Hello, I reactivate this subject, because I have a problem :
My Linux BOX : FEDORA CORE 5 2.6.17-1.2157_FC5smp

VPN Client : Cisco Systems VPN Client Version 4.8.00 (0490) Linux Installer

Here is the trace when I try to Install :

# ./vpn_install
Cisco Systems VPN Client Version 4.8.00 (0490) Linux Installer
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms.


Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.


Directory containing linux kernel source code [/usr/src/linux]

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.17-1.2157_FC5smp/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/usr/src/linux" will be used to build the module.

Is the above correct [y]

Making module
make -C /usr/src/linux SUBDIRS=/package/windows/logiciels/vpnclient/new/vpnclient modules
make[1]: Entering directory `/usr/src/kernels/2.6.17-1.2145_FC5-i686'
Building modules, stage 2.
MODPOST
WARNING: /package/windows/logiciels/vpnclient/new/vpnclient/cisco_ipsec.o - Section mismatch: reference to .init.text: from .data between 'interceptor_dev' (at offset 0x54) and 'interceptor_notifier'
WARNING: could not find /package/windows/logiciels/vpnclient/new/vpnclient/.libdriver.so.cmd for /package/windows/logiciels/vpnclient/new/vpnclient/libdriver.so
make[1]: Leaving directory `/usr/src/kernels/2.6.17-1.2145_FC5-i686'
Copying module to directory "/lib/modules/2.6.17-1.2157_FC5smp/CiscoVPN".
Already have group 'bin'

Creating start/stop script "/etc/init.d/vpnclient_init".
/etc/init.d/vpnclient_init
Enabling start/stop script for run level 3,4 and 5.
Creating global config /etc/opt/cisco-vpnclient

Installing license.txt (VPN Client license) in "/opt/cisco-vpnclient/":

Installing bundled user profiles in "/etc/opt/cisco-vpnclient/Profiles/":
* New Profiles : Safram sample

Copying binaries to directory "/opt/cisco-vpnclient/bin".
Adding symlinks to "/usr/local/bin".
/opt/cisco-vpnclient/bin/vpnclient
/opt/cisco-vpnclient/bin/cisco_cert_mgr
/opt/cisco-vpnclient/bin/ipseclog
Copying setuid binaries to directory "/opt/cisco-vpnclient/bin".
/opt/cisco-vpnclient/bin/cvpnd
Copying libraries to directory "/opt/cisco-vpnclient/lib".
/opt/cisco-vpnclient/lib/libvpnapi.so
Copying header files to directory "/opt/cisco-vpnclient/include".
/opt/cisco-vpnclient/include/vpnapi.h

Setting permissions.
/opt/cisco-vpnclient/bin/cvpnd (setuid root)
/opt/cisco-vpnclient (group bin readable)
/etc/opt/cisco-vpnclient (group bin readable)
/etc/opt/cisco-vpnclient/Profiles (group bin readable)
/etc/opt/cisco-vpnclient/Certificates (group bin readable)
* You may wish to change these permissions to restrict access to root.
* You must run "/etc/init.d/vpnclient_init start" before using the client.
* This script will be run AUTOMATICALLY every time you reboot your computer.
[root@dhcppc2 vpnclient]# /etc/init.d/vpnclient_init start
Starting /opt/cisco-vpnclient/bin/vpnclient: insmod: error inserting '/lib/modules/2.6.17-1.2157_FC5smp/CiscoVPN/cisco_ipsec.ko': -1 Invalid module format
Failed (insmod)
#

Thanks for your help,

Bernard

Hi everybody this my first post and I think this forum is a very useful tool, compliment to the people are working on.

I urgently need hints to solve this problem.

my system info: FC4

[root@lapfella CiscoVPN]# uname -a
Linux lapfella.cnaf.infn.it 2.6.17-1.2142_FC4 #1 Tue Jul 11 22:41:14 EDT 2006 i686 i686 i386 GNU/Linux
[root@lapfella CiscoVPN]#

Error executing vpn_install:

WARNING: /root/vpnclient/cisco_ipsec.o - Section mismatch: reference to .init.text: from .data between 'interceptor_dev' (at offset 0x74) and 'interceptor_eth_addr'
WARNING: could not find /root/vpnclient/.libdriver.so.cmd for /root/vpnclient/libdriver.so


