Hi folks,
I've spent countless hours unsuccessufully trying to connect my Pulse Secure 9.0R4 Linux Client to my company's VPN. My IT support didn't give me a clue, since his server log shows that authentication is successful but afterwards connection is immediatly lost. Digging into log file it looks that somehow the client side configures the routes, but it can neither assign those routes to an already existing device, nor create a temporary tun device.
20191104113348.406239 pulsesvc[p1836.t1836] pulseui.info Updating Preferred certificate:Harem for connection (pulseCertAuth.cpp:103)
20191104113348.517661 pulsesvc[p1836.t1836] pulseui.info libproxy load failed /usr/lib/libproxy.so.1: não é possível abrir arquivo compartilhado: Arquivo ou diretório inexistente
(pulseProxy.cpp:183)
20191104113348.517683 pulsesvc[p1836.t1836] pulseui.info Proxy used is NULL (pulseUi.cpp:824)
20191104113348.517689 pulsesvc[p1836.t1836] pulseui.info Proxy Host is NULL (pulseUi.cpp:825)
20191104113348.517694 pulsesvc[p1836.t1836] pulseui.info Proxy Port is 0 (pulseUi.cpp:826)
20191104113348.517698 pulsesvc[p1836.t1836] pulseui.info Proxy UserName is NULL (pulseUi.cpp:827)
20191104113348.517703 pulsesvc[p1836.t1836] pulseui.info Proxy Password is NULL (pulseUi.cpp:828)
20191104113348.517707 pulsesvc[p1836.t1836] pulseui.error Proxy is not used/set (pulseUi.cpp:858)
20191104113348.517711 pulsesvc[p1836.t1836] pulseui.info Proxy object is delete (pulseProxy.cpp:28)
20191104113348.522111 pulsesvc[p1836.t1836] pulseui.info About to start VPN connection: Harem, baseUrl: https://<host_url>/nocert (pulseUi.cpp:397)
20191104113408.640268 pulsesvc[p1836.t1836] pulseui.info Updating Preferred certificate:Harem for connection (pulseCertAuth.cpp:103)
20191104113408.640413 pulsesvc[p1836.t1836] pulseui.info In launchTunnel() (pulseUi.cpp:1161)
20191104113408.651828 pulsesvc[p1836.t1910] pulseui.info In startPulseService (pulseUi.cpp:1217)
20191104113408.672480 pulsesvc[p1836.t1910] pulseui.info pid of pulsesvc = 0 (pulseUi.cpp:144)
20191104113408.687508 pulsesvc[p1914.t1914] dsncuiapi.para DsNcUiApi:
sNcUiApi (dsncuiapi.cpp:75)
20191104113408.687561 pulsesvc[p1914.t1914] sysdeps.info restoring DNS settings... (sysdeps.cpp:1000)
20191104113408.687591 pulsesvc[p1914.t1914] IpcConn.info listening for IPC connections on port 4242 (ncipc.cpp:93)
20191104113408.687599 pulsesvc[p1914.t1914] IpcConn.info registering the IPC acceptor (0x01C37190) IO handler (ncipc.cpp:104)
20191104113408.687605 pulsesvc[p1914.t1914] dsxp.para register handle 0x1c371a8 SOCK 4 total 1 (dsio.cpp:370)
20191104113408.687610 pulsesvc[p1914.t1914] dsio.para poll waiting for 1 fds, max-fd: 4, with timeout : -1
(dsio.cpp:551)
20191104113408.698066 pulsesvc[p1836.t1910] pulseui.info pid of pulsesvc = 1914 (pulseUi.cpp:144)
20191104113410.698447 pulsesvc[p1914.t1914] dsio.para poll got return value of 1
(dsio.cpp:553)
20191104113410.698498 pulsesvc[p1914.t1914] dsio.para calling 0x1c371a8 IpcAcceptor (dsio.cpp:563)
20191104113410.698520 pulsesvc[p1914.t1914] IpcConn.debug registering the IPC connection (0x01C37370) IO handler (ncipc.cpp:194)
