Matching client config not found on GlobalProtect
I can't connect to GlobalConnect VPN. When I use the command without the usergroup, I recieve the following output
openconnect --protocol=gp -u <myusername> --servercert pin-sha256:<certificate> --passwd-on-stdin <vpn-server-ip-address> <<< $(grep pass vpn | cut -d: -f2)
POST https://<vpn-server-ip-address>/global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Linux
Connected to <vpn-server-ip-address>:443
SSL negotiation with <vpn-server-ip-address>
Server certificate verify failed: signer not found
Connected to HTTPS on <vpn-server-ip-address> with ciphersuite (TLS1.2)-(RSA)-(AES-256-GCM)
Enter login credentials
POST https://<vpn-server-ip-address>/global-protect/getconfig.esp
Failed to parse server response
Failed to obtain WebVPN cookie
After a little bit of googling, and reading issues I found out about the usergroup
option. When I added it with gateway
usergroup, I recieved a different
openconnect --protocol=gp -u <myusername> --servercert pin-sha256:<certificate> --passwd-on-stdin <vpn-server-ip-address> --usergroup gateway <<< $(grep pass vpn | cut -d: -f2)
Connected to <vpn-server-ip-address>:443
SSL negotiation with <vpn-server-ip-address>
Server certificate verify failed: signer not found
Connected to HTTPS on <vpn-server-ip-address> with ciphersuite (TLS1.2)-(RSA)-(AES-256-GCM)
Enter login credentials
POST https://<vpn-server-ip-address>/ssl-vpn/login.esp
GlobalProtect login returned authentication-source=<host-company>-LocalDB-ldap
GlobalProtect login returned usually-equals-4=4
GlobalProtect login returned usually-equals-unknown=unknown
POST https://<vpn-server-ip-address>/ssl-vpn/getconfig.esp
Matching client config not found
Creating SSL connection failed
I am new to openconnect and VPNs in general, can you guide me to what can be the cause of this problem, and how I can debug it.
Notes
- I don't have access to the server configuration
- I can connect to the vpn using the same user on a MAC machine, using the GlobalProtect client.