Клиент командной строки PulseSecure немедленно отключается при запуске в контейнере Docker

421
Rinat Veliakhmedov

Я пытаюсь настроить некоторый автоматизированный процесс, используя Docker-контейнер с Ubuntu 18.04 и клиентом командной строки PS. При запуске вне контейнера он работает нормально и подключается, как и ожидалось, однако при запуске внутри докера он выходит через пару секунд. Кто-нибудь знает, в чем может быть причина здесь?

Мне кажется, что ошибка где-то в

20181122124020.623622 pulsesvc[p16.t16] rmon.error Failed to add route: dest 172.17.0.1 mask 255.255.255.255, gw 0.0.0.0 dev eth0. Error 1, fd = 7 (routemon.cpp:981) 20181122124020.623628 pulsesvc[p16.t16] rmon.error Failed to add a route to the IVE's next hop gateway (routemon.cpp:2041)  

или же

20181122124020.623736 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623743 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623751 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D OUTPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623757 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623761 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623769 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D FORWARD -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623775 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 

Благодарю.

20181122124015.895585 pulsesvc[p16.t16] dsncuiapi.para DsNcUiApi::DsNcUiApi (dsncuiapi.cpp:75) 20181122124015.895642 pulsesvc[p16.t16] pulsesvc.info New pulsesvc log level set to 3 (pulsecommon.cpp:76) 20181122124015.895649 pulsesvc[p16.t16] sysdeps.info restoring DNS settings... (sysdeps.cpp:975) 20181122124015.895693 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-resolv.conf => /etc/resolv.conf failed wirh error 2 (sysdeps.cpp:978) 20181122124015.895722 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-hosts.bak => /etc/hosts failed wirh error 2 (sysdeps.cpp:982) 20181122124017.305510 pulsesvc[p16.t16] pulsesvc.info Proxy is not provided. Reading from system proxy (pulsesvc.cpp:244) 20181122124017.305981 pulsesvc[p16.t16] pulseui.info libproxy load failed /usr/lib/libproxy.so.1: cannot open shared object file: No such file or directory (pulseProxy.cpp:183) 20181122124017.306015 pulsesvc[p16.t16] pulsesvc.info Proxy host : NULL (pulsesvc.cpp:256) 20181122124017.306034 pulsesvc[p16.t16] pulsesvc.info Proxy port : 80 (pulsesvc.cpp:257) 20181122124017.306050 pulsesvc[p16.t16] pulsesvc.info Proxy user : NULL (pulsesvc.cpp:258) 20181122124017.306066 pulsesvc[p16.t16] pulsesvc.info Proxy password : NULL (pulsesvc.cpp:259) 20181122124017.306082 pulsesvc[p16.t16] pulseui.info Proxy object is delete (pulseProxy.cpp:28) 20181122124017.803439 pulsesvc[p16.t16] DSInet.info IVE host <address> resolved to <ip address>, port 443 (dsinet.cpp:329) 20181122124017.804247 pulsesvc[p16.t16] dsssl.warn ssl_init : Failed to load CA certificates (DSSSLSock.cpp:1515) 20181122124017.876823 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124017.877559 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124017.878217 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124017.916421 pulsesvc[p16.t16] dsclient.info state: kStateSignin (dsclient.cpp:339) 20181122124017.916506 pulsesvc[p16.t16] dsclient.info --> GET / (authenticate.cpp:181) 20181122124017.948135 pulsesvc[p16.t16] dsclient.info <-- 302 https://<address>/dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi (authenticate.cpp:213) 20181122124017.948217 pulsesvc[p16.t16] dsclient.info state: kStateWelcome (dsclient.cpp:347) 20181122124017.948249 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi (authenticate.cpp:181) 20181122124018.8710 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.8893 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.9065 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.80880 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124018.80970 pulsesvc[p16.t16] dsclient.info state: kStateLogin (dsclient.cpp:379) 20181122124018.81015 pulsesvc[p16.t16] dsclient.info --> POST /dana-na/auth/url_91utx5ZDCr99Th4K/login.cgi (authenticate.cpp:181) 20181122124018.142767 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.143437 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124018.144095 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.68872 pulsesvc[p16.t16] dsclient.info <-- 302 https://<address>/dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi?p=preauth&id=state_39199dab6d66e28a25b757b695b1372b&signinRealmId=11 (authenticate.cpp:213) 20181122124019.68979 pulsesvc[p16.t16] dsclient.info state: kStatePostAuth (dsclient.cpp:427) 20181122124019.69011 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/auth/url_91utx5ZDCr99Th4K/welcome.cgi?p=preauth&id=state_39199dab6d66e28a25b757b695b1372b&signinRealmId=11 (authenticate.cpp:181) 20181122124019.133876 