{"id":5075,"date":"2024-12-19T13:41:41","date_gmt":"2024-12-19T13:41:41","guid":{"rendered":"https:\/\/uni.hi.is\/helmut\/?p=5075"},"modified":"2025-01-20T17:55:09","modified_gmt":"2025-01-20T17:55:09","slug":"palo-alto-networks-globalprotect-vpn-on-debian-bookworm","status":"publish","type":"post","link":"https:\/\/uni.hi.is\/helmut\/2024\/12\/19\/palo-alto-networks-globalprotect-vpn-on-debian-bookworm\/","title":{"rendered":"Palo Alto Networks GlobalProtect VPN client on Debian Bookworm"},"content":{"rendered":"<p>To install a Palo Alto Networks GlobalProtect VPN client on Debian Bookworm, the following should in principle be sufficient<br \/>\n<code class=\"\" data-line=\"\"><br \/>\napt install openconnect network-manager-openconnect network-manager-openconnect-gnome<br \/>\n<\/code><\/p>\n<p>However, this did not work with KDE\/Plasma. I then tried logging in with Gnome as Desktop Environment and I got once shown the SSO (with MFA) web interface inside the the Openconnect window, but without further success, i.e. without establishing the VPN connection.<\/p>\n<p>Then, I downloaded from the assets at <a href=\"https:\/\/github.com\/yuezk\/GlobalProtect-openconnect\">https:\/\/github.com\/yuezk\/GlobalProtect-openconnect<\/a> the most recent amd64 deb:<br \/>\n<a href=\"https:\/\/github.com\/yuezk\/GlobalProtect-openconnect\/releases\/download\/v2.3.9\/globalprotect-openconnect_2.3.9-1_amd64.deb\">https:\/\/github.com\/yuezk\/GlobalProtect-openconnect\/releases\/download\/v2.3.9\/globalprotect-openconnect_2.3.9-1_amd64.deb<\/a><br \/>\nand installed a missing dependency using <code class=\"\" data-line=\"\">apt install libgdk-pixbuf2.0-0<\/code> and then installed the downloaded deb.<\/p>\n<p>I tried the graphical client (trial version working for 10 days only), but that did anyway not work. However, then the command line version finally worked:<br \/>\n<code class=\"\" data-line=\"\">sudo -E gpclient connect vpn.hi.is<\/code><br \/>\nIt opens (probably using libwebkit2gtk that Debian had installed) a graphical Window for the SSO\/MFA. Note that I had to re-run that command a couple of times until it finally worked.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>To install a Palo Alto Networks GlobalProtect VPN client on Debian Bookworm, the following should in principle be sufficient apt install openconnect network-manager-openconnect network-manager-openconnect-gnome However, this did not work with KDE\/Plasma. I then tried logging in with Gnome as Desktop Environment and I got once shown the SSO (with MFA) web interface inside the the [&hellip;]<\/p>\n","protected":false},"author":512,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[139469],"tags":[],"class_list":["post-5075","post","type-post","status-publish","format-standard","hentry","category-tech"],"_links":{"self":[{"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/posts\/5075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/users\/512"}],"replies":[{"embeddable":true,"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/comments?post=5075"}],"version-history":[{"count":16,"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/posts\/5075\/revisions"}],"predecessor-version":[{"id":5137,"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/posts\/5075\/revisions\/5137"}],"wp:attachment":[{"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/media?parent=5075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/categories?post=5075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/uni.hi.is\/helmut\/wp-json\/wp\/v2\/tags?post=5075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}