Page 52 of 56 FirstFirst ... 2425051525354 ... LastLast
Results 511 to 520 of 554

Thread: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

  1. #511
    Join Date
    May 2010
    Beans
    25

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    I get the following error after upgrading from Ubuntu 12.04 to 12.10:

    Code:
    ncsvc> Failed to setuid to root. Error 1: Operation not permitted
    java: ncui.cpp:262: void NCUI::run(): Assertion `m_conn->isConnected()' failed.
    Aborted (core dumped)
    I am using jdk1.6.0_33_ia32

    It worked fine before the upgrade.

  2. #512
    Join Date
    May 2010
    Beans
    25

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    Quote Originally Posted by deezer View Post
    I get the following error after upgrading from Ubuntu 12.04 to 12.10:

    Code:
    ncsvc> Failed to setuid to root. Error 1: Operation not permitted
    java: ncui.cpp:262: void NCUI::run(): Assertion `m_conn->isConnected()' failed.
    Aborted (core dumped)
    I am using jdk1.6.0_33_ia32

    It worked fine before the upgrade.
    Running the Mad Scientist script as sudo in 12.10 works and I don't get the above error.
    $sudo ./junipernc.sh --root

    Therfore, I believe the entire problem is
    Code:
    ncsvc> Failed to setuid to root.
    I'm not sure why this fails in Ubuntu 12.10, I believe I have the permissions set correctly on ncsvc as far as I know:

    Code:
    -rws--s--x 1 root     root     1281948 Oct 25 16:40 ncsvc

  3. #513
    Join Date
    May 2012
    Beans
    3

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    In quantal, after apllying all patches, new problem appears. Cannot launch network connect any more. When launching NC.jar manually, following errors appears:

    * SecureLaunchNCLoader * Error loading message strings: java.lang.Exception: Error reading nclaunchmessages.pl
    *** Property [msgNCTitle] with defaultValue [Network Connect] does not exist or may not have been translated ***.
    *** Property [msgTabNameSession] with defaultValue [Session] does not exist or may not have been translated ***. ...

    Full output in attachement.
    Does anyone have similar problem?
    Attached Files Attached Files

  4. #514
    Join Date
    May 2012
    Beans
    3

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    Unfortunately some sigfault occured.

    Code:
    # A fatal error has been detected by the Java Runtime Environment:
    #
    #  SIGSEGV (0xb) at pc=0xaa9e3bcd, pid=2841, tid=2865249088
    #
    # JRE version: 7.0_09-b05
    # Java VM: Java HotSpot(TM) Server VM (23.5-b02 mixed mode linux-x86 )
    # Problematic frame:
    # C  [libncui.so+0x9bbcd]  DSClient::setCertHash(char const*)+0x35
    But it's rather question to Juniper Support
    Attached Files Attached Files

  5. #515
    Join Date
    Sep 2007
    Location
    Norway
    Beans
    27
    Distro
    Ubuntu 13.04 Raring Ringtail

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    This obviously has something to do with eCryptfs and that it doesn't allow setuid (anymore? - worked in 12.04). I have posted a question at Ask Ubuntu here and I'm hoping to find a way to hack SUID support to ecryptfs again.

    I made it work again by copying my ~/.juniper_networks folder to e.g. /opt/juniper and by changing the $JNPATH variable on line 1817 in the script to the following:

    Code:
    $JNPATH = "/opt/juniper/.juniper_networks";
    Remember to keep the folder permissions intact (use cp -a when copying).

    The GUI doesn't seem to be updated and doesn't show any stats or that it's connected at all, but if you run ifconfig and the tun0 interface is up and running with a VPN IP, then it's working.

    Disconnecting doesn't work with the GUI, obviously, so you just have to kill the ncsvc process to terminate the connection.

    It's not a perfect workaround, but at least it works.
    Last edited by karlstad; October 31st, 2012 at 05:02 PM. Reason: Line 1817 in the updated script as of September 27th

  6. #516
    Join Date
    Aug 2006
    Location
    Pawtucket, RI
    Beans
    40
    Distro
    Ubuntu 15.10 Wily Werewolf

    Re: New Juniper NC utility available

    Quote Originally Posted by aperomsik View Post
    I had been using an older version of the script until about last Wednesday, but then it stopped working. Before that it was working fine for me on both 32-bit and 64-bit 12.04 systems.

    So I tried the new version of the script. I like the fact that it gets Java out of the loop. It works fine on the 64-bit system, but for the 32-bit system it is getting stuck somehow. It says "connecting."

    In .juniper_networks/network_connect/ncsvc.log I see:

    IpcConn.error bind failed to port 443. Error 98 (ncipc.cpp:75)

    and then a bunch of


    20120902110504.536907 ncsvc[p26863.t26863] dsncuiapi.error sendMesage failed (dsncuiapi.cpp:180)


    Any ideas? Firefox is able to connect.
    So, I don't know why Firefox was able to connect, but I seem to have lost that workaround when I moved to 64-bit 12.10. I could have installed 32-bit Firefox, but I wasn't in the mood.

