Der PulseSecure-Befehlszeilenclient trennt sich sofort, wenn er im Docker-Container ausgeführt wird

841
Rinat Veliakhmedov

Ich versuche, einen automatisierten Prozess mit Docker-Container mit Ubuntu 18.04 und PS-Befehlszeilenclient einzurichten. Wenn er außerhalb des Containers ausgeführt wurde, funktioniert er einwandfrei und stellt die Verbindung wie erwartet her. Wenn er jedoch im Docker ausgeführt wird, wird er nach einigen Sekunden beendet. Weiß jemand, was hier der Grund sein könnte?

Es scheint mir, dass der Fehler irgendwo in ist

20181122124020.623622 pulsesvc[p16.t16] rmon.error Failed to add route: dest 172.17.0.1 mask 255.255.255.255, gw 0.0.0.0 dev eth0. Error 1, fd = 7 (routemon.cpp:981) 20181122124020.623628 pulsesvc[p16.t16] rmon.error Failed to add a route to the IVE's next hop gateway (routemon.cpp:2041)  

oder

20181122124020.623736 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623743 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623751 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D OUTPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623757 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623761 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623769 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D FORWARD -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623775 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 

Vielen Dank.

20181122124015.895585 pulsesvc[p16.t16] dsncuiapi.para DsNcUiApi::DsNcUiApi (dsncuiapi.cpp:75) 20181122124015.895642 pulsesvc[p16.t16] pulsesvc.info New pulsesvc log level set to 3 (pulsecommon.cpp:76) 20181122124015.895649 pulsesvc[p16.t16] sysdeps.info restoring DNS settings... (sysdeps.cpp:975) 20181122124015.895693 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-resolv.conf => /etc/resolv.conf failed wirh error 2 (sysdeps.cpp:978) 20181122124015.895722 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-hosts.bak => /etc/hosts failed wirh error 2 (sysdeps.cpp:982) 20181122124017.305510 pulsesvc[p16.t16] pulsesvc.info Proxy is not provided. Reading from system proxy (pulsesvc.cpp:244) 20181122124017.305981 pulsesvc[p16.t16] pulseui.info libproxy load failed /usr/lib/libproxy.so.1: cannot open shared object file: No such file or directory (pulseProxy.cpp:183) 20181122124017.306015 pulsesvc[p16.t16] pulsesvc.info Proxy host : NULL (pulsesvc.cpp:256) 20181122124017.306034 pulsesvc[p16.t16] pulsesvc.info Proxy port : 80 (pulsesvc.cpp:257) 20181122124017.306050 pulsesvc[p16.t16] pulsesvc.info Proxy user : NULL (pulsesvc.cpp:258) 20181122124017.306066 pulsesvc[p16.t16] pulsesvc.info Proxy password : NULL (pulsesvc.cpp:259) 20181122124017.306082 pulsesvc[p16.t16] pulseui.info Proxy object is delete (pulseProxy.cpp:28) 20181122124017.803439 pulsesvc[p16.t16] DSInet.info IVE host <address> resolved to <ip address>, port 443 (dsinet.cpp:329) 20181122124017.804247 pulsesvc[p16.t16] dsssl.warn ssl_init : Failed to load CA certificates (DSSSLSock.cpp:1515) 20181122124017.876823 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124017.877559 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124017.878217 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124017.916421 pulsesvc[p16.t16] dsclient.info state: kStateSignin (dsclient.cpp:339) 20181122124017.916506 pulsesvc[p16.t16] dsclient.info --> GET / (authenticate.cpp:181) 20181122124017.948135 pulsesvc[p16.t16] dsclient.info <-- 302 https://<address>/dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi (authenticate.cpp:213) 20181122124017.948217 pulsesvc[p16.t16] dsclient.info state: kStateWelcome (dsclient.cpp:347) 20181122124017.948249 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi (authenticate.cpp:181) 20181122124018.8710 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.8893 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.9065 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.80880 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124018.80970 pulsesvc[p16.t16] dsclient.info state: kStateLogin (dsclient.cpp:379) 20181122124018.81015 pulsesvc[p16.t16] dsclient.info --> POST /dana-na/auth/url_91utx5ZDCr99Th4K/login.cgi (authenticate.cpp:181) 20181122124018.142767 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.143437 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.144095 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.68872 pulsesvc[p16.t16] dsclient.info <-- 302 https://<address>/dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi?p=preauth&id=state_39199dab6d66e28a25b757b695b1372b&signinRealmId=11 (authenticate.cpp:213) 20181122124019.68979 pulsesvc[p16.t16] dsclient.info state: kStatePostAuth (dsclient.cpp:427) 20181122124019.69011 