LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 12-27-2004, 11:01 AM   #1
thahn01
LQ Newbie
 
Registered: Dec 2004
Posts: 2

Rep: Reputation: 0
Linux 2.6.10 cisco vpn client freezes system


Hello.
After issuing
vpnclient connect somewhere
the system freezes completely.
Cannot login from another host on the network, ping fails, ...
I have to push the reset button.

Worked without problems with 2.6.9.

(Cisco Systems VPN Client Version 4.6.00 (0045))

Sigh Thomas
 
Old 12-30-2004, 10:10 PM   #2
kaon
Member
 
Registered: Dec 2003
Location: Hong Kong SAR
Distribution: Slackware 9.1, 10.x, slackware-current
Posts: 186

Rep: Reputation: 30
I had similar problem with you.
I cannot compile a new module for this new kernel but in 2.6.8.1.
Just some guess, the kernel may change the way to support vpn?

I am still configuring out anyway.
 
Old 12-31-2004, 01:55 AM   #3
urr
LQ Newbie
 
Registered: Dec 2004
Location: Estonia
Distribution: Debian stable,testing,unstable
Posts: 2

Rep: Reputation: 0
Thumbs up work-a-round found

Hi,

I had same symptoms using vpnclient with kernel 2.6.10.
I made following change (line 607 and 732 - delete character '&') in vpnclient's code:

$ diff vpnclient/interceptor.c vpnclient.1/interceptor.c
607c607
< if (skb_checksum_help(&skb,1))
---
> if (skb_checksum_help(skb,1))
732c732
< if (skb_checksum_help(&skb,0))
---
> if (skb_checksum_help(skb,0))


After that - no warning messages during installation and vpn works without problems.
I just followed warning messages which I got during installation/compilation.

Also made case on this issue to Cisco.

regards,

urr
 
Old 12-31-2004, 06:31 AM   #4
thahn01
LQ Newbie
 
Registered: Dec 2004
Posts: 2

Original Poster
Rep: Reputation: 0
Cool urr, that fixes the problem.
 
Old 01-02-2005, 07:02 AM   #5
kaon
Member
 
Registered: Dec 2003
Location: Hong Kong SAR
Distribution: Slackware 9.1, 10.x, slackware-current
Posts: 186

Rep: Reputation: 30
Oops!
I did the above way, but I got the same error.
URGH~ any idea?

Quote:
Making module
make -C /lib/modules/2.6.10-kaon/build SUBDIRS=/home/tsun/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.10'
CC [M] /home/tsun/vpnclient/linuxcniapi.o
CC [M] /home/tsun/vpnclient/frag.o
CC [M] /home/tsun/vpnclient/IPSecDrvOS_linux.o
CC [M] /home/tsun/vpnclient/interceptor.o
/home/tsun/vpnclient/interceptor.c: In function `add_netdev':
/home/tsun/vpnclient/interceptor.c:59: sorry, unimplemented: inlining failed in call to 'supported_device': function body not available
/home/tsun/vpnclient/interceptor.c:245: sorry, unimplemented: called from here
make[2]: *** [/home/tsun/vpnclient/interceptor.o] Error 1
make[1]: *** [_module_/home/tsun/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.10'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".
 
Old 01-02-2005, 04:01 PM   #6
urr
LQ Newbie
 
Registered: Dec 2004
Location: Estonia
Distribution: Debian stable,testing,unstable
Posts: 2

Rep: Reputation: 0
umm, try setting real path to kernel sources, like /usr/src/linux-2.6.10
AFAIK it uses more than just headerfiles from sources but i can be wrong in this point.
 
Old 01-03-2005, 08:38 PM   #7
kaon
Member
 
Registered: Dec 2003
Location: Hong Kong SAR
Distribution: Slackware 9.1, 10.x, slackware-current
Posts: 186

Rep: Reputation: 30
No luck after recompiling the kernel without custom tag.
Now checking the kernel configuration.

Does the version of gcc matter?
Just a wild guess.

 
Old 01-04-2005, 02:07 PM   #8
slacker775
LQ Newbie
 
Registered: Jan 2005
Posts: 2

Rep: Reputation: 0
Quote:
Originally posted by kaon
Oops!
I did the above way, but I got the same error.
URGH~ any idea?

I found that the problem is due to supported_device() being declared, but not defined before it is used. This may be a gcc 3.4-ism or something. I moved the definition of supported_device to be before add_netdev() and it builds with no issues.
 
Old 01-04-2005, 08:36 PM   #9
ringersoll1869
LQ Newbie
 
Registered: Jan 2005
Posts: 2

Rep: Reputation: 0
same problem

Where did you make this change to get this working. I am running fc3 2.6.9-1.724. I need to get this client running for work. Thanks. I'm a bit of a newbie so a little hand holding would be appreciated.

Rick
 
Old 01-04-2005, 10:00 PM   #10
slacker775
LQ Newbie
 
Registered: Jan 2005
Posts: 2

Rep: Reputation: 0
Re: same problem

Quote:
Originally posted by ringersoll1869
Where did you make this change to get this working. I am running fc3 2.6.9-1.724. I need to get this client running for work. Thanks. I'm a bit of a newbie so a little hand holding would be appreciated.

