it is not working passing script parameter vpn-slice

[alansenairj]

when I put this at /etc/gpservice/gp.conf

[*]
openconnect-args=--script "vpn-slice 172.26.1.0/16 172.26.2.0/16 172.26.3.0/16 172.26.4.0/16 172.26.5.0/16 172.26.6.0/16 172.26.7.0/16 172.26.8.0/16 172.31.42.0/16 172.23.0.0/16"

the connection is established but stop to navigate.

I use this script above to connect to another portal and it works well.

What is happening? Can someone help me?

[alansenairj]

vpn-slice working with cmd line script parameters:

Called by /usr/sbin/openconnect (PID 352889) with environment variables for vpnc-script:
reason => reason=<reasons.pre_init: 1>
VPNGATEWAY => gateway=IPv4Address('xxxxxxxxxxxx')
CISCO_DEF_DOMAIN => domain=['xxxxxxxx']
INTERNAL_IP4_ADDRESS => myaddr=IPv4Address('xxxxxxx')
INTERNAL_IP4_MTU => mtu=1422
INTERNAL_IP4_NETMASK => netmask=IPv4Address('255.255.255.255')
INTERNAL_IP4_NETMASKLEN => netmasklen=32
INTERNAL_IP4_NETADDR => network=IPv4Network('xxxxxxx/32')
INTERNAL_IP4_DNS => dns=[IPv4Address('1xxxx'), IPv4Address('1xxxxxx1')]
CISCO_SPLIT_INC => nsplitinc=3
CISCO_SPLIT_EXC => nsplitexc=1
IDLE_TIMEOUT => idle_timeout=10800
VPNPID => vpnpid=352889
CISCO_SPLIT_INC_ => splitinc=[IPv4Network('1xxxxxxxx/32'), IPv4Network('xxxxxxx/32'), IPv4Network('0.0.0.0/0')]
CISCO_SPLIT_EXC_ => splitexc=[IPv4Network('10.1.0.0/16')]
Complete set of subnets to include in VPN routes:
172.26.0.0/16
172.26.0.0/16
172.26.0.0/16
172.26.0.0/16
172.26.0.0/16
172.26.0.0/16
172.26.0.0/16
172.26.0.0/16
172.31.0.0/16
172.23.0.0/16

[alansenairj]

