Cisco AnyConnect VPN, Linux machine, Connection attempt has failed

[Grizzix]

Hello all,

I am using manjaro linux currently running: 5.15.140-1-MANJARO (linux515), and upgraded my system Friday to the latest. Friday morning my work vpn was connecting fine, but after the update I am unable to connect. 

I am using cisco anyconnect client version: 4.8.03052 (which is the only version right now that my company gives us to use for linux).

The issue is in the vpn ui I select my endpoint, hit connect, input the sms I get to authenticate, it works, then the vpn errors out and gives me a "Connection attempt has failed".

The logs for the above steps are as follows starting from the moment I hit connect.

/* 
Dec 06 16:10:32 user-pc acvpnui[1853404]: An SSL VPN connection to Oak Brook, For Americas Region has been requested by the user.
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 53
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 53
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 29
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 2
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: compareValue File: ../../vpn/Api/HostInitSettings.cpp Line: 1318 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED UnknownPreference
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 2
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 1245 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED CertificateStore
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 3
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: compareValue File: ../../vpn/Api/HostInitSettings.cpp Line: 1318 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED UnknownPreference
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 3
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 1245 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED CertificateStoreMac
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 53
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 53
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 29
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 2
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: compareValue File: ../../vpn/Api/HostInitSettings.cpp Line: 1318 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED UnknownPreference
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 2
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 1245 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED CertificateStore
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 3
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: compareValue File: ../../vpn/Api/HostInitSettings.cpp Line: 1318 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED UnknownPreference
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 3
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 1245 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED CertificateStoreMac
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: setConnectionData File: ../../vpn/Api/ConnectMgr.cpp Line: 2055 Resetting client certificate list.
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getCertList File: ../../vpn/Api/ApiCert.cpp Line: 492 Number of certificates found: 0
Dec 06 16:10:32 user-pc acvpnui[1853404]: Message type information sent to the user: Contacting Oak Brook, For Americas Region.
Dec 06 16:10:32 user-pc acvpnui[1853404]: Initiating VPN connection to the secure gateway https://usob1-vpn1.xylem.com
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 53
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 53
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 29
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: isEnabled File: ../../vpn/Api/HostInitSettings.cpp Line: 502 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 2
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: compareValue File: ../../vpn/Api/HostInitSettings.cpp Line: 1318 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED UnknownPreference
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 2
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 1245 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED CertificateStore
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 3
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: compareValue File: ../../vpn/Api/HostInitSettings.cpp Line: 1318 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED UnknownPreference
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: getPreference File: ../../vpn/Api/PreferenceInfoBase.cpp Line: 274 Invoked Function: getPreference Return Code: 0 (0x00000000) Description: Invalid preference 3
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: mergeWith File: ../../vpn/Api/HostInitSettings.cpp Line: 1245 Invoked Function: PreferenceInfo::getPreference Return Code: -33554423 (0xFE000009) Description: GLOBAL_ERROR_UNEXPECTED CertificateStoreMac
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: processConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 14697 Received connect notification (host usob1-vpn1.xylem.com, profile WaterVPNSettings.xml)
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: GetSupportedIPProtocols File: ../../vpn/Api/PreferenceMgr.cpp Line: 244 The endpoint does not fully support IPv6. IPProtocolSupport value IPv4,IPv6 is being overridden and only IPv4 will be used.
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: logResolutionResult File: ../../vpn/Common/Utility/HostLocator.cpp Line: 927 Host usob1-vpn1.xylem.com has been resolved to IP address redacted
Dec 06 16:10:32 user-pc acvpnagent[273818]: Writing to hosts file:  redacted        usob1-vpn1.xylem.com ###Cisco AnyConnect VPN client modified this file. Please do not modify contents until this comment is removed.
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: respondToConnectNotification File: ../../vpn/Agent/MainThread.cpp Line: 6040 The requested VPN connection to usob1-vpn1.xylem.com will target the following IP protocols and addresses: primary - IPv4 (address redacted), secondary - N/A.
Dec 06 16:10:32 user-pc acvpnagent[273818]: Function: determineAcidexMacAddrMapForTlv File: ../../vpn/Agent/MainThread.cpp Line: 6386 [ACIDEX] Determined public interface MAC address e4-b9-7a-80-59-3e (interface IPv4 address: redacted)
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 2604 PasswordEntry username is redacted
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:32 user-pc acvpnui[1853404]: Function: PeerCertVerifyCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 998 Return success from VerifyServerCertificate
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: ProcessPromptData File: ../../vpn/Api/SDIMgr.cpp Line: 336 Authentication is not token based (OTP).
Dec 06 16:10:33 user-pc acvpnui[1853404]: Message type prompt sent to the user: Please complete the authentication process in the AnyConnect Login window.
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: verify_callback File: ../../vpn/CommonCrypt/Certificates/FileCertificate.cpp Line: 417 Invoked Function: X509_verify_cert Return Code: 0 (0x00000000) Description: ok
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: verifyUsingFileStore File: ../../vpn/CommonCrypt/Certificates/NSSCertificate.cpp Line: 577 Invoked Function: CFileCertificate::Verify Return Code: -31391726 (0xFE210012) Description: CERTIFICATE_ERROR_VERIFY_CHAIN_POLICY_FAILED_ASKUSER
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: Verify File: ../../vpn/CommonCrypt/Certificates/NSSCertificate.cpp Line: 332 Invoked Function: CNSSCertificate::verifyCertChain Return Code: -31391726 (0xFE210012) Description: CERTIFICATE_ERROR_VERIFY_CHAIN_POLICY_FAILED_ASKUSER
Dec 06 16:10:33 user-pc acvpnui[1853404]: Server certificate validation was successful
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: IsValid File: ../../vpn/CommonCrypt/VerifyFileSignatureOpenSSL.cpp Line: 324 Code-signing verification succeeded. File (/opt/cisco/anyconnect/bin/acwebhelper)
Dec 06 16:10:33 user-pc acwebhelper[1864689]: Function: initIpc File: ../../vpn/Common/IPC-JSON/JSONIPCClient.cpp Line: 145 Initiating IPC connection to 127.0.0.1:53495...
Dec 06 16:10:33 user-pc acwebhelper[1864689]: Function: handleConnect File: ../../vpn/Common/IPC-JSON/JSONIPCClient.cpp Line: 220 IPC connection established
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: Start File: ../../vpn/Common/IPC-JSON/JSONIPCConn.cpp Line: 46 Accepted IPC connection #2 from client
Dec 06 16:10:33 user-pc acwebhelper[1864689]: Function: init File: ../../vpn/Common/i18n/MsgCatalog.cpp Line: 373 initialized catalog: AnyConnect with locale:
Dec 06 16:10:33 user-pc acvpnui[1853404]: Function: launchBrowser File: ../../../../vpn/GUI/WebHelper/Plugin/WebHelperPluginImpl.cpp Line: 644 Browser process launched successfully [pid 1864689]
Dec 06 16:10:33 user-pc rtkit-daemon[1704]: Supervising 14 threads of 5 processes of 1 users.
Dec 06 16:10:33 user-pc rtkit-daemon[1704]: Successfully made thread 1864759 of process 1864739 owned by '1000' RT at priority 5.
Dec 06 16:10:33 user-pc rtkit-daemon[1704]: Supervising 15 threads of 6 processes of 1 users.
Dec 06 16:10:33 user-pc rtkit-daemon[1704]: Supervising 15 threads of 6 processes of 1 users.
Dec 06 16:10:33 user-pc rtkit-daemon[1704]: Successfully made thread 1864780 of process 1864739 owned by '1000' RT at priority 5.
Dec 06 16:10:33 user-pc rtkit-daemon[1704]: Supervising 16 threads of 6 processes of 1 users.
Dec 06 16:10:40 user-pc rtkit-daemon[1704]: Supervising 16 threads of 6 processes of 1 users.
Dec 06 16:10:40 user-pc rtkit-daemon[1704]: Supervising 16 threads of 6 processes of 1 users.
Dec 06 16:10:51 user-pc rtkit-daemon[1704]: Supervising 16 threads of 6 processes of 1 users.
Dec 06 16:10:51 user-pc rtkit-daemon[1704]: Supervising 16 threads of 6 processes of 1 users.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: userResponse File: ../../vpn/Api/ConnectMgr.cpp Line: 1635 Processing user response.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: errorCB File: ../../vpn/Common/Xml/CVCSaxParser.cpp Line: 112 xml errorCB: Document is empty
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: startParser File: ../../vpn/Common/Xml/CVCSaxParser.cpp Line: 198 Invoked Function: xmlParseDocument Return Code: -1 (0xFFFFFFFF) Description: unknown
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: processXML File: ../../vpn/Api/xml/AggAuth.cpp Line: 59 Invoked Function: XmlParser::parseXml Return Code: -33554423 (0xFE000009) Description: Unable to process response from Gateway.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: processResponseStringFromSG File: ../../vpn/Api/ConnectMgr.cpp Line: 12042 Invoked Function: AggrAuth::processXML Return Code: -27590645 (0xFE5B000B) Description: AGGAUTH_ERROR_FAILED_TO_PARSE_XML
Dec 06 16:10:52 user-pc acvpnui[1853404]: Message type warning sent to the user: Connection attempt has failed.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: processIfcData File: ../../vpn/Api/ConnectMgr.cpp Line: 3337 ConnectMgr::processResponseStringFromSG failed
Dec 06 16:10:52 user-pc acvpnui[1853404]: Message type error sent to the user: Connection attempt has failed.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: sendResponse File: ../../vpn/Api/ConnectMgr.cpp Line: 6440 ConnectMgr::processIfcData failed
Dec 06 16:10:52 user-pc acvpnui[1853404]: VPN state: Disconnected Network state: Network Accessible Network control state: Network Access: Available Network type: Undefined
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: setConnectRequestComplete File: ../../vpn/Api/ConnectMgr.cpp Line: 10844 Connect request complete. Proceeding to cleanup.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: cancelUserAuth File: ../../vpn/Api/ConnectMgr.cpp Line: 5684 Authentication cancelled
Dec 06 16:10:52 user-pc acvpnui[1853404]: VPN state: Disconnected Network state: Network Accessible Network control state: Network Access: Available Network type: Undefined
Dec 06 16:10:52 user-pc acvpnui[1853404]: Message type information sent to the user: Ready to connect.
*/

