LocalData\_temp\test.bat"
(P6400-T2680)Debug( 181): 05/21/21 16:39:40:037 Run cmd "C:\LocalData\_temp\test.bat" in session 2 as user
(P6400-T2680)Error( 277): 05/21/21 16:39:40:057 WTSQueryUserToken failed. Error: 5
(P6400-T2680)Error( 318): 05/21/21 16:39:40:066 RunProcessIntoDifferentSession: failed to SetTokenInformation. Error: 1314
(P6400-T2680)Debug(3432): 05/21/21 16:39:40:158 Successfully launched "C:\LocalData\_temp\test.bat" as user, timeout 0. Pid 3132

1 REPLY 1

L2 Linker

Talking to palo support they say this expected behaviour post-vpn-connect is not support in pre-logon states

  • 2060 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!