Aug 19 16:48:08 z390 plasmashell[275586]: Default vpnc-script (override with --script): /etc/vpnc/vpnc-script
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.190 INFO [275586] [GPClient::onVPNLogAvailable@518] Got extra OpenConnect args for server: autentica.unimedbh.com.br, --script "vpn-slice 172.26.1.0/16 172.26.2.0/16 172.26.3.0/16 172.26.4.0/16 172.26.5.0/16 172.26.6.0/16 172.26.7.0/16 172.26.8.0/16 172.31.42.0/16 172.23.0.0/16"
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.190 INFO [275586] [GPClient::onVPNLogAvailable@518] Start process with arugments: --protocol=gp, --script, vpn-slice 172.26.1.0/16 172.26.2.0/16 172.26.3.0/16 172.26.4.0/16 172.26.5.0/16 172.26.6.0/16 172.26.7.0/16 172.26.8.0/16 172.31.42.0/16 172.23.0.0/16, -u, xxxxx, --cookie-on-stdin, xxxxxxxxxxxxxxx
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.190 INFO [275586] [GPClient::onVPNLogAvailable@518] Openconnect started successfully, PID=369070
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.195 INFO [275586] [GPClient::onVPNLogAvailable@518] POST https://xxxxxxxxxxxxxxx/ssl-vpn/getconfig.esp
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.232 INFO [275586] [GPClient::onVPNLogAvailable@518] Connected to xxxxxxxxxxxxx:443
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.298 INFO [275586] [GPClient::onVPNLogAvailable@518] SSL negotiation with xxxxxxxxxxxxxx
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.337 INFO [275586] [GPClient::onVPNLogAvailable@518] Connected to HTTPS on autentica.unimedbh.com.br with ciphersuite (TLS1.2)-(ECDHE-SECP256R1)-(RSA-SHA256)-(AES-256-GCM)
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.368 INFO [275586] [GPClient::onVPNLogAvailable@518] Tunnel timeout (rekey interval) is 180 minutes.
Aug 19 16:48:08 z390 plasmashell[275586]: Idle timeout is 180 minutes.
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.368 INFO [275586] [GPClient::onVPNLogAvailable@518] No MTU received. Calculated 1422 for ESP tunnel
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.368 INFO [275586] [GPClient::onVPNLogAvailable@518] POST xxxxxxxxxxxxxxxx/ssl-vpn/hipreportcheck.esp
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.393 INFO [275586] [GPClient::onVPNLogAvailable@518] WARNING: Server asked us to submit HIP report with md5sum xxxxxxxxxxxxxxxxxxxxxx.
Aug 19 16:48:08 z390 plasmashell[275586]: VPN connectivity may be disabled or limited without HIP report submission.
Aug 19 16:48:08 z390 plasmashell[275586]: You need to provide a --csd-wrapper argument with the HIP report submission script.
Aug 19 16:48:08 z390 plasmashell[275586]: 2023-08-19 16:48:08.420 INFO [275586] [GPClient::onVPNLogAvailable@518] ESP session established with server
Aug 19 16:48:08 z390 plasmashell[275586]: ESP tunnel connected; exiting HTTPS mainloop.
Aug 19 16:48:09 z390 plasmashell[275586]: 2023-08-19 16:48:09.421 INFO [275586] [GPClient::onVPNLogAvailable@518] Configured as 172.23.13.122, with SSL disconnected and ESP established
Aug 19 16:48:09 z390 plasmashell[275586]: Session authentication will expire at Mon Sep 18 16:48:08 2023
Aug 19 16:48:09 z390 plasmashell[275586]: 2023-08-19 16:48:09.423 INFO [275586] [GPClient::onVPNLogAvailable@518] /bin/sh: line 1: vpn-slice: command not found
Aug 19 16:48:09 z390 plasmashell[275586]: 2023-08-19 16:48:09.423 INFO [275586] [GPClient::onVPNLogAvailable@518] Script 'vpn-slice 172.26.1.0/16 172.26.2.0/16 172.26.3.0/16 172.26.4.0/16 172.26.5.0/16 172.26.6.0/16 172.26.7.0/16 172.26.8.0/16 172.31.42.0/16 172.23.0.0/16' returned error 127
Aug 19 16:48:09 z390 NetworkManager[2360]: [1692474489.4241] manager: (tun0): new Tun device (/org/freedesktop/NetworkManager/Devices/47)
Aug 19 16:48:09 z390 plasmashell[275586]: 2023-08-19 16:48:09.426 INFO [275586] [GPClient::onVPNLogAvailable@518] /bin/sh: line 1: vpn-slice: command not found
Aug 19 16:48:09 z390 plasmashell[275586]: 2023-08-19 16:48:09.426 INFO [275586] [GPClient::onVPNLogAvailable@518] Script 'vpn-slice 172.26.1.0/16 172.26.2.0/16 172.26.3.0/16 172.26.4.0/16 172.26.5.0/16 172.26.6.0/16 172.26.7.0/16 172.26.8.0/16 172.31.42.0/16 172.23.0.0/16' returned error 127
Aug 19 16:48:09 z390 plasmashell[275586]: 2023-08-19 16:48:09.426 INFO [275586] [GPClient::onVPNLogAvailable@518] Using vhost-net for tun acceleration, ring size 32

[alansenairj]

I solved the problem. It was caused by misunderstanding which python it uses to launch vpn-slice. I decide to hardcode this path where vpn-slice is installed. In my system is:
/root/.pyenv/shims/vpn-slice

I think I need to install vpn-slice for root again but I am lazy.

[*]
openconnect-args=--script "/root/.pyenv/shims/vpn-slice -v --dump 172.26.1.0/16 172.26.2.0/16 172.26.3.0/16 172.26.4.0/16 172.26.5.0/16 172.26.6.0/16 172.26.7.0/16 172 .26.8.0/16 172.31.42.0/16 172.23.0.0/16"

And now it is working splitting well.

Thanxx for me myself and for this program to work like charm.