20191104113410.698530 pulsesvc[p1914.t1914] dsxp.para register handle 0x1c373e0 SOCK 5 total 2 (dsio.cpp:370)
20191104113410.698537 pulsesvc[p1914.t1914] dsio.para poll waiting for 2 fds, max-fd: 5, with timeout : -1
(dsio.cpp:551)
20191104113410.698544 pulsesvc[p1914.t1914] dsio.para poll got return value of 1
(dsio.cpp:553)
20191104113410.698550 pulsesvc[p1914.t1914] dsio.para calling 0x1c373e0 IpcConnection (dsio.cpp:563)
20191104113410.698573 pulsesvc[p1914.t1914] IpcConn.para received 100 msg from UI (ncipc.cpp:340)
20191104113410.698582 pulsesvc[p1914.t1914] IpcConn.info client opening connection to service (ncipc.cpp:360)
20191104113410.698588 pulsesvc[p1914.t1914] session.info disconnectAll called (session.cpp:2049)
20191104113410.698595 pulsesvc[p1914.t1914] ipsec.info New tunnel being created (tunnel.cpp:62)
20191104113410.698638 pulsesvc[p1914.t1914] dsio.para poll waiting for 2 fds, max-fd: 5, with timeout : -1
(dsio.cpp:551)
20191104113410.698882 pulsesvc[p1914.t1914] dsio.para poll got return value of 1
(dsio.cpp:553)
20191104113410.698913 pulsesvc[p1914.t1914] dsio.para calling 0x1c373e0 IpcConnection (dsio.cpp:563)
20191104113410.699026 pulsesvc[p1914.t1914] session.para received 124 msg from UI (session.cpp:132)
20191104113410.699041 pulsesvc[p1914.t1914] session.info setting log level to 30 (session.cpp:1270)
20191104113410.699049 pulsesvc[p1914.t1914] session.info log level set to 30 (session.cpp:1277)
20191104113410.699094 pulsesvc[p1914.t1914] session.info ive_host = <host_url> (session.cpp:257)
20191104113410.699113 pulsesvc[p1914.t1914] session.info Will not use a proxy to connect to the IVE (session.cpp:327)
20191104113410.699121 pulsesvc[p1914.t1914] session.info Network Connect operates in non-FIPS compliant mode (session.cpp:360)
20191104113410.699128 pulsesvc[p1914.t1914] session.error proxy not found (session.cpp:429)
20191104113410.700134 pulsesvc[p1914.t1914] session.info IVE host <host_url> resolved to <host_ip> (session.cpp:446)
20191104113410.700228 pulsesvc[p1914.t1914] rmon.info got system route 0.0.0.0/0.0.0.0 gw 10.0.2.2 metric 100 via 0x72616808 (routemon.cpp:729)
20191104113410.700244 pulsesvc[p1914.t1914] rmon.info got system route 10.0.2.0/255.255.255.0 gw 0.0.0.0 metric 100 via 0x01000001 (routemon.cpp:729)
20191104113410.700253 pulsesvc[p1914.t1914] rmon.info got system route <host_broadcast>/255.255.0.0 gw 0.0.0.0 metric 1000 via 0x00000000 (routemon.cpp:729)
20191104113410.700262 pulsesvc[p1914.t1914] rmon.info Collecting latest routes from the system (routemon.cpp:1474)
20191104113410.700297 pulsesvc[p1914.t1914] rmon.info Found best route via ifc enp0s3 (routemon.cpp:1843)
20191104113410.700306 pulsesvc[p1914.t1914] rmon.info best route to <host_ip> is 0.0.0.0/0.0.0.0 via 0x72616808 metric: 100 (routemon.cpp:1495)
20191104113410.700315 pulsesvc[p1914.t1914] rmon.info Found best route via ifc enp0s3 (routemon.cpp:1843)
20191104113410.700321 pulsesvc[p1914.t1914] rmon.info Found best route via ifc enp0s3 (routemon.cpp:1843)
20191104113410.700328 pulsesvc[p1914.t1914] rmon.info best route to gateway: 10.0.2.0/255.255.255.0 gw 0.0.0.0 via 0x01000001 metric 100 (routemon.cpp:2010)
