Request network permission

snap
1

Hello everyone, I am submitting a request for network access on behalf of snap Slack users. We are currently experiencing issues when attempting to reconnect to the app after switching to VPNs such as ExpressVPN and company-owned VPNs. The error message displayed is ‘ERR_NAME_NOT_RESOLVED’. I’m not entirely certain which network access is required to address this issue, but any assistance would be greatly appreciated.

If you have any questions or require further information regarding either of the requests, please do not hesitate to let me know. I am more than happy to provide any additional details you may need. Thank you!

2

The slack snap already plugs both network and network-bind and both are auto-connected by default so I don’t think there is any additional things to be done on the store side to help in this case. You could try adding network-observe perhaps (this is not auto-connected by default so would need a store declaration) - but this would need to be tested and validated first to make sure it resolves this issue before being granted.

To help debug this, are there any logs available when the users see this error? In particular, any DENIED messages in journalctl/dmesg etc?

3

Hi Alex, thank you for your reply! Yes, I noticed these errors from Snap Slack consoles. I am wondering if the network-control or network-status can help since this issue only occurs when the user is on VPN. I did not see anything from journalctl /dmesg, unless there’s specific folder you want me to look into. Please let me know. thanks!!

image
image2526×1012 748 KB

4

Sorry I meant from the output of dmesg (or journalctl) - or perhaps just in /var/log/syslog

However, I am not aware of VPN connections etc causing issues for any other similar snaps (e.g. the firefox snap seems to work fine when connected over VPN etc). So I am not sure if this is a snap specific issue. Since there doesn’t seem to be anything store related here, I am going to reassign this to the snap category for now.

5

Hi Alex! there are some output I got from both journalctl --no-pager | grep DENIED and journalctl. Please let me know if there’s anything I can try approach.

Do I need to submit a store declaration for network-observe? I wonder if there’s a way I can test it first.

Thank you!

journalctl --no-pager | grep DENIED:

Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Level: error :: Failed with json out as {"error":{"define":"WAAPI_ERROR_ACCESS_DENIED","description":"Defines an error when the access is denied for the invocation call requested.","signature":200057,"timestamp":"1678310848","timing":2,"code":-22,"errors":[{"called_at":"wa_api.cpp:1162","errors":[{"errors":[{"message":"Failed to get stack error from scripting engine","code":-22,"returned_at":"wa_nutjob.cpp:229"},{"code":-22,"returned_at":"wa_impl_scripting.cpp:215"},{"code":-22,"returned_at":"wa_utils_component_manager.cpp:240"}],"code":-22,"returned_at":"wa_api_dispatcher.cpp:209"}],"method":"dispatcher.dispatch( wjIn, wjOut )","code":-22}],"method":100}} Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Level: error :: Failed with json out as {"error":{"define":"WAAPI_ERROR_ACCESS_DENIED","description":"Defines an error when the access is denied for the invocation call requested.","signature":200034,"timestamp":"1678310848","timing":9,"code":-22,"errors":[{"called_at":"wa_api.cpp:1162","errors":[{"errors":[{"message":"Failed to get stack error from scripting engine","code":-22,"returned_at":"wa_nutjob.cpp:229"},{"code":-22,"returned_at":"wa_impl_scripting.cpp:215"},{"code":-22,"returned_at":"wa_utils_component_manager.cpp:240"}],"code":-22,"returned_at":"wa_api_dispatcher.cpp:209"}],"method":"dispatcher.dispatch( wjIn, wjOut )","code":-22}],"method":1007}} Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Level: error :: Failed with json out as {"error":{"define":"WAAPI_ERROR_ACCESS_DENIED","description":"Defines an error when the access is denied for the invocation call requested.","signature":200057,"timestamp":"1678310918","timing":2,"code":-22,"errors":[{"called_at":"wa_api.cpp:1162","errors":[{"errors":[{"message":"Failed to get stack error from scripting engine","code":-22,"returned_at":"wa_nutjob.cpp:229"},{"code":-22,"returned_at":"wa_impl_scripting.cpp:215"},{"code":-22,"returned_at":"wa_utils_component_manager.cpp:240"}],"code":-22,"returned_at":"wa_api_dispatcher.cpp:209"}],"method":"dispatcher.dispatch( wjIn, wjOut )","code":-22}],"method":100}} Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Level: error :: Failed with json out as {"error":{"define":"WAAPI_ERROR_ACCESS_DENIED","description":"Defines an error when the access is denied for the invocation call requested.","signature":200034,"timestamp":"1678310918","timing":9,"code":-22,"errors":[{"called_at":"wa_api.cpp:1162","errors":[{"errors":[{"message":"Failed to get stack error from scripting engine","code":-22,"returned_at":"wa_nutjob.cpp:229"},{"code":-22,"returned_at":"wa_impl_scripting.cpp:215"},{"code":-22,"returned_at":"wa_utils_component_manager.cpp:240"}],"code":-22,"returned_at":"wa_api_dispatcher.cpp:209"}],"method":"dispatcher.dispatch( wjIn, wjOut )","code":-22}],"method":1007}}

journalctl:

Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Posture Assessment: Active Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Function: processCSDData File: ../../vpn/Api/ConnectMgr.cpp Line: 4458 CSD launched, continuing until token is validated. Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Posture Assessment: Initiating... Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Function: ProcessPromptData File: ../../vpn/Api/SDIMgr.cpp Line: 257 Processing initial RSA token challenge received from secure gateway. Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Function: processMainPageDataForRSA File: ../../vpn/Api/SDIMgr.cpp Line: 1081 Invoked Function: PreferenceMgr::getPreference Return Code: -30277621 (0> Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Function: processMainPageDataForRSA File: ../../vpn/Api/SDIMgr.cpp Line: 1208 RSA Token software not available Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Function: LogTokenType File: ../../vpn/Api/SDIMgr.cpp Line: 1353 Method invoked from:   Function processMainPageDataForRSA   Line 1209 RSA Token Type > Mar 08 13:27:22 michellelu-ltl4 vpnui[9216]: Message type prompt sent to the user: Awaiting user input. Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:27:28 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: userResponse File: ../../vpn/Api/ConnectMgr.cpp Line: 1653 Processing user response. Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: sendResponse File: ../../vpn/Api/ConnectMgr.cpp Line: 6273 Validating CSD Token Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: checkCSDTokenValidity File: ../../vpn/Api/ConnectIfc.cpp Line: 1887 Checking CSD token for validity. Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: checkCSDTokenValidity File: ../../vpn/Api/ConnectIfc.cpp Line: 2027 Waiting for CSD token validity result. Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: checkCSDTokenValidity File: ../../vpn/Api/ConnectIfc.cpp Line: 2115 CSD token validity check completed. Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: checkCSDTokenValidity File: ../../vpn/Api/ConnectIfc.cpp Line: 2135 CSD Token is now valid Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: sendResponse File: ../../vpn/Api/ConnectMgr.cpp Line: 6292 CSD Token validated successfully Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 2828 PasswordEntry username is michelle.luo Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: PeerCertVerifyCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1113 Return success from VerifyServerCertificate Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: ClientCertSetCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1219 Client certificate requested by peer Mar 08 13:27:40 michellelu-ltl4 vpnui[9216]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 2828 PasswordEntry username is michelle.luo Mar 08 13:27:46 michellelu-ltl4 vpnui[9216]: Function: processIfcData File: ../../vpn/Api/ConnectMgr.cpp Line: 3778 Authentication succeeded Mar 08 13:27:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Please respond to banner. Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:28:38 michellelu-ltl4 cscan[694169]: Function: log_cb_hostscan Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/scan.c Line: 53 Le> Mar 08 13:28:42 michellelu-ltl4 cscan[694169]: Function: halt Thread Id: 0x7FD8CD00 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/cscan/main.c Line: 83 Level: all ::> Mar 08 13:28:42 michellelu-ltl4 vpnui[9216]: Function: reset_connection_cb Thread Id: 0x2120A700 File: /tmp/build/thehoff/Phoenix_MR20.0905346297237/Phoenix_MR2/posture/asa/libcsd/csd_api.c Line:> Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: VPN state: Connecting Network state: Network Accessible Network control state: Network Access: Available Network type: Undefined Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Establishing VPN session... Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: The profile configured on the secure gateway is: ac-win-mac-profile.xml Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Function: launchCachedDownloader File: ../../vpn/Api/ConnectMgr.cpp Line: 8505 Launching Cached Downloader: path: '/opt/cisco/anyconnect/bin/vpndownlo> Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/anyconnec> Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Function: launchCachedDownloader File: ../../vpn/Api/ConnectMgr.cpp Line: 8524 Invoked Function: ConnectMgr::launchCachedDownloader Return Code: 0 (0x> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader[695467]: Function: handleInvalidPid File: ../../vpn/Common/FirstInstance.cpp Line: 296 PID file does not exist. Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Cisco AnyConnect Secure Mobility Client Downloader (First - Minor VPN) started, version 4.10.05095 Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: AcceptorEndpoint File: ../../vpn/Common/IPC/IpcP2pEndpointFactory.cpp Line: 150 Created P2P IPC Acceptor Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: WaitForConnection File: ../../vpn/Common/IPC/IpcP2pEndpointFactory.cpp Line: 172 Awaiting P2P IPC connection Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Function: processDnldrArgsRequest File: ../../vpn/Api/ConnectMgr.cpp Line: 15237 Determine proxy: false Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: WaitForConnection File: ../../vpn/Common/IPC/IpcP2pEndpointFactory.cpp Line: 181 P2P IPC connection has been established Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: Main File: ../../../vpn/Downloader/Downloader.cpp Line: 734 Initialization Completed. Commencing perform of actions. Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: init File: ../../vpn/Common/i18n/MsgCatalog.cpp Line: 373 initialized catalog: AnyConnect with locale: Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 208 Cached profile data is obsolete, will force reload. Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: setEndElement File: ../../vpn/Api/HostInitSettings.cpp Line: 464 Hiding AutomaticVpnPolicy Preference because no valid TND> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: setEndElement File: ../../vpn/Api/HostInitSettings.cpp Line: 464 Hiding AutomaticVpnPolicy Preference because no valid TND> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009)> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009)> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009)> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009)> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009)> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009)> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 247 Loaded profiles: /opt/cisco/anyconnect/profile/ac-win-mac-profil> Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 794 Invoked Function: PreferenceInfo::getPreference Return Code: > Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 809 Invoked Function: PreferenceInfo::getPreference Return Code: > Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Current Preference Settings: ServiceDisable: false CertificateStoreLinux: All ShowPreConnectMessage: false AutoConnectOnStart: false> Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: The AnyConnect Downloader is performing update checks... Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Checking for profile updates... Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Function: Run File: ../../../vpn/Downloader/DownloaderMinorIpcTask.cpp Line: 195 IPC Task Initiated Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Loading preferences for the current user from profile ac-win-mac-profile.xml Mar 08 13:29:46 michellelu-ltl4 acvpndownloader_minor[695467]: Current Preference Settings: ServiceDisable: false CertificateStoreLinux: All ShowPreConnectMessage: false AutoConnectOnStart: false> Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Checking for customization updates... Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Performing any required updates... Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: The AnyConnect Downloader updates have been completed. Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: VPN state: Connecting Network state: Network Accessible Network control state: Network Access: Available Network type: Undefined Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Establishing VPN session... Mar 08 13:29:46 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Establishing VPN - Initiating connection... Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 341 Code-signing verification succeeded. File (/opt/cisco/an> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: findProfile File: ../../vpn/CommonCrypt/Certificates/NSSCertUtils.cpp Line: 692 NSS Profile directory: /home/michelle.luo/.mozilla/fi> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: init File: ../../vpn/Common/i18n/MsgCatalog.cpp Line: 373 initialized catalog: AnyConnect with locale: Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 208 Cached profile data is obsolete, will force reload. Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: setEndElement File: ../../vpn/Api/HostInitSettings.cpp Line: 464 Hiding AutomaticVpnPolicy Preference because no valid TND rules are > Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: setEndElement File: ../../vpn/Api/HostInitSettings.cpp Line: 464 Hiding AutomaticVpnPolicy Preference because no valid TND rules are > Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009) Descriptio> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009) Descriptio> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009) Descriptio> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009) Descriptio> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009) Descriptio> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfile File: ../../vpn/Api/ProfileMgr.cpp Line: 965 Invoked Function: loadProfile Return Code: -33554423 (0xFE000009) Descriptio> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 247 Loaded profiles: /opt/cisco/anyconnect/profile/ac-win-mac-profile-v8.2.9.xm> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 794 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 809 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: invokePreferenceUpdateCBs File: ../../vpn/Api/PreferenceMgr.cpp Line: 1671 Callback interface address is NULL. Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Current Preference Settings: ServiceDisable: false CertificateStoreLinux: All ShowPreConnectMessage: false AutoConnectOnStart: false MinimizeOn> Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Loading preferences for michelle.luo from profile ac-win-mac-profile.xml Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Function: invokePreferenceUpdateCBs File: ../../vpn/Api/PreferenceMgr.cpp Line: 1671 Callback interface address is NULL. Mar 08 13:29:46 michellelu-ltl4 acvpnagent[695479]: Current Preference Settings: ServiceDisable: false CertificateStoreLinux: All ShowPreConnectMessage: false AutoConnectOnStart: false MinimizeOn> Mar 08 13:29:47 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Establishing VPN - Examining system... Mar 08 13:29:47 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Establishing VPN - Activating VPN adapter... Mar 08 13:29:47 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Establishing VPN - Configuring system... Mar 08 13:29:47 michellelu-ltl4 evolution-calen[4795]: Error reading netlink message: Error on netlink socket: Error receiving message: No buffer space available Mar 08 13:29:49 michellelu-ltl4 vpnui[9216]: Message type information sent to the user: Establishing VPN... Mar 08 13:29:49 michellelu-ltl4 acvpndownloader_minor[695467]: Function: processTaskBoundMessage File: ../../../vpn/Downloader/DownloaderMinorIpcTask.cpp Line: 1769 Processing Terminate Task Mess> Mar 08 13:29:49 michellelu-ltl4 acvpndownloader_minor[695467]: Function: CloseConnection File: ../../vpn/Common/IPC/IpcP2pConnection.cpp Line: 346 Terminating P2P IPC connection Mar 08 13:29:49 michellelu-ltl4 acvpndownloader_minor[695467]: Function: CloseConnection File: ../../vpn/Common/IPC/IpcP2pConnection.cpp Line: 422 P2P IPC connection closed Mar 08 13:29:49 michellelu-ltl4 acvpndownloader_minor[695467]: Function: Run File: ../../../vpn/Downloader/DownloaderMinorIpcTask.cpp Line: 220 IPC Task Terminated Mar 08 13:29:49 michellelu-ltl4 acvpndownloader_minor[695467]: Function: WaitForCompletion File: ../../vpn/Common/Utility/Thread.cpp Line: 311 The thread has successfully completed execution. Mar 08 13:29:49 michellelu-ltl4 acvpndownloader_minor[695467]: Cisco AnyConnect Secure Mobility Client Downloader (First - Minor VPN) exiting, version 4.10.05095 , return code 0 [0x00000000] Mar 08 13:29:49 michellelu-ltl4 vpnui[9216]: VPN state: Connected Network state: Network Accessible Network control state: Network Access: Restricted Network type: Undefined Mar 08 13:29:49 michellelu-ltl4 vpnui[9216]: Function: launchCachedDownloader File: ../../vpn/Api/ConnectMgr.cpp Line: 8551 Invoked Function: ConnectMgr::launchCachedDownloader Return Code: 0 (0x> Mar 08 13:29:49 michellelu-ltl4 vpnui[9216]: Loading preferences for the current user from profile ac-win-mac-profile.xml Mar 08 13:29:49 michellelu-ltl4 vpnui[9216]: Current Preference Settings: ServiceDisable: false CertificateStoreLinux: All ShowPreConnectMessage: false AutoConnectOnStart: false MinimizeOnConnect>
6

