Linux 2.6.10 cisco vpn client freezes system

thahn01 · 12-27-2004, 12:01 PM

Hello.
After issuing
vpnclient connect somewhere
the system freezes completely.
Cannot login from another host on the network, ping fails, ...
I have to push the reset button.

Worked without problems with 2.6.9.

(Cisco Systems VPN Client Version 4.6.00 (0045))

Sigh Thomas

kaon · 12-30-2004, 11:10 PM

I had similar problem with you.
I cannot compile a new module for this new kernel but in 2.6.8.1.
Just some guess, the kernel may change the way to support vpn?

I am still configuring out anyway.

urr · 12-31-2004, 02:55 AM

Hi,

I had same symptoms using vpnclient with kernel 2.6.10.
I made following change (line 607 and 732 - delete character '&') in vpnclient's code:

$ diff vpnclient/interceptor.c vpnclient.1/interceptor.c
607c607
< if (skb_checksum_help(&skb,1))
---
> if (skb_checksum_help(skb,1))
732c732
< if (skb_checksum_help(&skb,0))
---
> if (skb_checksum_help(skb,0))

After that - no warning messages during installation and vpn works without problems.
I just followed warning messages which I got during installation/compilation.

Also made case on this issue to Cisco.

regards,

urr

thahn01 · 12-31-2004, 07:31 AM

Cool urr, that fixes the problem.

kaon · 01-02-2005, 08:02 AM

Oops!
I did the above way, but I got the same error.
URGH~ any idea?

Quote:

Making module
make -C /lib/modules/2.6.10-kaon/build SUBDIRS=/home/tsun/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.10'
CC [M] /home/tsun/vpnclient/linuxcniapi.o
CC [M] /home/tsun/vpnclient/frag.o
CC [M] /home/tsun/vpnclient/IPSecDrvOS_linux.o
CC [M] /home/tsun/vpnclient/interceptor.o
/home/tsun/vpnclient/interceptor.c: In function `add_netdev':
/home/tsun/vpnclient/interceptor.c:59: sorry, unimplemented: inlining failed in call to 'supported_device': function body not available
/home/tsun/vpnclient/interceptor.c:245: sorry, unimplemented: called from here
make[2]: *** [/home/tsun/vpnclient/interceptor.o] Error 1
make[1]: *** [_module_/home/tsun/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.10'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".

urr · 01-02-2005, 05:01 PM

umm, try setting real path to kernel sources, like /usr/src/linux-2.6.10
AFAIK it uses more than just headerfiles from sources but i can be wrong in this point.

kaon · 01-03-2005, 09:38 PM

No luck after recompiling the kernel without custom tag.
Now checking the kernel configuration.

Does the version of gcc matter?
Just a wild guess.

slacker775 · 01-04-2005, 03:07 PM

Quote:

Originally posted by kaon
Oops!
I did the above way, but I got the same error.
URGH~ any idea?

I found that the problem is due to supported_device() being declared, but not defined before it is used. This may be a gcc 3.4-ism or something. I moved the definition of supported_device to be before add_netdev() and it builds with no issues.

ringersoll1869 · 01-04-2005, 09:36 PM

Where did you make this change to get this working. I am running fc3 2.6.9-1.724. I need to get this client running for work. Thanks. I'm a bit of a newbie so a little hand holding would be appreciated.

Rick

slacker775 · 01-04-2005, 11:00 PM

Quote:

Originally posted by ringersoll1869
Where did you make this change to get this working. I am running fc3 2.6.9-1.724. I need to get this client running for work. Thanks. I'm a bit of a newbie so a little hand holding would be appreciated.