20191104113410.700336 pulsesvc[p1914.t1914] rmon.info attempting to add route to next hop gateway (routemon.cpp:2014)
20191104113410.700343 pulsesvc[p1914.t1914] rmon.info adding route to 10.0.2.2/255.255.255.255 with gw 0.0.0.0, metric 1, if_id 16777217 (routemon.cpp:887)
20191104113410.703339 pulsesvc[p1914.t1914] rmon.info adding server route to the IVE: dest = <host_ip>, gw = 10.0.2.2, if_id = 1918986248, dev = enp0s3 (routemon.cpp:1573)
20191104113410.706079 pulsesvc[p1914.t1914] rmon.error Setting Best route 0 202000a 0 72616808 enp0s3 (routemon.cpp:1585)
20191104113410.706103 pulsesvc[p1914.t1914] session.info connecting to ive <host_url> best route ifid 72616808 (session.cpp:484)
20191104113410.706141 pulsesvc[p1914.t1914] ncp.error ncpEstablish for IVE <host_url> with context 0x1c382a8 (ncp.cpp:550)
20191104113410.707298 pulsesvc[p1914.t1919] main.info Setting DSSSL to use Default ciphers (ncp.cpp:1925)
20191104113410.707602 pulsesvc[p1914.t1919] dsssl.warn ssl_init : Failed to load CA certificates (DSSSLSock.cpp:1515)
20191104113410.712302 pulsesvc[p1914.t1919] main.info Setting NCP certificate hash for DSSSL certificate verification (ncp.cpp:1934)
20191104113410.712324 pulsesvc[p1914.t1919] main.info Using DSSSL to connect to IVE (ncp.cpp:2023)
20191104113410.712331 pulsesvc[p1914.t1919] connect.info creating a new HTTP connection... (ncp_dsssl.cpp:187)
20191104113410.884709 pulsesvc[p1914.t1919] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577)
20191104113410.884919 pulsesvc[p1914.t1919] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577)
20191104113410.885083 pulsesvc[p1914.t1919] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577)
20191104113411.67571 pulsesvc[p1914.t1919] connect.info IVE ncp_version = 3 (ncp_dsssl.cpp:467)
20191104113411.68299 pulsesvc[p1914.t1919] conn.info cleanup 0 (ncp.cpp:1599)
20191104113411.68342 pulsesvc[p1914.t1919] ncp.error NCP_ESTABLISH_DONE for IVE <host_url> (ncp.cpp:2064)
20191104113411.68395 pulsesvc[p1914.t1914] ncphandler.info establish done (ncphandler.cpp:283)
20191104113411.68421 pulsesvc[p1914.t1914] ncp.info connect to userjpa-VirtualBox:443 svc 4 (ncp.cpp:935)
20191104113411.68474 pulsesvc[p1914.t1914] connect.info creating a new HTTP connection... (ncp_dsssl.cpp:187)
20191104113411.246780 pulsesvc[p1914.t1919] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577)
20191104113411.246844 pulsesvc[p1914.t1919] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577)
20191104113411.247217 pulsesvc[p1914.t1919] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577)
20191104113411.419415 pulsesvc[p1914.t1919] connect.info IVE ncp_version = 3 (ncp_dsssl.cpp:467)
20191104113411.533703 pulsesvc[p1914.t1919] worker.error connect to userjpa-VirtualBox:443 failed. IVE returned error 20001069 (ncp_dsssl.cpp:1187)
20191104113411.533792 pulsesvc[p1914.t1914] ncphandler.info control channel disconnected due to error 20001069, reconnecting (ncphandler.cpp:343)
20191104113411.533807 pulsesvc[p1914.t1914] session.info initial connection to IVE is lost. (session.cpp:732)
