Hi everyone,
I've been successfully using openconnect for years on OS X.
I've starting having trouble and I'm not sure how to debug it.
I'm using OS X 10.13.6.
I keep getting the following error, even after reboot:
[2018-09-06 20:09:50] Failed to connect utun unit: Resource busy
Set up tun device failed
Changing the utun device in utun{0,3} doesn't change the error.
Here's the command I'm running
sudo /opt/local/sbin/openconnect XX.XX.XX.XX \
--timestamp \
--user=USERNAME \
--disable-ipv6 \
--interface=utun1 \
--verbose \
--pid-file=/var/run/openconnect.pid \
What does Resource busy mean in this case? How can I figure out
who's using the utun devices? Normally I'd use something like lsof, but
there's no filesystem devices like /dev/utunX.
Before starting openconnect, they all seem normal:
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::39a5:5c3c:78ee:5f12%utun0 prefixlen 64 scopeid 0xa
nd6 options=201<PERFORMNUD,DAD>
utun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::46ec:8e52:61db:2fd%utun1 prefixlen 64 scopeid 0xb
nd6 options=201<PERFORMNUD,DAD>
utun2: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::f819:3c35:93e2:a1ee%utun2 prefixlen 64 scopeid 0xc
nd6 options=201<PERFORMNUD,DAD>
utun3: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1380
inet6 fe80::62ff:49a:b8bc:493d%utun3 prefixlen 64 scopeid 0xd
nd6 options=201<PERFORMNUD,DAD>
Thanks for any advice.
Debug output is below:
[2018-09-06 20:09:32] POST https://XX.XX.XX.XX
[2018-09-06 20:09:32] Attempting to connect to server XX.XX.XX.XX:443
[2018-09-06 20:09:32] Connected to XX.XX.XX.XX:443
[2018-09-06 20:09:32] SSL negotiation with XX.XX.XX.XX
[2018-09-06 20:09:32] Connected to HTTPS on XX.XX.XX.XX
[2018-09-06 20:09:32] Got HTTP response: HTTP/1.1 200 OK
[2018-09-06 20:09:32] Content-Type: text/html; charset=utf-8
[2018-09-06 20:09:32] Transfer-Encoding: chunked
[2018-09-06 20:09:32] Cache-Control: no-cache
[2018-09-06 20:09:32] Pragma: no-cache
[2018-09-06 20:09:32] Connection: Keep-Alive
[2018-09-06 20:09:32] Date: Fri, 07 Sep 2018 03:09:04 GMT
[2018-09-06 20:09:32] X-Frame-Options: SAMEORIGIN
[2018-09-06 20:09:32] X-Aggregate-Auth: 1
[2018-09-06 20:09:32] HTTP body chunked (-2)
[2018-09-06 20:09:32] XML POST enabled
Please enter your username and password.
Password:
[2018-09-06 20:09:47] POST https://XX.XX.XX.XX/
[2018-09-06 20:09:47] Got HTTP response: HTTP/1.1 200 OK
[2018-09-06 20:09:47] Content-Type: text/html; charset=utf-8
[2018-09-06 20:09:47] Transfer-Encoding: chunked
[2018-09-06 20:09:47] Cache-Control: no-cache
[2018-09-06 20:09:47] Pragma: no-cache
[2018-09-06 20:09:47] Connection: Keep-Alive
[2018-09-06 20:09:47] Date: Fri, 07 Sep 2018 03:09:19 GMT
[2018-09-06 20:09:47] X-Frame-Options: SAMEORIGIN
[2018-09-06 20:09:47] X-Aggregate-Auth: 1
[2018-09-06 20:09:47] HTTP body chunked (-2)
[2018-09-06 20:09:49] Got CONNECT response: HTTP/1.1 200 OK
[2018-09-06 20:09:49] X-CSTP-Version: 1
[2018-09-06 20:09:49] X-CSTP-Protocol: Copyright (c) 2004 Cisco Systems, Inc.
