[ubuntu] Checkpoint VPN with Ubuntu 9.04

[avphoto]

Anyone have any advice on trying to connect to a Checkpoint VPN with Ubuntu 9.04
I've used the following steps so far with no help. I've also tried running firefox from Root after these steps as some others have suggested again with no fix. Any advice on this is greatly appreciated.

1- get the SNX archive on checkpoint, go checkpoint website download section and get “SNX R66 HFA 01 For Linux 800004013 “

2- install the package (#./snx_install.sh)
you will probably get an error message : snx: symbol lookup error: snx: undefined symbol: cerr

3- you need a special library to get the snx client working : libstdc++2.10-glibc2.2.
download

4- install it with dpkg (#dpkg -i libstdc++2.10-glibc2.2)

5- update your env variable : #LD_PRELOAD=/usr/lib/libstdc++-libc6.2-2.so.3 snx

[donchichi]

Need to get this working for work..

When I searched I got this file from checkpoint. Check_Point_SNX_R66_HFA_01_For_Linux_800004013.sh

Different? Or did I look in the wrong place?

regards
Arif

[berteh]

Originally Posted by avphoto Anyone have any advice on trying to connect to a Checkpoint VPN with Ubuntu 9.04

Yes, I got it running (mostly fine) under Kubuntu 9.04, so I guess it might work for you too... please read on and comment.

1- get the SNX archive on checkpoint, go checkpoint website download section and get “SNX R66 HFA 01 For Linux 800004013 “

correct. google works with the above info. direct link

3- you need a special library to get the snx client working : libstdc++2.10-glibc2.2.

I actually needed to install manually libstdc++2.10-glibc2.2, libstdc++5 and gcc-3.3-base. I got them from the Hardy and Dapper repositories (direct links on libs names).

Download all 3 debs in the same directory and, open a console in this directory and run

 $sudo dpkg -i *.deb

2- install the package (#./snx_install.sh)

do it rather with sudo:

  $sudo -s
  #export LD_PRELOAD=/usr/lib/libstdc++-libc6.2-2.so.3
  #./Check_Point_SNX_R66_HFA_01_For_Linux_800004013.sh

The second line enforces the use of your (old) library.

The message of install should be successful: congratulations!

exit sudo session and run snx to test:

  #exit
  $snx -s HOSTNAME -u VPN_LOGIN

shutdown vpn with

  $snx -d

to ease next connection store your session info in ~/.snxrc

  server HOSTNAME
  username VPN_LOGIN
  reauth yes
  debug 1

This will enable to run the vpn by simply calling

  $snx

Hope this helps.
I attach the 3 mentionned debs for later references, but preferably get them from the above links as they are mirrored!

Berteh.

[Angotull]

Thank you sir. Worked like a charm on 9.10 as well.

[acpreda]

Berteh,

My Ubuntu is 64 bits. The libstdc++2.10-glibc2.2 package is available only for 32bit so I got all the old packages for i386 arch, installed them forcing the architecture:

dpkg -i --force-architecture gcc-3.3-base_3.3.6-15ubuntu4_i386.deb libstdc++2.10-glibc2.2_2.95.4-24_i386.deb libstdc++5_3.3.6-15ubuntu4_i386.deb

After that, I exported the LD_PRELOAD:

export LD_PRELOAD=/usr/lib/libstdc++-libc6.2-2.so.3

When intalling Check_Point_SNX_R66_HFA_01_For_Linux_800004013.sh I got the following error:

ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
Installation successfull
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.
ERROR: ld.so: object '/usr/lib/libstdc++-libc6.2-2.so.3' from LD_PRELOAD cannot be preloaded: ignored.

So, while the message "Installation successfull" is present I tried to run snx command and this is the output:

-su: /usr/bin/snx: No such file or directory

Finally, the uname -a command if this helps:
Linux decebal 2.6.31-14-generic #48-Ubuntu SMP Fri Oct 16 14:05:01 UTC 2009 x86_64 GNU/Linux

Could you please help me with some advice?

Thanks however.

Regards,

Arturo

[liedan]

I am also struggling to get this working on 64bit Karmic Koala.
This forum helped me a lot: http://ubuntuforums.org/showthread.php?t=340307&page=6
Especially posts #21 and #57 were helpful for me.

Finally, i think it should work correctly. When i type "snx", I get:

a username or a certificate were not supplied
Check Point's Linux SNX
build 700001030
usage: snx -s <server> {-u <user>|-c <certfile>} [-l <ca dir>] [-p <port>] [-r] [-g] [-e <cipher>]
                                run SNX using given arguments
       snx -f <cf>              run the snx using configuration file
       snx                      run the snx using the ~/.snxrc

       snx -d                   disconnect a running SNX daemon

        -s <server>           connect to server <server>
        -u <user>             use the username <user>
        -c <certfile>         use the certificate file <certfile>
        -l <ca dir>           get trusted ca's from <ca dir>
        -p <port>             connect using port <port>
        -g                    enable debugging
        -e <cipher>           SSL cipher to use: RC4 or 3DES

However, when I try to connect by :

sudo snx -s Gateway -u My_username

The output is the same. Any ideas?

[liedan]

Ok, now it´s worknig fine for me. All I needed was reinstallation.

However, I was messing up with so many thing that i am not sure, what was the key for my success. I installed all libraries mentioned by berteh.
And I commented 4 lines with the trap cleanup in snx_install.sh according to this forum:

http://ubuntuforums.org/showthread.php?t=340307&page=3 ,post #21.

And that was it I think. Hope it helps.