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.134533 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.135226 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.212034 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.212132 pulsesvc[p16.t16] dsclient.info state: kStatePostCacheCleaner (dsclient.cpp:443) 20181122124019.212161 pulsesvc[p16.t16] dsclient.info --> POST /dana-na/cc/ccupdate.cgi (authenticate.cpp:181) 20181122124019.274046 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.274724 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.275381 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.353210 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.353243 pulsesvc[p16.t16] dsclient.info state: kStatePostHostChecker (dsclient.cpp:435) 20181122124019.353252 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/hc/hcupdate.cgi?policy=get&mode=postauth&signinRealm=<realm> (authenticate.cpp:181) 20181122124019.420061 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.420710 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.421366 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.497000 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.497108 pulsesvc[p16.t16] pulsesvc.info Entering HC sendMessage routine (HostCheckerLinuxTNCC.cpp:138) 20181122124019.497441 pulsesvc[p16.t16] pulsesvc.info Entering packageTncData (HostCheckerLinuxTNCC.cpp:225) 20181122124019.497492 pulsesvc[p16.t16] pulsesvc.info Base64 encoding the tnc payload (HostCheckerLinuxTNCC.cpp:235) 20181122124019.497546 pulsesvc[p16.t16] pulsesvc.info Leaving packageTncData (HostCheckerLinuxTNCC.cpp:251) 20181122124019.497575 pulsesvc[p16.t16] pulsesvc.info sending HC tnc update message to IVE (HostCheckerLinuxTNCC.cpp:336) 20181122124019.563778 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.564427 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.565083 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.638706 pulsesvc[p16.t16] pulsesvc.info extracting Tnc payload (HostCheckerLinuxTNCC.cpp:261) 20181122124019.638799 pulsesvc[p16.t16] pulsesvc.info ConnID: 0 (HostCheckerLinuxTNCC.cpp:272) 20181122124019.638875 pulsesvc[p16.t16] pulsesvc.error No messages to deliver (HostCheckerLinuxTNCC.cpp:379) 20181122124019.638902 pulsesvc[p16.t16] pulsesvc.info HC handshake complete (HostCheckerLinuxTNCC.cpp:122) 20181122124019.638957 pulsesvc[p16.t16] dsclient.info state: kStateLogin (dsclient.cpp:379) 20181122124019.638982 pulsesvc[p16.t16] dsclient.info --> GET /dana-na/auth/url_91utx5ZDCr99Th4K/login.cgi?loginmode=mode_postAuth&postauth=state_39199dab6d66e28a25b757b695b1372b (authenticate.cpp:181) 20181122124019.700461 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.701109 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.701797 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.811302 pulsesvc[p16.t16] dsclient.info <-- 302 https://<address>/dana/home/starter0.cgi?check=yes (authenticate.cpp:213) 20181122124019.811386 pulsesvc[p16.t16] dsclient.info --> GET /dana/home/starter0.cgi?check=yes (authenticate.cpp:181) 20181122124019.844066 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124019.844150 pulsesvc[p16.t16] authStateLogin.info starter0.cgi has asked for tz_offset parameter (authenticate.cpp:497) 20181122124019.844174 pulsesvc[p16.t16] authStateLogin.info starter0.cgi has asked for clienttime parameter (authenticate.cpp:504) 20181122124019.844211 pulsesvc[p16.t16] dsclient.info --> POST /dana/home/starter0.cgi?check=yes (authenticate.cpp:181) 20181122124019.906888 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.907571 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.908230 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124019.973716 pulsesvc[p16.t16] dsclient.info <-- 302 /dana/home/starter.cgi (authenticate.cpp:213) 20181122124019.973800 pulsesvc[p16.t16] dsclient.info --> GET /dana/home/starter.cgi (authenticate.cpp:181) 20181122124020.40356 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124020.40570 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124020.40736 pulsesvc[p16.t16] dsssl.info verify_server_cert_callback : Certificate verification - Successful (DSSSLSock.cpp:1577) 20181122124020.118094 pulsesvc[p16.t16] dsclient.info <-- 200 (authenticate.cpp:213) 20181122124020.118195 pulsesvc[p16.t16] dsclient.info state: kStateAuthenticated (dsclient.cpp:485) 20181122124020.120146 pulsesvc[p16.t16] IpcConn.info listening for IPC connections on port 4242 (ncipc.cpp:93) 20181122124020.120194 pulsesvc[p16.t16] IpcConn.info registering the IPC acceptor (0xDC464E30) IO handler (ncipc.cpp:104) 20181122124020.121260 pulsesvc[p16.t16] IpcConn.info client opening connection to service (ncipc.cpp:360) 20181122124020.121301 pulsesvc[p16.t16] session.info disconnectAll called (session.cpp:1994) 20181122124020.121323 