It looks like there might be a certificate issue from messages like "CERTIFICATE_ERROR_VERIFY_CHAIN_POLICY_FAILED_ASKUSER"  but I do see "Server certificate validation was successful" in there too.

I am unsure of how to troubleshoot this further.

[justacsmcinuse]

Hi,

One can find in your log also xml parsing problem.

Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: userResponse File: ../../vpn/Api/ConnectMgr.cpp Line: 1635 Processing user response.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: errorCB File: ../../vpn/Common/Xml/CVCSaxParser.cpp Line: 112 xml errorCB: Document is empty
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: startParser File: ../../vpn/Common/Xml/CVCSaxParser.cpp Line: 198 Invoked Function: xmlParseDocument Return Code: -1 (0xFFFFFFFF) Description: unknown
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: processXML File: ../../vpn/Api/xml/AggAuth.cpp Line: 59 Invoked Function: XmlParser::parseXml Return Code: -33554423 (0xFE000009) Description: Unable to process response from Gateway.
Dec 06 16:10:52 user-pc acvpnui[1853404]: Function: processResponseStringFromSG File: ../../vpn/Api/ConnectMgr.cpp Line: 12042 Invoked Function: AggrAuth::processXML Return Code: -27590645 (0xFE5B000B) Description: AGGAUTH_ERROR_FAILED_TO_PARSE_XML
Dec 06 16:10:52 user-pc acvpnui[1853404]: Message type warning sent to the user: Connection attempt has failed.

I have similar problem on my system, Manjaro Stable with Cisco AnyConnect Secure Mobility Client, version however is bit different 4.10.06079. Also with MFA, in my case error message is printed to user yet before authentication dialog opens.

https://community.cisco.com/t5/vpn/ac-smc-stopped-suddenly-to-work/m-p/4974020

[Grizzix · Accepted solution]

I figured out a solution to this issue that works for me.

The issue is the latest version of libxml2 on my system 2.12.

I reverted to the old cached version on my system 2.11.5 from 2.12 , and reinstalled the clientvpn. After that, it seems to be connecting, for now.

libxml is cursed.

[justacsmcinuse]

Thanks for input from you. GNOME team feedback may though be worth to take a look at it. Nick's comment over there five hours earlier as this message "has nothing to do with..". GNOME is project where libxml2 gets maintained.

Concluded too fast hence improperly. Correlation visible, though two separate issues.

[justacsmcinuse]

How intensive are libxml2 reverse-dependencies on your Manjaro? All live well with rollback to 2.11.5? 

[Grizzix]

Dependency wise, I didn't notice anything breaking when I rolled back to libxml2 v2.11.5-1. Everything so far seems to be happy and working, and when I did the downgrade, it didn't complain about conflicting or broken dependencies. I used manjaro-downgrade and chose the 2.11.5-1 cached version and it all just worked. After that I reinstalled the vpn client and it started working/connecting.

[justacsmcinuse]

Arch Linux folks seem to hadn't need to wait long for first incompatibility with downgraded xml2 lib version issues.

see post #13 Arch Linux user forum thread.

[david2202 · Accepted solution]

I had a similar issue on  Arch Linux with the upgrade to libxml2 2.12.3. My solution was to manually upgrade to version 2.12.4 (pacman with the -Syu would leave the package at 2.12.3), which then allowed cisco-anyconnect to work. I know a solution has already been accepted but I just wanted to post as the downgrade to 2.11.5 solution caused errors for me.

[Grizzix]

I also encourage folks to visit this thread to see if there are some steps to resolve your issue without causing breaking dependency changes. #29 from that thread worked for me on manjaro linux.