Resolute and Stonking are ok, I'm affected by this bug too now that I tested 
with noble.
Fixing and uploading

** Changed in: openconnect (Ubuntu)
       Status: New => Fix Released

** Also affects: openconnect (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Description changed:

- Cisco updated their web appliances that provide VPN a few months ago.
- The default version of openonnect in Noble Numbat 24.04 does not work
- with that. I installed a more recent version from the openconnect repo
- and it works. But it doesn't interface with the Gnome
- Settings>Network>VPN so I need to run it from the command line. It would
- be nice if I could connect to the current web appliances from Gnome.
+ [ Impact ]
+ Cisco updated their web appliances that provide VPN a few months ago. The 
default version of openonnect in Noble Numbat 24.04 does not work with that. I 
installed a more recent version from the openconnect repo and it works. But it 
doesn't interface with the Gnome Settings>Network>VPN so I need to run it from 
the command line. It would be nice if I could connect to the current web 
appliances from Gnome.
  
  qobi@daat>lsb_release -rd
  No LSB modules are available.
  Description:    Ubuntu 24.04.3 LTS
  Release:      24.04
  qobi@daat>
  
  qobi@daat>dpkg -l openconnect
  WARNING: terminal is not fully functional
- Press RETURN to continue 
+ Press RETURN to continue
  
  Desired=Unknown/Install/Remove/Purge/Hold
  | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
  |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
  ||/ Name           Version      Architecture Description
  
+++-==============-============-============-===================================>ii
  openconnect    9.12-1build5 amd64        open client for various network 
ven>lines 1-6/6 (END) q
  
  I expect to be able to connect to webvpn.purdue.edu with my Purdue
  Credentials using Settings>Network>VPN using
  
  VPN Preotocol Cisco AnyConnect or OpenConnect
  Gateway webvpn.purdue.edu
  
  everything else empty or (None)
  
  It prompts for my password. I give it. But it doesn't connect.
  
  If I run
  
  sudo /opt/openconnect/openconnect --user qobi -b webvpn.purdue.edu
  
  (/opt/openconnect/openconnect is an unmodifed install from the
  openconnect repo)
  
  it works.
  
  ProblemType: Bug
  DistroRelease: Ubuntu 24.04
  Package: openconnect 9.12-1build5
  ProcVersionSignature: Ubuntu 6.14.0-37.37~24.04.1-generic 6.14.11
  Uname: Linux 6.14.0-37-generic x86_64
  ApportVersion: 2.28.1-0ubuntu3.8
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CurrentDesktop: ubuntu:GNOME
  Date: Sat Feb 14 11:55:37 2026
  InstallationDate: Installed on 2025-11-14 (92 days ago)
  InstallationMedia: Ubuntu 24.04.3 LTS "Noble Numbat" - Release amd64 
(20250805.1)
  SourcePackage: openconnect
  UpgradeStatus: No upgrade log present (probably fresh install)
+ 
+ [ Test Plan ]
+ * Try to connect to a Cisco Anyconnect vpn, the connection should succeed 
(also via openconnect applet from web gnome network-manager).
+ Instead it gives 404 at the end of the authentication process.
+ 
+ [ Where problems could occur ]
+ * This is a feature that used to work, but was broken by Cisco people with an 
non retro-compatible change.
+ 
+ [ Other Info ]
+ * I'm affected too by this, so I can help and I already tested the uploaded 
package in unapproved queue

** Changed in: openconnect (Ubuntu Noble)
       Status: New => In Progress

** Summary changed:

- openconnect doesn't work with new Cisco web appliances
+ [SRU] openconnect doesn't work with new Cisco web appliances

** Description changed:

  [ Impact ]
  Cisco updated their web appliances that provide VPN a few months ago. The 
default version of openonnect in Noble Numbat 24.04 does not work with that. I 
installed a more recent version from the openconnect repo and it works. But it 
doesn't interface with the Gnome Settings>Network>VPN so I need to run it from 
the command line. It would be nice if I could connect to the current web 
appliances from Gnome.
  
  qobi@daat>lsb_release -rd
  No LSB modules are available.
  Description:    Ubuntu 24.04.3 LTS
  Release:      24.04
  qobi@daat>
  
  qobi@daat>dpkg -l openconnect
  WARNING: terminal is not fully functional
  Press RETURN to continue
  
  Desired=Unknown/Install/Remove/Purge/Hold
  | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
  |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
  ||/ Name           Version      Architecture Description
  
+++-==============-============-============-===================================>ii
  openconnect    9.12-1build5 amd64        open client for various network 
ven>lines 1-6/6 (END) q
  
  I expect to be able to connect to webvpn.purdue.edu with my Purdue
  Credentials using Settings>Network>VPN using
  
  VPN Preotocol Cisco AnyConnect or OpenConnect
  Gateway webvpn.purdue.edu
  
  everything else empty or (None)
  
  It prompts for my password. I give it. But it doesn't connect.
  
  If I run
  
  sudo /opt/openconnect/openconnect --user qobi -b webvpn.purdue.edu
  
  (/opt/openconnect/openconnect is an unmodifed install from the
  openconnect repo)
  
  it works.
  
  ProblemType: Bug
  DistroRelease: Ubuntu 24.04
  Package: openconnect 9.12-1build5
  ProcVersionSignature: Ubuntu 6.14.0-37.37~24.04.1-generic 6.14.11
  Uname: Linux 6.14.0-37-generic x86_64
  ApportVersion: 2.28.1-0ubuntu3.8
  Architecture: amd64
  CasperMD5CheckResult: unknown
  CurrentDesktop: ubuntu:GNOME
  Date: Sat Feb 14 11:55:37 2026
  InstallationDate: Installed on 2025-11-14 (92 days ago)
  InstallationMedia: Ubuntu 24.04.3 LTS "Noble Numbat" - Release amd64 
(20250805.1)
  SourcePackage: openconnect
  UpgradeStatus: No upgrade log present (probably fresh install)
  
  [ Test Plan ]
  * Try to connect to a Cisco Anyconnect vpn, the connection should succeed 
(also via openconnect applet from web gnome network-manager).
  Instead it gives 404 at the end of the authentication process.
  
  [ Where problems could occur ]
  * This is a feature that used to work, but was broken by Cisco people with an 
non retro-compatible change.
  
  [ Other Info ]
+ * The patch comes from upstream it's a set of three patches
+ * It was uploaded in Debian after noble release, unfortunately
  * I'm affected too by this, so I can help and I already tested the uploaded 
package in unapproved queue

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2141841

Title:
  [SRU] openconnect doesn't work with new Cisco web appliances

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openconnect/+bug/2141841/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to