pulsesvc[p16.t16] ipsec.info New tunnel being created (tunnel.cpp:62) 20181122124020.121390 pulsesvc[p16.t16] pulsesvc.info received onOpen (pulsesvc.cpp:701) 20181122124020.121460 pulsesvc[p16.t16] session.info ive_host = <address> (session.cpp:251) 20181122124020.121489 pulsesvc[p16.t16] session.error get nextValue failed, no friendly name (session.cpp:261) 20181122124020.121507 pulsesvc[p16.t16] session.error get nextValue failed, no friendly ID (session.cpp:268) 20181122124020.121524 pulsesvc[p16.t16] session.error get nextValue failed, no Ive Ip (session.cpp:275) 20181122124020.121540 pulsesvc[p16.t16] session.error get nextValue failed, no Host Url (session.cpp:282) 20181122124020.121558 pulsesvc[p16.t16] session.info Will not use a proxy to connect to the IVE (session.cpp:321) 20181122124020.121574 pulsesvc[p16.t16] session.info Network Connect operates in non-FIPS compliant mode (session.cpp:354) 20181122124020.121591 pulsesvc[p16.t16] session.error proxy not found (session.cpp:423) 20181122124020.623409 pulsesvc[p16.t16] session.info IVE host <address> resolved to <ip address> (session.cpp:440) 20181122124020.623526 pulsesvc[p16.t16] rmon.info got system route 0.0.0.0/0.0.0.0 gw 172.17.0.1 metric 0 via 0x00007FDD (routemon.cpp:729) 20181122124020.623537 pulsesvc[p16.t16] rmon.info got system route 172.17.0.0/255.255.0.0 gw 0.0.0.0 metric 0 via 0x00000000 (routemon.cpp:729) 20181122124020.623544 pulsesvc[p16.t16] rmon.info Collecting latest routes from the system (routemon.cpp:1474) 20181122124020.623582 pulsesvc[p16.t16] rmon.info Found best route via ifc eth0 (routemon.cpp:1843) 20181122124020.623590 pulsesvc[p16.t16] rmon.info best route to <ip address> is 0.0.0.0/0.0.0.0 via 0x00007FDD metric: 0 (routemon.cpp:1495) 20181122124020.623596 pulsesvc[p16.t16] rmon.info Found best route via ifc eth0 (routemon.cpp:1843) 20181122124020.623600 pulsesvc[p16.t16] rmon.info Found best route via ifc eth0 (routemon.cpp:1843) 20181122124020.623604 pulsesvc[p16.t16] rmon.info best route to gateway: 172.17.0.0/255.255.0.0 gw 0.0.0.0 via 0x00000000 metric 0 (routemon.cpp:2010) 20181122124020.623609 pulsesvc[p16.t16] rmon.info attempting to add route to next hop gateway (routemon.cpp:2014) 20181122124020.623614 pulsesvc[p16.t16] rmon.info adding route to 172.17.0.1/255.255.255.255 with gw 0.0.0.0, metric 1, if_id 0 (routemon.cpp:887) 20181122124020.623622 pulsesvc[p16.t16] rmon.error Failed to add route: dest 172.17.0.1 mask 255.255.255.255, gw 0.0.0.0 dev eth0. Error 1, fd = 7 (routemon.cpp:981) 20181122124020.623628 pulsesvc[p16.t16] rmon.error Failed to add a route to the IVE's next hop gateway (routemon.cpp:2041) 20181122124020.623632 pulsesvc[p16.t16] session.error add IVE route failed (session.cpp:466) 20181122124020.623638 pulsesvc[p16.t16] session.info disconnecting from ive <address> with reason 6 (session.cpp:627) 20181122124020.623643 pulsesvc[p16.t16] adapter.info closing tun adapter FFFFFFFF (adapter.cpp:1137) 20181122124020.623648 pulsesvc[p16.t16] dsxp.info isRegistered returned false for 0x5572dc5423c0 -1 (dsio.cpp:992) 20181122124020.623653 pulsesvc[p16.t16] dsxp.info isRegistered returned false for 0x5572dc542ce0 -1 (dsio.cpp:992) 20181122124020.623658 pulsesvc[p16.t16] sysdeps.info restoring DNS settings... (sysdeps.cpp:975) 20181122124020.623664 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-resolv.conf => /etc/resolv.conf failed wirh error 2 (sysdeps.cpp:978) 20181122124020.623671 pulsesvc[p16.t16] sysdeps.error rename /etc/jnpr-nc-hosts.bak => /etc/hosts failed wirh error 2 (sysdeps.cpp:982) 20181122124020.623676 pulsesvc[p16.t16] session.info Session Terminated. Removing ip6tables entries (session.cpp:665) 20181122124020.623686 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D INPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623736 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623743 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623751 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D OUTPUT -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623757 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623761 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623769 pulsesvc[p16.t16] session.info Executing '/sbin/ip6tables -D FORWARD -j DROP -m comment --comment nc_client >/dev/null 2>/dev/null' (syscmd.cpp:445) 20181122124020.623775 pulsesvc[p16.t16] session.error Execute check failed for /sbin/ip6tables - No such file or directory (syscmd.cpp:306) 20181122124020.623780 pulsesvc[p16.t16] session.info /sbin/ip6tables status 0xffffffff (syscmd.cpp:542) 20181122124020.623788 pulsesvc[p16.t16] session.info disconnected from ive <address> with reason 6 (session.cpp:711) 20181122124020.623880 pulsesvc[p16.t16] ncui.info received onDisconnect with reason = 6 (pulsesvc.cpp:783) 
0

0 ответов на вопрос

Похожие вопросы