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi?p=preauth&id=state_39199dab6d66e28a25b757b695b1372b&signinRealmId=11 (authenticate.cpp:181) 20181122124019.133876 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.134533 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.135226 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.212034 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.212132 pulsesvc[p16.t16] dsclient.info state: kStatePostCacheCleaner (dsclient.cpp:443) 20181122124019.212161 pulsesvc[p16.t16] dsclient.info --> POST /dana-na/cc/ccupdate.cgi (authenticate.cpp:181) 20181122124019.274046 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.274724 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.275381 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.353210 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.353243 pulsesvc[p16.t16] dsclient.info state: kStatePostHostChecker (dsclient.cpp:435) 20181122124019.353252 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/hc/hcupdate.cgi?policy=get&mode=postauth&signinRealm=<realm> (authenticate.cpp:181) 20181122124019.420061 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.420710 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.421366 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.497000 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.497108 pulsesvc[p16.t16] pulsesvc.info Entering HC sendMessage routine (HostCheckerLinuxTNCC.cpp:138) 20181122124019.497441 pulsesvc[p16.t16] pulsesvc.info Entering packageTncData (HostCheckerLinuxTNCC.cpp:225) 20181122124019.497492 pulsesvc[p16.t16] pulsesvc.info Base64 encoding the tnc payload (HostCheckerLinuxTNCC.cpp:235) 20181122124019.497546 pulsesvc[p16.t16] pulsesvc.info Leaving packageTncData (HostCheckerLinuxTNCC.cpp:251) 20181122124019.497575 pulsesvc[p16.t16] pulsesvc.info sending HC tnc update message to IVE (HostCheckerLinuxTNCC.cpp:336) 20181122124019.563778 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.564427 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.565083 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.638706 pulsesvc[p16.t16] pulsesvc.info extracting Tnc payload (HostCheckerLinuxTNCC.cpp:261) 20181122124019.638799 pulsesvc[p16.t16] pulsesvc.info ConnID: 0 (HostCheckerLinuxTNCC.cpp:272) 20181122124019.638875 pulsesvc[p16.t16] pulsesvc.error No messages to deliver (HostCheckerLinuxTNCC.cpp:379) 20181122124019.638902 pulsesvc[p16.t16] pulsesvc.info HC handshake complete (HostCheckerLinuxTNCC.cpp:122) 20181122124019.638957 pulsesvc[p16.t16] dsclient.info state: kStateLogin (dsclient.cpp:379) 20181122124019.638982 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/auth/url_91utx5ZDCr99Th4K/login.cgi?loginmode=mode_postAuth&postauth=state_39199dab6d66e28a25b757b695b1372b (authenticate.cpp:181) 20181122124019.700461 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.701109 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.701797 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.811302 pulsesvc[p16.t16] dsclient.info <-- 302 https://<address>/dana/home/starter0.cgi?check=yes (authenticate.cpp:213) 20181122124019.811386 pulsesvc[p16.t16] dsclient.info --> GET /dana/home/starter0.cgi?check=yes (authenticate.cpp:181) 20181122124019.844066 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.844150 pulsesvc[p16.t16] authStateLogin.info starter0.cgi has asked for tz_offset parameter (authenticate.cpp:497) 20181122124019.844174 pulsesvc[p16.t16] authStateLogin.info starter0.cgi has asked for clienttime parameter (authenticate.cpp:504) 20181122124019.844211 pulsesvc[p16.t16] dsclient.info --> POST /dana/home/starter0.cgi?check=yes (authenticate.cpp:181) 20181122124019.906888 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.907571 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.908230 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.973716 pulsesvc[p16.t16] dsclient.info <-- 302 /dana/home/starter.cgi (authenticate.cpp:213) 20181122124019.973800 pulsesvc[p16.t16] dsclient.info --> GET /dana/home/starter.cgi (authenticate.cpp:181) 20181122124020.40356 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124020.40570 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124020.40736 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124020.118094 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124020.118195 pulsesvc[p16.t16] dsclient.info state: kStateAuthenticated (dsclient.cpp:485) 20181122124020.120146 pulsesvc[p16.t16] IpcConn.info listening for IPC connections on port 4242 (ncipc.cpp:93) 20181122124020.120194 pulsesvc[p16.t16] IpcConn.info registering the IPC acceptor (0xDC464E30) IO handler (ncipc.cpp:104) 20181122124020.121260 pulsesvc[p16.t16] IpcConn.info client opening connection to service (ncipc.cpp:360) 20181122124020.121301 