Rick

Copy/paste this patch:

Code:

--- interceptor.c.orig  2005-01-04 14:55:44.246848280 -0500
+++ interceptor.c       2005-01-04 14:56:15.955027904 -0500
@@ -236,6 +236,24 @@
     dev_kfree_skb(skb);
     return 0;
 }
+
+static int
+inline supported_device(struct net_device* dev)
+{
+    int rc=0;
+
+    if(dev->type == ARPHRD_ETHER)
+    {
+        rc=1;
+    }
+    else if(dev->type == ARPHRD_PPP)
+    {
+        rc=1;
+    }
+
+    return rc;
+}
+
 static int
 add_netdev(struct net_device *dev)
 {
@@ -476,23 +494,6 @@
     s->rc = 0;
 }

-static int
-inline supported_device(struct net_device* dev)
-{
-    int rc=0;
-
-    if(dev->type == ARPHRD_ETHER)
-    {
-        rc=1;
-    }
-    else if(dev->type == ARPHRD_PPP)
-    {
-        rc=1;
-    }
-
-    return rc;
-}
-

 static BINDING *
 getbindingbydev(struct net_device *dev)

and apply it with 'patch -p0 < patch.txt' when you are in the vpnclient directory. All that is being done is modifying interceptor.c by moving the supported_device() function definition before the add_netdev() call. I was able to build it today against FC3s new 724 kernel. If copy/paste on the patch doesn't take, I can email it to you direct.

ringersoll1869 · 01-04-2005, 11:07 PM

Perfect. Thanks for the help and responding so quickly

thegreatgatsby · 01-06-2005, 06:45 AM

slacker775, I have followed your instructions, but the system still freezes as I connect.

the steps i took were

1) unpack tarball
2) copy your patch & save it in vpn client as patch.txt
3) apply the patch

(gives an error message about finishing in middle of line)

4) install the vpn client - no errors

5) try & connect vpnclient connect default

6) system freeze

any thing else I should do? Have I applied the patch wrongly?

thanks very much

archdev · 01-10-2005, 05:35 PM

I am still having trouble installing the client

Am running FC3, following instructions found elsewhere to install kernel source

after rpm'ing kernel-2.6.9-1.724.src.rpm
I did:

rpmbuild -bp --target=noarch /usr/src/redhat/SPECS/kernel-2.6.spec

So then i untar the vpn client
apply patch
specify kernel source in installatoin as
/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9/

and try to install, i get a mess of errors the ends of which look like

Code:

{standard input}:3325: Error: symbol `lock' is already defined
{standard input}:3361: Error: symbol `security' is already defined
{standard input}:3427: Error: symbol `data' is already defined
{standard input}:3935: Error: symbol `saved_state' is already defined
{standard input}:3971: Error: symbol `release' is already defined
{standard input}:4071: Error: symbol `destructor' is already defined
{standard input}:4077: Error: symbol `open' is already defined
{standard input}:4095: Error: symbol `poll' is already defined
{standard input}:4239: Error: symbol `data' is already defined
{standard input}:4251: Error: symbol `security' is already defined
{standard input}:4712: Error: symbol `u' is already defined
{standard input}:4964: Error: symbol `index' is already defined
{standard input}:4976: Error: symbol `private' is already defined
{standard input}:5071: Error: symbol `lock' is already defined
{standard input}:5263: Error: symbol `child' is already defined
{standard input}:5347: Error: symbol `output' is already defined
{standard input}:5359: Error: symbol `ops' is already defined
{standard input}:5705: Error: symbol `stats' is already defined
{standard input}:5905: Error: symbol `lock' is already defined
{standard input}:6196: Error: symbol `id' is already defined
{standard input}:6244: Error: symbol `protocol' is already defined
make[2]: *** [/home/jfung/download/vpnclient/linuxcniapi.o] Error 1
make[1]: *** [_module_/home/jfung/download/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".

So dunno what I did wrong along the way...

kaon · 01-15-2005, 07:54 AM

Thanks slacker775 for the patch!

Now my system works like a breeze~!

slippytoad · 01-18-2005, 10:55 AM

Quote:

Originally posted by archdev
[B]I am still having trouble installing the client
<snip>

Did you run vpn_uninstall first? Or make clean? Mine failed at first and after a clean it worked.