20191104113411.533817 pulsesvc[p1914.t1914] session.info disconnecting from ive <host_url> with reason 5 (session.cpp:633)
20191104113411.533825 pulsesvc[p1914.t1914] adapter.info closing tun adapter FFFFFFFF (adapter.cpp:1137)
20191104113411.533833 pulsesvc[p1914.t1914] dsxp.info isRegistered returned false for 0x1c387d0 -1 (dsio.cpp:992)
20191104113411.533842 pulsesvc[p1914.t1914] dsxp.info isRegistered returned false for 0x1c37a60 -1 (dsio.cpp:992)
20191104113411.533849 pulsesvc[p1914.t1914] sysdeps.info restoring DNS settings... (sysdeps.cpp:1000)
20191104113411.533866 pulsesvc[p1914.t1914] session.info Session Terminated. Removing ip6tables entries (session.cpp:671)
20191104113411.533880 pulsesvc[p1914.t1914] session.info Executing '/sbin/ip6tables -D INPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445)
20191104113411.535307 pulsesvc[p1914.t1914] session.info /sbin/ip6tables status 0x100 (syscmd.cpp:542)
20191104113411.535337 pulsesvc[p1914.t1914] session.error Failed to execute command /sbin/ip6tables -D INPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null. DSSysCmd::executeAndWait returned 256. (session.cpp:1461)
20191104113411.535352 pulsesvc[p1914.t1914] session.info Executing '/sbin/ip6tables -D OUTPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445)
20191104113411.536449 pulsesvc[p1914.t1914] session.info /sbin/ip6tables status 0x100 (syscmd.cpp:542)
20191104113411.536479 pulsesvc[p1914.t1914] session.error Failed to execute command /sbin/ip6tables -D OUTPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null. DSSysCmd::executeAndWait returned 256. (session.cpp:1468)
20191104113411.536494 pulsesvc[p1914.t1914] session.info Executing '/sbin/ip6tables -D FORWARD -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445)
20191104113411.537490 pulsesvc[p1914.t1914] session.info /sbin/ip6tables status 0x100 (syscmd.cpp:542)
20191104113411.537513 pulsesvc[p1914.t1914] session.error Failed to execute command /sbin/ip6tables -D FORWARD -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null. DSSysCmd::executeAndWait returned 256. (session.cpp:1475)
20191104113411.537529 pulsesvc[p1914.t1914] ncp.error ncpTearDown for IVE <host_url> (ncp.cpp:624)
20191104113411.537549 pulsesvc[p1914.t1919] worker.error NCP worker has been requested to stop (ncp_dsssl.cpp:724)
20191104113411.537561 pulsesvc[p1914.t1919] conn.info cleanup 0 (ncp.cpp:1599)
20191104113411.537951 pulsesvc[p1914.t1919] conn.info cleanup 0 (ncp.cpp:1599)
20191104113411.537985 pulsesvc[p1914.t1919] writer.error thread exit (ncp.cpp:2131)
20191104113411.538082 pulsesvc[p1914.t1914] ncphandler.info teardown done (ncphandler.cpp:354)
20191104113411.538825 pulsesvc[p1914.t1914] ncp.error ncpCleanup for IVE <host_url> (ncp.cpp:766)
20191104113411.544651 pulsesvc[p1914.t1914] session.info disconnected from ive <host_url> with reason 5 (session.cpp:717)
20191104113411.544753 pulsesvc[p1836.t1910] pulseui.info received onDisconnect with reason = 5 (pulseUiLib.cpp:526)
20191104113411.544816 pulsesvc[p1836.t1910] pulseui.info Exiting connection thread (pulseUi.cpp:1275)