Hi Alex, the snap Slack issue was resolved when I updated my local DNS settings to use Google’s Public DNS (8.8.8.8 and 8.8.4.4). While this resolved the issue, I’m still curious as to why this was necessary. Do you think it’s possible that Snap Slack is missing some kind of configuration that requires specific DNS settings? If so, could you offer any advice or information on how to add these configurations?

I understand that I provided a long log. Is there a specific error that you would like me to investigate? Currently, all HTTP calls are resulting in an ‘ERR_NAME_NOT_RESOLVED’ error.

Thank you!

7

Hi :wave:

This is behaviour I have notice previously with the Slack snap, and reported to Slack tech support also.

I posted about it here, where I noticed that /etc/resolv.conf updates where not reflected in running snaps, until a system restart [ although perhaps some other less mechanism could refresh it ].

For some background, when you connect to a VPN, it’s quite common still for various VPN tools to try and manage /etc/resolv.conf, and add DNS server for the VPN connection. There are different approaches for resolver management these days on linux, especially with systemd-resolved, and VPN utils don’t have to manage resolv.conf any more, but many utils do still [ possibly because it’s the most universal approach still, or some laziness :slight_smile: ].

Anyway, I never got to the bottom of the snap behaviour I asked about in the linked post. Perhaps someone can provide some thoughts on that.

Cheers, Just

8

Just in case it’s not clear, the typical scenario can be something like:

Connect to VPN and private DNS servers are added to /etc/resolv.conf, then launch Slack which get’s /etc/resolv.conf with the private DNS servers. Now disconnect from the VPN, the private DNS server are removed from /etc/resolv.conf, and the snap never get’s an updated /etc/resolv.conf and cannot access the private servers any more as they are only available when connected to the VPN.

Cheers, Just

9

Hi!! Thank you for providing more details on the issue. I believe I have figured out that it was caused by a configuration from Snapcraft.yaml. I am working to fix the issue and anticipate that the changes will be included in the next Snap Slack release :smiley: :pray:

10

Great.

Out of curiosity, are you able to provide any more detail ?

Cheers, Just

11

It had something to do with one of the layouts that overrode the DNS. Once I removed it, everything worked.

1 Like