[2018-09-06 20:09:49] X-CSTP-Address: YY.YY.YY.YY
[2018-09-06 20:09:49] X-CSTP-Netmask: 255.255.248.0
[2018-09-06 20:09:49] X-CSTP-DNS: zz.zz.zz.zz
[2018-09-06 20:09:49] X-CSTP-Lease-Duration: 64800
[2018-09-06 20:09:49] X-CSTP-Session-Timeout: 64800
[2018-09-06 20:09:49] X-CSTP-Idle-Timeout: 5400
[2018-09-06 20:09:49] X-CSTP-Disconnected-Timeout: 5400
[2018-09-06 20:09:49] X-CSTP-Default-Domain: some-domain.com
[2018-09-06 20:09:49] X-CSTP-Split-Exclude: QQ.QQ.QQ.0/255.255.255.192
[2018-09-06 20:09:49] X-CSTP-Split-DNS: subdomain.some-domain.com
[2018-09-06 20:09:49] X-CSTP-Keep: true
[2018-09-06 20:09:49] X-CSTP-Tunnel-All-DNS: true
[2018-09-06 20:09:49] X-CSTP-DPD: 30
[2018-09-06 20:09:49] X-CSTP-Keepalive: 20
[2018-09-06 20:09:49] X-CSTP-Banner: ...this%20system%20for%20authorized%20uses...
[2018-09-06 20:09:49] X-CSTP-MSIE-Proxy-Lockdown: true
[2018-09-06 20:09:49] X-CSTP-Smartcard-Removal-Disconnect: true
[2018-09-06 20:09:49] X-DTLS-Session-ID: F7984D84E260A30A5826F749F84C87C4744F4BBB57A4C21EFC7572D6AC1D4623
[2018-09-06 20:09:49] X-DTLS-Port: 443
[2018-09-06 20:09:49] X-DTLS-Keepalive: 20
[2018-09-06 20:09:49] X-DTLS-DPD: 30
[2018-09-06 20:09:49] X-CSTP-MTU: 1287
[2018-09-06 20:09:49] X-DTLS-MTU: 1322
[2018-09-06 20:09:49] X-DTLS-CipherSuite: AES256-SHA
[2018-09-06 20:09:49] X-CSTP-Routing-Filtering-Ignore: false
[2018-09-06 20:09:49] X-CSTP-Quarantine: false
[2018-09-06 20:09:49] X-CSTP-Disable-Always-On-VPN: true
[2018-09-06 20:09:49] X-CSTP-TCP-Keepalive: true
[2018-09-06 20:09:49] X-CSTP-Post-Auth-XML: <elided>
[2018-09-06 20:09:49] CSTP connected. DPD 30, Keepalive 20
[2018-09-06 20:09:49] CSTP Ciphersuite: (TLS1.2)-(RSA)-(AES-256-CBC)-(SHA256)
[2018-09-06 20:09:49] DTLS option X-DTLS-Session-ID : F7984D84E260A30A5826F749F84C87C4744F4BBB57A4C21EFC7572D6AC1D4623
[2018-09-06 20:09:49] DTLS option X-DTLS-Port : 443
[2018-09-06 20:09:49] DTLS option X-DTLS-Keepalive : 20
[2018-09-06 20:09:49] DTLS option X-DTLS-DPD : 30
[2018-09-06 20:09:49] DTLS option X-DTLS-MTU : 1322
[2018-09-06 20:09:49] DTLS option X-DTLS-CipherSuite : AES256-SHA
[2018-09-06 20:09:49] DTLS initialised. DPD 30, Keepalive 20
[2018-09-06 20:09:49] Connected as AA.AA.AA.AA, using SSL
[2018-09-06 20:09:49] Established DTLS connection (using GnuTLS). Ciphersuite (DTLS0.9)-(RSA)-(AES-256-CBC)-(SHA1).
[2018-09-06 20:09:49] Initiating IPv4 MTU detection (min=661, max=1322)
[2018-09-06 20:09:49] No change in MTU after detection (was 1322)
[2018-09-06 20:09:50] Failed to connect utun unit: Resource busy
Set up tun device failed
[2018-09-06 20:09:50] Unknown error; exiting.
--
Dan Grillo dan at grillo.net (650) 299-1470