Simpthoms and trys:

[root@lapfella vpnclient]# /etc/init.d/vpnclient_init status
Module Size Used by

Status Failed (lsmod cisco_ipsec) - The VPN module is not loaded.

cipsec0: error fetching interface information: Device not found

Status Failed (ifconfig cipsec0) - The virtual interface is not present.
[root@lapfella vpnclient]# /etc/init.d/vpnclient_init start
Starting /opt/cisco-vpnclient/bin/vpnclient: insmod: error inserting '/lib/modules/2.6.17-1.2142_FC4/CiscoVPN/cisco_ipsec.ko': -1 Invalid module format
Failed (insmod)

[root@lapfella vpnclient]# ls -la /lib/modules/2.6.17-1.2142_FC4/CiscoVPN/cisco_ipsec.ko
-rw-r--r-- 1 root root 752245 Oct 18 10:01 /lib/modules/2.6.17-1.2142_FC4/CiscoVPN/cisco_ipsec.ko
[root@lapfella vpnclient]#

[root@lapfella vpnclient]# insmod cisco_ipsec.mod.o
insmod: error inserting 'cisco_ipsec.mod.o': -1 Invalid module format
[root@lapfella vpnclient]#


thanks a lot, Arm74

Hi, I understand the problem on my FC4
I installed the kernel package arch i686 and the kernel-devel arch i586.

Solution:

I yum remove the i586 kernel-devel and I download from download.fedora.redhat.com/pub/fedora/linux/core/updates/4/i386/
the i686 one.
I installed it and I can setup and insmod the CiscoVPN module successfully.

I hope this information can help.

bye bye Arm74

Hello friends,

I too am using the Cisco VPN Client 4.8.00 (0490). My kernel is 2.6.15.1. I was able to compile the client without any issues. The client connects without any issue. The problem that I am facing is of a different kind.


My internet access is through a CDMA phone. The machine connects to the phone using COM1 port. Now if the phone is powered off or if I yank out the cable when the VPN is connected the machine freezes. The last messages recored by syslog are

Mar 20 09:03:01 pppd[3920]: Hangup (SIGHUP)
Mar 20 09:03:01 pppd[3920]: Modem hangup
Mar 20 09:03:01 pppd[3920]: Connection terminated.
Mar 20 09:03:01 pppd[3920]: Connect time 1.0 minutes.
Mar 20 09:03:01 pppd[3920]: Sent 3413 bytes, received 1508 bytes.
Mar 20 09:03:02 pppd[3920]: Connect time 1.0 minutes.
Mar 20 09:03:02 pppd[3920]: Sent 3413 bytes, received 1508 bytes.
Mar 20 09:03:02 pppd[3920]: Exit.


After this the system hangs. If I try the same with the ethernet port and say yank out the ethernet cable. My system does not freeze.

Any pointers towards solving this issue would be really appreciated.

Warm Regards
Kaushik

Hi Kaushik / kmamania:

Unfortunately, I don't know a solution for your problem with the Cisco VPN Client. However, you could try to use vpnc for your VPN connection and look if this solves the problem.

Arne

Hey thanks for the advice. I managed to solve the issue in a different manner. There is a script called ip-down in /etc/ppp. This script gets called each time the ppp interface goes down. Since there was a 400ms gap before the machine froze. Explicitly disconnecting the VPN worked for me.

But now the problem is that if i try reconnecting my vpnclient it fails for a few attempts.

There is another issue where i would appreciate some help...
the Cisco Client installs itself in /etc/CiscoSystemsVPNClient. Now my root partition is a read-only partition and I plan to keep it that way. Those files which need to be written too (eg. the profile files) can be placed in a diff partition with a sym link. But this does not work..

Has anyone tried a different location for the Profile and ini files other than the standard locations.

Warm Regards,
kmamania

Unfortunately, the vpn client gets confused like that. It also happens 99% of the time when resuming from a suspend. My workaround for it is to restart vpn:

# /etc/rc2.d/S85vpnclient_init reload


Doubly unfortunately, Cisco does not like setting the suid bit on vpnclient, which vpnclient_init calls. I wrote a small .c that I gave suid on that just calls vpnclient_init. No go. It looks like Cisco is programmatically looking for suid, and not liking it. For reasons unknown...