VPNClient Error?

your_shadow03 · 02-04-2010, 03:05 AM

i m trying to setup vpnclient software on rhel 5.1.

Code:

[admin@shadow vpnclient]$ sudo ./vpn_install
Password:
Cisco Systems VPN Client Version 4.8.00 (0490) Linux Installer
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms.


Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.


Directory containing linux kernel source code 

[/lib/modules/2.6.18-53.el5/build]

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.18-53.el5/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/lib/modules/2.6.18-53.el5/build" will be used 

to build the module.

Is the above correct [y]y

Making module
make -C /lib/modules/2.6.18-53.el5/build 

SUBDIRS=/home/imadmin/VPN/vpnclient modules
make[1]: Entering directory `/usr/src/kernels/2.6.18-53.el5-x86_64'
  CC [M]  /home/imadmin/VPN/vpnclient/linuxcniapi.o
In file included from /home/imadmin/VPN/vpnclient/linuxcniapi.c:12:
include/linux/config.h:6:2: warning: #warning Including config.h is 

deprecated.
In file included from /home/imadmin/VPN/vpnclient/Cniapi.h:15,
                 from /home/imadmin/VPN/vpnclient/linuxcniapi.c:27:
/home/imadmin/VPN/vpnclient/GenDefs.h:110:2: warning: #warning 64 

bit
  CC [M]  /home/imadmin/VPN/vpnclient/frag.o
In file included from /home/imadmin/VPN/vpnclient/frag.c:1:
include/linux/config.h:6:2: warning: #warning Including config.h is 

deprecated.
In file included from /home/imadmin/VPN/vpnclient/Cniapi.h:15,
                 from /home/imadmin/VPN/vpnclient/frag.c:16:
/home/imadmin/VPN/vpnclient/GenDefs.h:110:2: warning: #warning 64 

bit
  CC [M]  /home/admin/VPN/vpnclient/IPSecDrvOS_linux.o
In file included from 

/home/admin/VPN/vpnclient/IPSecDrvOS_linux.c:14:
include/linux/config.h:6:2: warning: #warning Including config.h is 

deprecated.
In file included from 

/home/imadmin/VPN/vpnclient/IPSecDrvOS_linux.c:20:
/home/imadmin/VPN/vpnclient/GenDefs.h:110:2: warning: #warning 64 

bit
  CC [M]  /home/imadmin/VPN/vpnclient/interceptor.o
In file included from /home/imadmin/VPN/vpnclient/interceptor.c:11:
include/linux/config.h:6:2: warning: #warning Including config.h is 

deprecated.
In file included from /home/imadmin/VPN/vpnclient/Cniapi.h:15,
                 from /home/imadmin/VPN/vpnclient/interceptor.c:30:
/home/imadmin/VPN/vpnclient/GenDefs.h:110:2: warning: #warning 64 

bit
/home/imadmin/VPN/vpnclient/interceptor.c: In function 

âhandle_vpnupâ:
/home/imadmin/VPN/vpnclient/interceptor.c:310: warning: assignment 

from incompatible pointer type
/home/imadmin/VPN/vpnclient/interceptor.c:334: warning: assignment 

from incompatible pointer type
/home/imadmin/VPN/vpnclient/interceptor.c:335: warning: assignment 

from incompatible pointer type
/home/imadmin/VPN/vpnclient/interceptor.c: In function âdo_cleanupâ:
/home/imadmin/VPN/vpnclient/interceptor.c:378: warning: assignment 

from incompatible pointer type
  CC [M]  /home/imadmin/VPN/vpnclient/linuxkernelapi.o
/home/imadmin/VPN/vpnclient/linuxkernelapi.c: In function 

âkernel_allocâ:
/home/imadmin/VPN/vpnclient/linuxkernelapi.c:12: warning: format 

â%dâ expects type âintâ, but argument 2 has type âsize_tâ
  LD [M]  /home/imadmin/VPN/vpnclient/cisco_ipsec.o
  Building modules, stage 2.
  MODPOST
WARNING: /home/imadmin/VPN/vpnclient/cisco_ipsec.o - Section 

mismatch: reference to .init.text: from .data between 

'interceptor_dev' (at offset 0xd0) and 'interceptor_notifier'
WARNING: could not find 

/home/imadmin/VPN/vpnclient/.libdriver64.so.cmd for 

/home/imadmin/VPN/vpnclient/libdriver64.so
  CC      /home/imadmin/VPN/vpnclient/cisco_ipsec.mod.o
  LD [M]  /home/imadmin/VPN/vpnclient/cisco_ipsec.ko
make[1]: Leaving directory `/usr/src/kernels/2.6.18-53.el5-x86_64'
Create module directory "/lib/modules/2.6.18-53.el5/CiscoVPN".
Copying module to directory "/lib/modules/2.6.18-53.el5/CiscoVPN".
Already have group 'bin'

Creating start/stop script "/etc/init.d/vpnclient_init".
    /etc/init.d/vpnclient_init
Enabling start/stop script for run level 3,4 and 5.
Creating global config /etc/opt/cisco-vpnclient

Installing license.txt (VPN Client license) in 

"/opt/cisco-vpnclient/":

Installing bundled user profiles in 

"/etc/opt/cisco-vpnclient/Profiles/":
* New Profiles     : Rickspace sample

Copying binaries to directory "/opt/cisco-vpnclient/bin".
Adding symlinks to "/usr/local/bin".
    /opt/cisco-vpnclient/bin/vpnclient
    /opt/cisco-vpnclient/bin/cisco_cert_mgr
    /opt/cisco-vpnclient/bin/ipseclog
Copying setuid binaries to directory "/opt/cisco-vpnclient/bin".
    /opt/cisco-vpnclient/bin/cvpnd
Copying libraries to directory "/opt/cisco-vpnclient/lib".
    /opt/cisco-vpnclient/lib/libvpnapi.so
Copying header files to directory "/opt/cisco-vpnclient/include".
    /opt/cisco-vpnclient/include/vpnapi.h

Setting permissions.
    /opt/cisco-vpnclient/bin/cvpnd (setuid root)
    /opt/cisco-vpnclient (group bin readable)
    /etc/opt/cisco-vpnclient (group bin readable)
    /etc/opt/cisco-vpnclient/Profiles (group bin readable)
    /etc/opt/cisco-vpnclient/Certificates (group bin readable)
* You may wish to change these permissions to restrict access to root.
* You must run "/etc/init.d/vpnclient_init start" before using the 

client.
* This script will be run AUTOMATICALLY every time you reboot your 

computer.
[imadmin@shadow vpnclient]$

[/code]

but when i try with:

vpnclient connect <profilename> user <user> pw <passwd>
it says:

bash: /usr/local/bin/vpnclient: Accessing a corrupted shared library

Peacedog · 02-04-2010, 09:42 PM

Hi your_shadow03, Welcome to LQ. Had a quick look at the errors, is this a 32 or 64 bit system? Is the vpnclient software 32 or 64 bit?
Good luck. ;-)

your_shadow03 · 02-05-2010, 01:54 AM

# uname -arn
Linux app.sap.com 2.6.18-53.el5 #1 SMP Wed Oct 10 16:34:19 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux

And the Package name is :vpnclient-linux-x86_64-4.8.00.0490-k9.tar

I think architecture shouldnt be the issue.

Alteratively I gave try to vpnc
and it did worked fine!!!

BUT

VPN connectivity is frequently disconnectivity after every while.
Where can I check the logs?

Peacedog · 02-05-2010, 10:52 AM

I believe this will get you a view of the log, if you've enabled it.

Code:

/usr/local/bin/ipseclog /directory/clientlog.txt

Good luck. ;-)

your_shadow03 · 02-05-2010, 09:34 PM

Anyone ever tried running vpnclient on RHEL 5.1 tikanga

Peacedog · 02-05-2010, 09:52 PM

Maybe you can find what you're looking for here.

Cisco 4.8 vpnclient release notes

Good luck. ;-)

your_shadow03 · 02-07-2010, 03:55 AM

I went through the link but nowhere seen the resolution.
Anyone who tried vpnclient installation on RHEL 5.1

your_shadow03 · 02-07-2010, 09:21 AM

Nowhere I can ipseclog..can anyone help me with this?

your_shadow03 · 02-07-2010, 09:38 AM

I have vpnc working in my RHEL 5.1 tikanga but there is frequent disconnecivity.I explore and googled and got the link:
http://linux.derkeiler.com/Mailing-L.../msg02624.html
It suggest to add a line in vpnc.config:

Code:

Try adding 

DPD idle timeout (our side) 0

to /etc/vpnc/<connection config>.

What is the correct entry to be made?
Is it :

Code:

DPD idle timeout 0

I tried editing this line but it shows syntax error?

Peacedog · 02-07-2010, 10:16 AM

Do you have access to start logging? Try this.

http://www.cisco.com/en/US/docs/secu...html#wp1014357

Good luck. ;-)

your_shadow03 · 02-07-2010, 09:26 PM

I am unable to understand whats going on wrong here.

Peacedog · 02-07-2010, 09:46 PM

Are you getting any errors with the frequent disconnects? There is additional info here.

http://www.cisco.com/en/US/products/...807e0aca.shtml

Good luck. ;-)

your_shadow03 · 02-08-2010, 09:55 AM

Guys,

I explored the error with vpnclient-.8.0.x64<..> software mentioned in the first thread:

Code:

bash: /usr/local/bin/vpnclient: Accessing a corrupted shared library

and found a blog http://linux.digitalsp.com/2008/02/c...pn-client.html where the author mentioned imp points:

Code:

The last command should be executed as root

Do you think he could be right?
I can see that vpnclient under /opt/cisco-vpnclient/bin is owned by root.
Running it with sudo user could create an issue? What yu say?

your_shadow03 · 02-08-2010, 01:37 PM

Guys, The same error which I have been having is posted before but noone ever answered that.
Can you suggest ?
http://ubuntuforums.org/archive/index.php/t-429597.html