pulsesvc[p16.t16] session.info disconnectAll called (session.cpp:1994) 20181122124020.121323 pulsesvc[p16.t16] ipsec.info New tunnel being created (tunnel.cpp:62) 20181122124020.121390 pulsesvc[p16.t16] pulsesvc.info received onOpen (pulsesvc.cpp:701) 20181122124020.121460 pulsesvc[p16.t16] session.info ive_host = <address> (session.cpp:251) 20181122124020.121489 pulsesvc[p16.t16] session.error get nextValue failed, no friendly name (session.cpp:261) 20181122124020.121507 pulsesvc[p16.t16] session.error get nextValue failed, no friendly ID (session.cpp:268) 20181122124020.121524 pulsesvc[p16.t16] session.error get nextValue failed, no Ive Ip (session.cpp:275) 20181122124020.121540 pulsesvc[p16.t16] session.error get nextValue failed, no Host Url (session.cpp:282) 20181122124020.121558 pulsesvc[p16.t16] session.info Will not use a proxy to connect to the IVE (session.cpp:321) 20181122124020.121574 pulsesvc[p16.t16] session.info Network Connect operates in non-FIPS compliant mode (session.cpp:354) 20181122124020.121591 pulsesvc[p16.t16] session.error proxy not found (session.cpp:423) 20181122124020.623409 pulsesvc[p16.t16] session.info IVE host <address> resolved to <ip address> (session.cpp:440) 20181122124020.623526 pulsesvc[p16.t16] rmon.info got system route 0.0.0.0/0.0.0.0 gw 172.17.0.1 metric 0 via 0x00007FDD (routemon.cpp:729) 20181122124020.623537 pulsesvc[p16.t16] rmon.info got system route 172.17.0.0/255.255.0.0 gw 0.0.0.0 metric 0 via 0x00000000 (routemon.cpp:729) 20181122124020.623544 pulsesvc[p16.t16] rmon.info Collecting latest routes from the system (routemon.cpp:1474) 20181122124020.623582 pulsesvc[p16.t16] rmon.info Found best route via ifc eth0 (routemon.cpp:1843) 20181122124020.623590 pulsesvc[p16.t16] rmon.info best route to <ip address> is 0.0.0.0/0.0.0.0 via 0x00007FDD metric: 0 (routemon.cpp:1495) 20181122124020.623596 pulsesvc[p16.t16] rmon.info Found best route via ifc eth0 (routemon.cpp:1843) 20181122124020.623600 pulsesvc[p16.t16] rmon.info Found best route via ifc eth0 (routemon.cpp:1843) 20181122124020.623604 pulsesvc[p16.t16] rmon.info best route to gateway: 172.17.0.0/255.255.0.0 gw 0.0.0.0 via 0x00000000 metric 0 (routemon.cpp:2010) 20181122124020.623609 pulsesvc[p16.t16] rmon.info attempting to add route to next hop gateway (routemon.cpp:2014) 20181122124020.623614 pulsesvc[p16.t16] rmon.info adding route to 172.17.0.1/255.255.255.255 with gw 0.0.0.0, metric 1, if_id 0 (routemon.cpp:887) 20181122124020.623622 pulsesvc[p16.t16] rmon.error Failed to add route: dest 172.17.0.1 mask 255.255.255.255, gw 0.0.0.0 dev eth0. Error 1, fd = 7 (routemon.cpp:981) 20181122124020.623628 pulsesvc[p16.t16] rmon.error Failed to add a route to the IVE's next hop gateway (routemon.cpp:2041) 20181122124020.623632 pulsesvc[p16.t16] session.error add IVE route failed (session.cpp:466) 20181122124020.623638 pulsesvc[p16.t16] session.info disconnecting from ive <address> with reason 6 (session.cpp:627) 20181122124020.623643 pulsesvc[p16.t16] adapter.info closing tun adapter FFFFFFFF (adapter.cpp:1137) 20181122124020.623648 pulsesvc[p16.t16] dsxp.info isRegistered returned false for 0x5572dc5423c0 -1 (dsio.cpp:992) 20181122124020.623653 pulsesvc[p16.t16] dsxp.info isRegistered returned false for 0x5572dc542ce0 -1 (dsio.cpp:992) 20181122124020.623658 pulsesvc[p16.t16] sysdeps.info restoring DNS settings... (sysdeps.cpp:975) 20181122124020.623664 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-resolv.conf => /etc/resolv.conf failed wirh error 2 (sysdeps.cpp:978) 20181122124020.623671 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-hosts.bak => /etc/hosts failed wirh error 2 (sysdeps.cpp:982) 20181122124020.623676 pulsesvc[p16.t16] session.info Session Terminated. Removing ip6tables entries (session.cpp:665) 20181122124020.623686 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D INPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623736 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623743 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623751 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D OUTPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623757 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623761 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623769 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D FORWARD -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623775 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623780 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623788 pulsesvc[p16.t16] session.info disconnected from ive <address> with reason 6 (session.cpp:711) 20181122124020.623880 pulsesvc[p16.t16] ncui.info received onDisconnect with reason = 6 (pulsesvc.cpp:783) 
0

0 Antworten auf die Frage