HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

[khaki54]

I've been fighting will this error for well over a year now, and I stll haven't found a resolution. It ends with "Failed to connect/authenticate with IVE. Error 10" It's preceded by "dsclient.error state select role failed, error 10 (dsclient.cpp:322)"

20100326130405.708365 ncui[p13674.t13695] ncapp.info New ncapp log level set to 3 (nccommon.cpp:75)
20100326130405.708462 ncui[p13674.t13695] ncapp.info Version : 6.5
Release Version : 6.5-0-Build14951
Build Date/Time : Dec 9 2009
Copyright 2001-2008 Juniper Networks
(ncapp.cpp:153)
20100326130405.929961 ncui[p13674.t13695] dsclient.info state: kStateSignin (dsclient.cpp:248)
20100326130405.930001 ncui[p13674.t13695] dsclient.info --> GET / (authenticate.cpp:162)
20100326130405.976170 ncui[p13674.t13695] dsclient.info <-- 302 https://connect.boeing.com/dana-na/a...lt/welcome.cgi (authenticate.cpp:194)
20100326130405.976213 ncui[p13674.t13695] dsclient.info state: kStateWelcome (dsclient.cpp:256)
20100326130405.976234 ncui[p13674.t13695] dsclient.info --> GET /dana-na/auth/url_default/welcome.cgi (authenticate.cpp:162)
20100326130406.215728 ncui[p13674.t13695] dsclient.info <-- 200 (authenticate.cpp:194)
20100326130406.215919 ncui[p13674.t13695] dsclient.info state: kStateLogin (dsclient.cpp:288)
20100326130406.215949 ncui[p13674.t13695] dsclient.info --> POST /dana-na/auth/url_default/login.cgi (authenticate.cpp:162)
20100326130406.511419 ncui[p13674.t13695] dsclient.info <-- 302 https://connect.boeing.com/dana-na/a...09c0326a42af58 (authenticate.cpp:194)
20100326130406.511484 ncui[p13674.t13695] dsclient.info state: kStateSelectRole (dsclient.cpp:312)
20100326130406.511515 ncui[p13674.t13695] dsclient.info --> GET /dana-na/auth/url_default/welcome.cgi?p=select-role&id=state_4a26c645612a1439bb09c0326a42af58 (authenticate.cpp:162)
20100326130406.676220 ncui[p13674.t13695] dsclient.info <-- 200 (authenticate.cpp:194)
20100326130406.676282 ncui[p13674.t13695] dsclient.info state: kStateSelectRole (dsclient.cpp:320)
20100326130406.676369 ncui[p13674.t13695] dsclient.error state select role failed, error 10 (dsclient.cpp:322)
20100326130406.676669 ncui[p13674.t13695] ncapp.error Failed to connect/authenticate with IVE. Error 10 (ncapp.cpp:179)

[iponeverything]

hope this helps..

http://kb.juniper.net/index?page=con...5000&actp=LIST

[currentoccupant]

If you fat finger a parameter while setting up the script, you can change them in the .vpn.default.cfg

[Retski]

After looking through about 100 different threads, reading several new and old blogs about getting Juniper working and trying ubuntu 9.10 and openSuse 11.2 I give up......

It seems that I fail after the host checker launches, installs and then kicks me back to the VPN sign in screen with the message - You are not allowed to sign in. Please contact your administrator.

The network connect software never actually installs. Here is the last several lines of my dsHostChecker_linux1.log file:

HCUtil:000 (04/15 16:04:36.038)[ main] TNCoHTTP: periodic check interval 10 min.
HCUtil:000 (04/15 16:04:36.039)[ main] TNCoHTTP: last session status `'
HCUtil:000 (04/15 16:04:36.040)[ main] HostCheckerIMC: connection state changed to 3
HCUtil:000 (04/15 16:04:36.041)[ main] TncHandshake: recevied integrity result: 3
HCUtil:000 (04/15 16:04:36.043)[ main] HttpNAR: wait for connection to port 50745

Any suggestions?

[Izzin]

I saw a post above about using this script and client auth certs. Has anyone gotten this to work?

I can auth fine using firefox and the auth cert, but I cant with the junipernc script.

Of course firefox wont work for me because of 64bit Ubuntu.

--izz

[mynk]

I tried with 64 bit for a long time and couldn't get it to work (a lot of colleagues confirmed it doesn't work for 64 bit) so I migrated to 32 bit and it works fine now via Firefox & Chromium-browser. I still need to get it work with mad scientist's script.

