Host "double space" not found

[controverse]

Thanks for bringing this tool online !
(I am quite new to the community, please let me know if this is the wrong path for questions)
I managed to start gpclient (slackware64 current) get the SAML to ask for credentials and enter Authenticator, but the login fails. Here are the last lines of bash (any hint welcome) :

2024-02-19 09:44:08.254 INFO [14091] [GatewayAuthenticator::login@41] Trying to login the gateway at https:///ssl-vpn/login.esp, with prot=https%3A&server=&jnlpReady=jnlpReady&computer=darkstar.example.net&ok=Login&direct=yes&clientVer=4100&clientos=Windows&os-version=Slackware 15.0 x86_64 %28post 15.0 -current%29&portal-prelogonuserauthcookie=&prelogin-cookie=&ipv6-support=yes&user=user.name%40domain.ch&passwd=&portal-userauthcookie=QkFkBn2BYoGsn5WdpW%2FFaZnV6RA%2FgRsSdWStKuq94ZPHW8eqKxoImQnhEkVgR4jCAYcT%2F101UeY8U1jDLg4ZGkDf0ALfyKux5YvDAmLXblV%2FFtK0iDDILsRFl2V2LLCDdrkei%2FWUgB7F0WXR95CbYbXube%2FZPshSUMlwtK6gmgUkZUl49CNxDk7tnnFDWyKo6xlVIO6xGaFUO2T0%2Bk0OhdeNN%2FRQC1KnmeFa0AnAGU00Wv7LBiEzyqugUv%2FEd3zUUqkjYieLesi4XKugolmEPyohXp45hN6L3HSTDfrPDetQs%2FfXQOjuEUZDUMSNZEtC2nGGwGU8MOq8AS%2BT3xKjmQ%3D%3D&inputStr=
2024-02-19 09:44:08.264 ERROR [14091] [GatewayAuthenticator::onLoginFinished@53] Failed to login the gateway at https:///ssl-vpn/login.esp, Host not found
2024-02-19 09:44:08.264 INFO [14091] [GatewayAuthenticator::doAuth@81] Perform the gateway prelogin at https:///ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Windows
2024-02-19 09:44:08.266 ERROR [14091] [GatewayAuthenticator::onPreloginFinished@92] Failed to prelogin the gateway at https:///ssl-vpn/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100&clientos=Windows, Host not found
2024-02-19 09:44:08.320 INFO [14091] [GPClient::populateGatewayMenu@133] Populating the Switch Gateway menu...

[yuezk]

Hi @controverse Please upgrade to 2.x to see if it works.

[controverse]

Thanks, 2.x (converted with rpm2tgz) brings me a step closer.
Next message sounds like a missing HIP report. Will see how to get through this.
Best
Andreas

[yuezk]

You don't have to submit the HIP report if the VPN connectivity works.

Otherwise, you can find the hipreport.sh in one of the following locations:

    "/usr/lib/x86_64-linux-gnu/openconnect/hipreport.sh",
    "/usr/lib/aarch64-linux-gnu/openconnect/hipreport.sh",
    "/usr/lib/openconnect/hipreport.sh",
    "/usr/libexec/openconnect/hipreport.sh",

Then you can pass it to the client. e.g., sudo gpclient connect --csd-wrapper=/path/to/your/hipreport.sh.

[controverse]

Thanks !
Apparently the HIP report is accepted, but the connection seems to drop to a different gateway/portal that I can not use to remotely connect to the PC at my University's office.
The connection works with the OEM software from within a Win10 virtual box, but I would prefer being able to do it from the linux environment. Any idea ?
Best
Andreas

[2024-02-21T14:20:14Z INFO openconnect::ffi] HIP script '/usr/libexec/openconnect/hipreport.sh' completed successfully (report is 4364 bytes).
[2024-02-21T14:20:14Z INFO openconnect::ffi] POST https://[**********]/ssl-vpn/hipreport.esp
[2024-02-21T14:20:14Z INFO openconnect::ffi] HIP report submitted successfully.
[2024-02-21T14:20:14Z INFO openconnect::ffi] ESP session established with server
[2024-02-21T14:20:14Z INFO openconnect::ffi] ESP tunnel connected; exiting HTTPS mainloop.
[2024-02-21T14:20:15Z INFO openconnect::ffi] Using vhost-net for tun acceleration, ring size 32
[2024-02-21T14:20:15Z INFO openconnect::vpn] Connected to VPN, pipe_fd: 13
[2024-02-21T14:20:15Z INFO gpgui::portal_connector] Connected to the gateway: 1**********6
[2024-02-21T14:20:15Z INFO gpgui::portal_connector] Connected to the portal: v**********h

[yuezk]

You can try to switch the gateway via the hamburger menu.

[controverse]

Thanks, but the "hamburger menu" just has one entry that says "any"

When I use the OEM on the Win10 virtualbox, after the 2F identification, the PAN-gui displays that it is "looking for the best gateway", and then a message that says that Win10 complies with the requirements.

I wonder if instead of complaining that the HIP report does not contain the expected results, the server connects to some sort of "dummy gateway"m, The next time I connect with globalprotect-openconnect, I get directly to the "dummy gateway", without going throug the 2F identification.
Any thoughts ?