LinuxQuestions.org - Linux 2.6.10 cisco vpn client freezes system

- Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)

- - Linux 2.6.10 cisco vpn client freezes system (https://www.linuxquestions.org/questions/linux-software-2/linux-2-6-10-cisco-vpn-client-freezes-system-270805/)

Linux 2.6.10 cisco vpn client freezes system

Hello.
After issuing
vpnclient connect somewhere
the system freezes completely.
Cannot login from another host on the network, ping fails, ...
I have to push the reset button.

Worked without problems with 2.6.9.

(Cisco Systems VPN Client Version 4.6.00 (0045))

Sigh Thomas

I had similar problem with you.
I cannot compile a new module for this new kernel but in 2.6.8.1.
Just some guess, the kernel may change the way to support vpn?

I am still configuring out anyway.

work-a-round found

Hi,

I had same symptoms using vpnclient with kernel 2.6.10.
I made following change (line 607 and 732 - delete character '&') in vpnclient's code:

$ diff vpnclient/interceptor.c vpnclient.1/interceptor.c
607c607
< if (skb_checksum_help(&skb,1))
---
> if (skb_checksum_help(skb,1))
732c732
< if (skb_checksum_help(&skb,0))
---
> if (skb_checksum_help(skb,0))

After that - no warning messages during installation and vpn works without problems.
I just followed warning messages which I got during installation/compilation.

Also made case on this issue to Cisco.

regards,

urr

Cool urr, that fixes the problem.
;)

Oops!
I did the above way, but I got the same error.
URGH~ any idea?

Quote:

Making module
make -C /lib/modules/2.6.10-kaon/build SUBDIRS=/home/tsun/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.10'
CC [M] /home/tsun/vpnclient/linuxcniapi.o
CC [M] /home/tsun/vpnclient/frag.o
CC [M] /home/tsun/vpnclient/IPSecDrvOS_linux.o
CC [M] /home/tsun/vpnclient/interceptor.o
/home/tsun/vpnclient/interceptor.c: In function `add_netdev':
/home/tsun/vpnclient/interceptor.c:59: sorry, unimplemented: inlining failed in call to 'supported_device': function body not available
/home/tsun/vpnclient/interceptor.c:245: sorry, unimplemented: called from here
make[2]: *** [/home/tsun/vpnclient/interceptor.o] Error 1
make[1]: *** [_module_/home/tsun/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.10'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".

umm, try setting real path to kernel sources, like /usr/src/linux-2.6.10
AFAIK it uses more than just headerfiles from sources but i can be wrong in this point.

No luck after recompiling the kernel without custom tag.
Now checking the kernel configuration.

Does the version of gcc matter?
Just a wild guess.

:(

Quote:

Originally posted by kaon
Oops!
I did the above way, but I got the same error.
URGH~ any idea?

I found that the problem is due to supported_device() being declared, but not defined before it is used. This may be a gcc 3.4-ism or something. I moved the definition of supported_device to be before add_netdev() and it builds with no issues.

Where did you make this change to get this working. I am running fc3 2.6.9-1.724. I need to get this client running for work. Thanks. I'm a bit of a newbie so a little hand holding would be appreciated.

Rick

Re: same problem

Quote:

Originally posted by ringersoll1869
Where did you make this change to get this working. I am running fc3 2.6.9-1.724. I need to get this client running for work. Thanks. I'm a bit of a newbie so a little hand holding would be appreciated.

Rick

Copy/paste this patch:

Code:

--- interceptor.c.orig  2005-01-04 14:55:44.246848280 -0500

+++ interceptor.c      2005-01-04 14:56:15.955027904 -0500

@@ -236,6 +236,24 @@

    dev_kfree_skb(skb);

    return 0;

 }

+

+static int

+inline supported_device(struct net_device* dev)

+{

+    int rc=0;

+

+    if(dev->type == ARPHRD_ETHER)

+    {

+        rc=1;

+    }

+    else if(dev->type == ARPHRD_PPP)

+    {

+        rc=1;

+    }

+

+    return rc;

+}

+

 static int

 add_netdev(struct net_device *dev)

 {

@@ -476,23 +494,6 @@

    s->rc = 0;

 }



-static int

-inline supported_device(struct net_device* dev)

-{

-    int rc=0;

-

-    if(dev->type == ARPHRD_ETHER)

-    {

-        rc=1;

-    }

-    else if(dev->type == ARPHRD_PPP)

-    {

-        rc=1;

-    }

-

-    return rc;

-}

-



 static BINDING *

 getbindingbydev(struct net_device *dev)

and apply it with 'patch -p0 < patch.txt' when you are in the vpnclient directory. All that is being done is modifying interceptor.c by moving the supported_device() function definition before the add_netdev() call. I was able to build it today against FC3s new 724 kernel. If copy/paste on the patch doesn't take, I can email it to you direct.

Perfect. Thanks for the help and responding so quickly

slacker775, I have followed your instructions, but the system still freezes as I connect.

the steps i took were

1) unpack tarball
2) copy your patch & save it in vpn client as patch.txt
3) apply the patch

(gives an error message about finishing in middle of line)

4) install the vpn client - no errors

5) try & connect vpnclient connect default

6) system freeze

any thing else I should do? Have I applied the patch wrongly?

thanks very much

I am still having trouble installing the client

Am running FC3, following instructions found elsewhere to install kernel source

after rpm'ing kernel-2.6.9-1.724.src.rpm
I did:

rpmbuild -bp --target=noarch /usr/src/redhat/SPECS/kernel-2.6.spec

So then i untar the vpn client
apply patch
specify kernel source in installatoin as
/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9/

and try to install, i get a mess of errors the ends of which look like

Code:

{standard input}:3325: Error: symbol `lock' is already defined

{standard input}:3361: Error: symbol `security' is already defined

{standard input}:3427: Error: symbol `data' is already defined

{standard input}:3935: Error: symbol `saved_state' is already defined

{standard input}:3971: Error: symbol `release' is already defined

{standard input}:4071: Error: symbol `destructor' is already defined

{standard input}:4077: Error: symbol `open' is already defined

{standard input}:4095: Error: symbol `poll' is already defined

{standard input}:4239: Error: symbol `data' is already defined

{standard input}:4251: Error: symbol `security' is already defined

{standard input}:4712: Error: symbol `u' is already defined

{standard input}:4964: Error: symbol `index' is already defined

{standard input}:4976: Error: symbol `private' is already defined

{standard input}:5071: Error: symbol `lock' is already defined

{standard input}:5263: Error: symbol `child' is already defined

{standard input}:5347: Error: symbol `output' is already defined

{standard input}:5359: Error: symbol `ops' is already defined

{standard input}:5705: Error: symbol `stats' is already defined

{standard input}:5905: Error: symbol `lock' is already defined

{standard input}:6196: Error: symbol `id' is already defined

{standard input}:6244: Error: symbol `protocol' is already defined

make[2]: *** [/home/jfung/download/vpnclient/linuxcniapi.o] Error 1

make[1]: *** [_module_/home/jfung/download/vpnclient] Error 2

make[1]: Leaving directory `/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9'

make: *** [default] Error 2

Failed to make module "cisco_ipsec.ko".

So dunno what I did wrong along the way...

Thanks slacker775 for the patch!

Now my system works like a breeze~!

Quote:

Originally posted by archdev
[B]I am still having trouble installing the client
<snip>

Did you run vpn_uninstall first? Or make clean? Mine failed at first and after a clean it worked.