Thx,
Mynk

[amirmku]

Hi mad scientist,
I tried installing juniper network on my ubuntu 10.04 using commands given below:-

amir@amir-laptop:~$ wget -q -O /tmp/junipernc http://mad-scientist.net/juniperncamir@amir-laptop:~$ chmod 755 /tmp/junipernc
amir@amir-laptop:~$ sudo cp /tmp/junipernc /usr/bin
[sudo] password for amir:
Sorry, try again.
[sudo] password for amir:
Sorry, try again.
[sudo] password for amir:
Sorry, try again.
sudo: 3 incorrect password attempts
amir@amir-laptop:~$ junipernc
amir@amir-laptop:~$

but i didnt get any errors as was expected acc to tutrial http://mad-scientist.net/juniper.html
but instead i didnt get any error.
And when tried running junipernc command in terminal it says "juniper not installed".

Please help me to sort it out, I am newbie to ubuntu, therefore know not much, to run script other way.

[DevinD]

amirmku - I can see two issues here. The first is that when you typed

wget -q -O /tmp/junipernc http://mad-scientist.net/juniperncamir@amir-laptop:~$ chmod 755 /tmp/junipernc

that was to download the junipernc script from madscientist's website and change the permissions of the file so that you can execute it. The script is NOT the same as Juniper Network Connect - it is a shell script that enables you to use Juniper Network Connect in Linux.

The other issue is that when you typed "sudo cp /tmp/junipernc /usr/bin", here you SHOULD HAVE entered your sudo password - all this does is copy the script you've just downloaded from the tmp file to /usr/bin so you don't have to be in the same folder as the script to execute it.

Try reading through the tutorial on madscientist's website again, and follow each step - you'll notice that, after downloading the script, setting permissions and copying it to /usr/bin (do enter your password and do copy it) you will now have to go to the vpn server on your network, which will try to download and run the network connect software. This is where the password/error thing comes into play - Linux used to be based around having a root profile and user profiles, and this is what NC assumes - so it asks you to enter your root password. But, using ubuntu, you don't have a root password (root password and sudo password are different things). So let it install, and when it prompts for root password, this is where you keep pressing enter until it comes up with the SSL error. THEN go back to the terminal and type "junipernc". From here you should be all set.

Keep battling, i had so many problems with Juniper (and it still gives me no end of grief), but following madscientist's tutorial and any other forums I found, I've managed to get it working pretty well

Good luck,

Devin

[amirmku]

amirmku - I can see two issues here. The first is that when you typed

that was to download the junipernc script from madscientist's website and change the permissions of the file so that you can execute it. The script is NOT the same as Juniper Network Connect - it is a shell script that enables you to use Juniper Network Connect in Linux.

The other issue is that when you typed "sudo cp /tmp/junipernc /usr/bin", here you SHOULD HAVE entered your sudo password - all this does is copy the script you've just downloaded from the tmp file to /usr/bin so you don't have to be in the same folder as the script to execute it.

Try reading through the tutorial on madscientist's website again, and follow each step - you'll notice that, after downloading the script, setting permissions and copying it to /usr/bin (do enter your password and do copy it) you will now have to go to the vpn server on your network, which will try to download and run the network connect software. This is where the password/error thing comes into play - Linux used to be based around having a root profile and user profiles, and this is what NC assumes - so it asks you to enter your root password. But, using ubuntu, you don't have a root password (root password and sudo password are different things). So let it install, and when it prompts for root password, this is where you keep pressing enter until it comes up with the SSL error. THEN go back to the terminal and type "junipernc". From here you should be all set.

Keep battling, i had so many problems with Juniper (and it still gives me no end of grief), but following madscientist's tutorial and any other forums I found, I've managed to get it working pretty well

Good luck,

Devin

Hi Devin,
I tried following the tutorial by mad scientist but on connecting to VPN server using browser I dont get any pop up for password. but yes ysterday when i was trying to do the same that pop up did appear. but its not poping up now.
Any suggestion ?

[amirmku]

Hi
Even getting a popup for password, I closed the browser and TYPED junipernc in terminal
using which Iwas able to add server, userid and REALM but after that i got following message

This program requires the program 'jar'.
Use your package manager to install it.

Check the error log file '/tmp/junipernc.2750' for more information.