Rick
Copy/paste this patch:

Code:
--- interceptor.c.orig  2005-01-04 14:55:44.246848280 -0500
+++ interceptor.c       2005-01-04 14:56:15.955027904 -0500
@@ -236,6 +236,24 @@
     dev_kfree_skb(skb);
     return 0;
 }
+
+static int
+inline supported_device(struct net_device* dev)
+{
+    int rc=0;
+
+    if(dev->type == ARPHRD_ETHER)
+    {
+        rc=1;
+    }
+    else if(dev->type == ARPHRD_PPP)
+    {
+        rc=1;
+    }
+
+    return rc;
+}
+
 static int
 add_netdev(struct net_device *dev)
 {
@@ -476,23 +494,6 @@
     s->rc = 0;
 }

-static int
-inline supported_device(struct net_device* dev)
-{
-    int rc=0;
-
-    if(dev->type == ARPHRD_ETHER)
-    {
-        rc=1;
-    }
-    else if(dev->type == ARPHRD_PPP)
-    {
-        rc=1;
-    }
-
-    return rc;
-}
-

 static BINDING *
 getbindingbydev(struct net_device *dev)
and apply it with 'patch -p0 < patch.txt' when you are in the vpnclient directory. All that is being done is modifying interceptor.c by moving the supported_device() function definition before the add_netdev() call. I was able to build it today against FC3s new 724 kernel. If copy/paste on the patch doesn't take, I can email it to you direct.
 
Old 01-04-2005, 10:07 PM   #11
ringersoll1869
LQ Newbie
 
Registered: Jan 2005
Posts: 2

Rep: Reputation: 0
Perfect. Thanks for the help and responding so quickly
 
Old 01-06-2005, 05:45 AM   #12
thegreatgatsby
Member
 
Registered: Aug 2003
Location: England
Distribution: SuSE 9.3 pro
Posts: 332

Rep: Reputation: 30
slacker775, I have followed your instructions, but the system still freezes as I connect.

the steps i took were

1) unpack tarball
2) copy your patch & save it in vpn client as patch.txt
3) apply the patch

(gives an error message about finishing in middle of line)

4) install the vpn client - no errors

5) try & connect vpnclient connect default

6) system freeze

any thing else I should do? Have I applied the patch wrongly?

thanks very much
 
Old 01-10-2005, 04:35 PM   #13
archdev
Member
 
Registered: May 2004
Location: chicago and cincinnati
Distribution: fedora
Posts: 134

Rep: Reputation: 15
I am still having trouble installing the client

Am running FC3, following instructions found elsewhere to install kernel source

after rpm'ing kernel-2.6.9-1.724.src.rpm
I did:

rpmbuild -bp --target=noarch /usr/src/redhat/SPECS/kernel-2.6.spec

So then i untar the vpn client
apply patch
specify kernel source in installatoin as
/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9/

and try to install, i get a mess of errors the ends of which look like
Code:
{standard input}:3325: Error: symbol `lock' is already defined
{standard input}:3361: Error: symbol `security' is already defined
{standard input}:3427: Error: symbol `data' is already defined
{standard input}:3935: Error: symbol `saved_state' is already defined
{standard input}:3971: Error: symbol `release' is already defined
{standard input}:4071: Error: symbol `destructor' is already defined
{standard input}:4077: Error: symbol `open' is already defined
{standard input}:4095: Error: symbol `poll' is already defined
{standard input}:4239: Error: symbol `data' is already defined
{standard input}:4251: Error: symbol `security' is already defined
{standard input}:4712: Error: symbol `u' is already defined
{standard input}:4964: Error: symbol `index' is already defined
{standard input}:4976: Error: symbol `private' is already defined
{standard input}:5071: Error: symbol `lock' is already defined
{standard input}:5263: Error: symbol `child' is already defined
{standard input}:5347: Error: symbol `output' is already defined
{standard input}:5359: Error: symbol `ops' is already defined
{standard input}:5705: Error: symbol `stats' is already defined
{standard input}:5905: Error: symbol `lock' is already defined
{standard input}:6196: Error: symbol `id' is already defined
{standard input}:6244: Error: symbol `protocol' is already defined
make[2]: *** [/home/jfung/download/vpnclient/linuxcniapi.o] Error 1
make[1]: *** [_module_/home/jfung/download/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".
So dunno what I did wrong along the way...
 
Old 01-15-2005, 06:54 AM   #14
kaon
Member
 
Registered: Dec 2003
Location: Hong Kong SAR
Distribution: Slackware 9.1, 10.x, slackware-current
Posts: 186

Rep: Reputation: 30
Thanks slacker775 for the patch!

Now my system works like a breeze~!
 
Old 01-18-2005, 09:55 AM   #15
slippytoad
LQ Newbie
 
Registered: Aug 2003
Posts: 6

Rep: Reputation: 0
Quote:
Originally posted by archdev
[B]I am still having trouble installing the client
<snip>
Did you run vpn_uninstall first? Or make clean? Mine failed at first and after a clean it worked.
 
  


Reply

Tags
arch, ciscovpn, kernel, mismatch


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
keep linux cisco vpn client up and running cccc Linux - Networking 5 04-18-2006 07:54 PM
cisco vpn 4.6 client mnauta Linux - General 6 12-04-2005 06:03 PM
enterprise linux ws, cisco vpn client, install kernel source ganewton Linux - Security 3 09-20-2004 12:43 AM
Connect to Cisco VPN w/o Cisco VPN Client gboutwel Linux - Networking 4 02-07-2003 12:46 PM
cisco vpn client aqoliveira Linux - Networking 4 07-19-2002 08:09 AM


All times are GMT -5. The time now is 01:08 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration