-   Linux - Software (
-   -   Cisco VPN Client unable to load kernel module in FC5 (

cuco76 10-13-2006 12:47 PM

Cisco VPN Client unable to load kernel module in FC5
Good Day!

1st off i have done about 6 hours of resarch over the last couple days trying to figure this out. I had a very similiar issue with FC2 or FC3 a year and a half back. Please let me know if I am just missing something easy.

First my company requires the use of the Cisco VPN client so vpnc is not an option. i am running FC5, 2.6.17-1.2187_FC5smp.

Hereis the installation utilizing Cisco's installation script:

[root@fedora vpnclient]# ./vpn_install
Cisco Systems VPN Client Version 4.8.00 (0490) Linux Installer
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms.

Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.

For RedHat 6.x users these files are installed in /usr/src/linux by default
For RedHat 7.x users these files are installed in /usr/src/linux-2.4 by default
For Suse 7.3 users these files are installed in /usr/src/linux-2.4.10.SuSE by default

Directory containing linux kernel source code []/usr/src/kernels/2.6.17- 1.2187_FC5-i686/

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.17-1.2187_FC5smp/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/usr/src/kernels/2.6.17-1.2187_FC5-i686/" will be used to build the module.

Is the above correct [y]y

Making module
make -C /usr/src/kernels/2.6.17-1.2187_FC5-i686/ SUBDIRS=/data/software/vpn/vpnclient modules
make[1]: Entering directory `/usr/src/kernels/2.6.17-1.2187_FC5-i686'
  CC [M]  /data/software/vpn/vpnclient/linuxcniapi.o
  CC [M]  /data/software/vpn/vpnclient/frag.o
  CC [M]  /data/software/vpn/vpnclient/IPSecDrvOS_linux.o
  CC [M]  /data/software/vpn/vpnclient/interceptor.o
/data/software/vpn/vpnclient/interceptor.c: In function 'handle_vpnup':
/data/software/vpn/vpnclient/interceptor.c:310: warning: assignment from incompatible pointer type
/data/software/vpn/vpnclient/interceptor.c:334: warning: assignment from incompatible pointer type
/data/software/vpn/vpnclient/interceptor.c:335: warning: assignment from incompatible pointer type
/data/software/vpn/vpnclient/interceptor.c: In function 'do_cleanup':
/data/software/vpn/vpnclient/interceptor.c:378: warning: assignment from incompatible pointer type
  CC [M]  /data/software/vpn/vpnclient/linuxkernelapi.o
  LD [M]  /data/software/vpn/vpnclient/cisco_ipsec.o
  Building modules, stage 2.
WARNING: /data/software/vpn/vpnclient/cisco_ipsec.o - Section mismatch: reference to .init.text: from .data between 'interceptor_dev' (at offset 0x54) and 'interceptor_notifier'
WARNING: could not find /data/software/vpn/vpnclient/ for /data/software/vpn/vpnclient/
  CC      /data/software/vpn/vpnclient/cisco_ipsec.mod.o
  LD [M]  /data/software/vpn/vpnclient/cisco_ipsec.ko
make[1]: Leaving directory `/usr/src/kernels/2.6.17-1.2187_FC5-i686'
Copying module to directory "/lib/modules/2.6.17-1.2187_FC5smp/CiscoVPN".
Already have group 'bin'

Creating start/stop script "/etc/init.d/vpnclient_init".
Enabling start/stop script for run level 3,4 and 5.
Creating global config /etc/opt/cisco-vpnclient

Installing license.txt (VPN Client license) in "/opt/cisco-vpnclient/":

Installing bundled user profiles in "/etc/opt/cisco-vpnclient/Profiles/":
* New Profiles    : Australia Boston_Dialup_VPN Boston_VPN Dallas_Dialup_VPN_International_Users Dallas_Dialup_VPN Dallas_VPN_International_Users Dallas_VPN Harlow_Dialup_VPN_International_users Harlow_VPN_International_Users_via_Internet LAX_Dialup_VPN LAX_VPN sample Tucson_VPN Waltham_Woods_(local)

Copying binaries to directory "/opt/cisco-vpnclient/bin".
Adding symlinks to "/usr/local/bin".
Copying setuid binaries to directory "/opt/cisco-vpnclient/bin".
Copying libraries to directory "/opt/cisco-vpnclient/lib".
Copying header files to directory "/opt/cisco-vpnclient/include".

Setting permissions.
    /opt/cisco-vpnclient/bin/cvpnd (setuid root)
    /opt/cisco-vpnclient (group bin readable)
    /etc/opt/cisco-vpnclient (group bin readable)
    /etc/opt/cisco-vpnclient/Profiles (group bin readable)
    /etc/opt/cisco-vpnclient/Certificates (group bin readable)
* You may wish to change these permissions to restrict access to root.
* You must run "/etc/init.d/vpnclient_init start" before using the client.
* This script will be run AUTOMATICALLY every time you reboot your computer

After it is complete and I get run the vpnclient_init script I get this error message

sh ./vpnclient_init start
Starting /opt/cisco-vpnclient/bin/vpnclient: insmod: error inserting '/lib/modules/2.6.17- 1.2187_FC5smp/CiscoVPN/cisco_ipsec.ko': -1 Invalid module format
Failed (insmod)

Off the top of my head dmesg shows:

cisco_ipsec: disagrees about version of symbol struct_module
I found many users with this problem with a few different distro's, but no real answers. Cisco has nothing on this. My employer says I should take my windows laptop home and use that instead.....

One user got his VPN client to work with Ubuntu pathcing the interceptor.c file but it did not work for my version of the VPN Client. The patch won't work at all.

Full Post here:
Ubuntu Forum Post

Anyhelp would be greatly appreciated!

Lenard 10-14-2006 06:06 AM

You migth want to follow the advice from;


cuco76 10-15-2006 10:52 PM

Thanks for the link, but I had found this and it does not shed any light on this issue. Thanks again.

cuco76 10-19-2006 10:11 AM

Ok So, I moved to Ubuntu and I am having the same exact problem. I am starting to wonder if I am specifying the right headers/source dir? I dunno, this is very perplexing. I seem to have stumped the community!


All times are GMT -5. The time now is 05:43 AM.