FortiClient VPN in KUbuntu 22.04 with SSO gets stuck in "Connecting..."

[Vlid]

I'm facing issues while trying to set up FortiClient VPN on KUbuntu 22.04. The installation goes smoothly after manually adding a dependency package. However, when I attempt to connect using Single Sign On (SSO), the authentication window briefly opens and closes, leaving me stuck on the "Connecting..." stage. This is the window where I should enter my username and password and then use a 2FA app for verification.

Even after enabling "Use external browser as user-agent for saml user authentication," the problem persists. The same behavior occurs, and an external browser doesn't open as expected.

I had no trouble with this kind of connection on Kubuntu 20.04. Has anyone managed to successfully establish this type of connection on (K)Ubuntu 22.04?

[akushwaha]

Hi,

To understand the issue better, can you provide me more information about the issue:

1) Are the windows user able to connect:
2) What is the FortiClient version ?
3) have you tried a different version of FortiClient:
4) Are you trying to use IPsec or SSL:
5)Attach error screenshot

Best Regards, 
Abhimanyu

[Vlid]

1) Yes

2) 7.0.7.0246
3) I also tried 7.0.0.0018
4) I am not sure

5) There is no error message. Instead, the login window briefly pops up and disappears and then it gets stuck in "Connecting..."

[chauhans]

Hello @Vlid 

Could you please provide below SSL VPN debug output:

 diag debug reset 

diagnose vpn ssl debug-filter src-addr4 x.x.x.x>>>User Public IP

diag debug appl sslvpn -1

diag debug enable

Post running the above command, please connect to SSL VPN and share the logs which got generated.

Thanks
Shaleni

[Vlid]

Where should I enter this? The Linux command line does not recognize the "diag" command

[chauhans]

Hello @Vlid 

Please run the above commands in FortiGate CLI and Post running the above command, please connect to SSL VPN and share the logs which got generated.

Thanks

Shaleni

[Vlid]

I am using the FortiClient VPN GUI, I can't find any CLI within it. Could you please guide me on how to access the CLI?

[pgautam]

Hi @Vlid 

We have not observed issues regarding this (K)Ubuntu 22.04 version.

In your Linux machine please try to reinstall the SSL VPN and then restablish the SSL VPN using the SAML SSO.

https://community.fortinet.com/t5/FortiClient/Technical-Tip-How-to-install-FortiClient-on-Ubuntu-22-...

https://docs.fortinet.com/document/forticlient/7.2.1/linux-release-notes/213138

Regards

Priyanka

- Have you found a solution? Then give your helper a "Kudos" and mark the solution.

[Vlid]

I tried this version, but it still has the same issue. I set up a virtual machine with Xubuntu 20.04, and I can connect without any issues inside it. At this point, I'm seriously considering giving up and reverting my system back to 20.04.

[pgautam]

Hi @Vlid 

In this case, you can collect the below command output and raise a TAC case to investigate further.

could you kindly collect and share the following data:

-SSL VPN config (FGT CLI > conf vpn ssl settings)
-FortiClient XML conf (EMS GUI > Endpoint Policies & Components > Manage policies > edit assigned policy > Download XML config.)
-FortiClient debug logs after replication:

1) EMS GUI > Endpoint Profile > System Settings > select assigned profile> use Advanced view instead of Basic > Log Level > change "info" to "debug" > select all features
2) Wait for FCT to sync the profile
3) Reproduce the issue
4) FCT GUI > Settings > export logs

-Finally, if you can provide command line outputs:

before VPN connection try:-
$cat /etc/resolv.conf
$resolvectl status
$ifconfig
$dig toyourinternalresource.com


after VPN connection try:-
$cat /etc/resolv.conf
$resolvectl status
$ifconfig
$dig toyourinternalresource.com

Regards

Priyanka

- Have you found a solution? Then give your helper a "Kudos" and mark the solution.