Openconnect resolution issue

Ronen Leibovici rleibovici at gmail.com
Fri Sep 18 16:14:42 PDT 2015


Good day,

Here is the situation.

When working on my RHEL6 host, I use AT&T dialer to connect to my
companies intranet.
When doing so, my resolv.conf file is updated to include the
nameservers of my company.

Then, I use openconnect in order to connect to our customer. This also
works and the resolv.conf file is edited by VPNC to include the
nameservers of our customer.

The problem lies in the fact that if i try to perform any resolution,
it fails because, for some reason, my O/S has now been told that
recursion is not allowed and only the first name server in my
resolv.conf file is queried.

ex:
[root at oc8146477318 ~]# nslookup w3.ibm.com
Server: 96.4.1.83
Address: 96.4.1.83#53

** server can't find w3.ibm.com: NXDOMAIN


If I connect to my AT&T dialer and then use Cisco Anyconnect Gui or
CLI to connect to the customer, name resolution works:

ex:
   [root at oc8146477318 cscotun0]# nslookup w3.ibm.com
;; Got recursion not available from 96.4.1.83, trying next server
;; Got recursion not available from 96.130.126.21, trying next server
Server: 9.0.148.50
Address: 9.0.148.50#53

w3.ibm.com canonical name = w3.ibm.eventsgslb.ibm.com.
Name: w3.ibm.eventsgslb.ibm.com
Address: 9.17.137.11


When using openconnect, I am trying to understand why name resolution
is not going through the entire list of name servers defined in
resolv.conf. Can you please help? Am I missing some flag or must i
edit vpnc somehow?

Thanks,

Ron Leibovici



More information about the openconnect-devel mailing list