    I guess from the error message it should be obvious that the difference between the machine that worked and the one that didn't was that one was running a web server and the other wasn't.

    I seem to have got around the problem by adjusting the Listen commands in /etc/apache2/ports.conf to listen on port 443 only on the external interface, not on the local interface.

    I changed "Listen 443" to "Listen xx.xx.xx.xx:443" where xx.xx.xx.xx is the address of the network interface, which happens to be eth4.

    I don't know why ncsvc needs that port when run from msjnc but not when run from Firefox.

  7. #517
    Join Date
    Aug 2010
    Beans
    6

    Bytes Sent but Never Received - Connect from Behind Proxy

    I am trying to connect from a work site to a remote network. I use an Ubuntu VM (12.04) that must connect to the work network through a proxy. I successfully get connected but I cannot seem to get to any of the machines. On the Network connect GUI bytes sent ticks up but bytes received returns 0. Looks like the VPN host is using Network Connect 7.1. NC works fine from the Windows environment and both the VM and Windows machine when not behind the proxy.

    Has anyone had any experience with this? I have been having difficulty finding any workaround.

    Code:
    /usr/local/jre1.7.0_09/bin/java -jar ~/.juniper_networks/network_connect/NC.jar -h <host> -u <vpn user> -r "<Realy long realm name>" -f <X509 DER Format cert> -y <proxy host> -z 8080 -d <ProxyDomain> -L 5 -l 5 -s <proxy user> -a <proxy pass> -p <vpn pass> &
    NCUI.log
    Code:
    20121210164206.982207 ncui[p6551.t6568] dsclient.debug using supplied proxy settings (<proxy>:8080) (dsclient.cpp:1011)
    20121210164206.982382 ncui[p6551.t6568] http_connection.para Starting a timed connect with SSL session 0xad257bb0, proxy <hexcode removed>:8080, and timeout 30 (http_connection.cpp:181)
    20121210164206.982404 ncui[p6551.t6568] http_connection.para Entering state_start_connection (http_connection.cpp:293)
    20121210164207.1530 ncui[p6551.t6568] http_connection.para Entering state_continue_connection (http_connection.cpp:310)
    20121210164207.1592 ncui[p6551.t6568] http_connection.para Starting proxy negotiation (http_connection.cpp:734)
    20121210164207.1607 ncui[p6551.t6568] http_connection.para Entering state_proxy_connect (requester state = 0) (http_connection.cpp:343)
    20121210164207.1668 ncui[p6551.t6568] http_connection.para Entering state_proxy_get_response (http_connection.cpp:369)
    20121210164207.112960 ncui[p6551.t6576] dsio.para poll got return value of 1
     (dsio.cpp:511)
    20121210164207.113048 ncui[p6551.t6576] dsncuiapi.para DsNcUiApi::ProcessDisconnectReply (dsncuiapi.cpp:328)
    20121210164207.113086 ncui[p6551.t6576] ncui.info received onDisconnect with reason = 0 (ncui.cpp:445)
    20121210164207.113152 ncui[p6551.t6576] dsxp.para unregister handle 0x00000015, total 1 (dsio.cpp:355)
    20121210164207.113188 ncui[p6551.t6576] dsxp.para unregister handle 0x00000017, total 0 (dsio.cpp:355)
    20121210164207.113244 ncui[p6551.t6576] IpcConn.debug unregistering the IPC connection (0xB1328020) IO handler (ncipc.cpp:224)
    20121210164207.113428 ncui[p6551.t6576] ncapp.info waiting for NC service to stop! (ncapp.cpp:255)
    20121210164207.113471 ncui[p6551.t6576] ncapp.info done... (ncapp.cpp:257)
    20121210164207.113551 ncui[p6551.t6576] dsncuiapi.para DsNcUiApi::~DsNcUiApi (dsncuiapi.cpp:80)
    20121210164207.360801 ncui[p6551.t6568] http_connection.para Entering state_proxy_get_response (http_connection.cpp:369)
    20121210164207.360968 ncui[p6551.t6568] http_connection.para Entering state_proxy_handle_response (http_connection.cpp:409)
    20121210164207.361041 ncui[p6551.t6568] http_connection.info CONNECT negotiation complete (http_connection.cpp:445)
    20121210164207.361076 ncui[p6551.t6568] http_connection.para Entering state_ssl_connect (http_connection.cpp:481)
    20121210164208.212700 ncui[p6551.t6568] dsssl.para SSL connect ssl=0xadfe9978/sd=12 connection using cipher RC4-SHA (DSSSLSock.cpp:1320)
    20121210164208.213097 ncui[p6551.t6568] http_connection.para Returning DSHTTP_COMPLETE from state_ssl_connect (http_connection.cpp:489)
    20121210164210.201580 ncui[p6551.t6568] ncui.info Sending kill signal (SIGQUIT) to ncsvc...  (ncapp.cpp:454)
    ncsvc.log
    Code:
    20121210163739.214132 ncsvc[p6580.t6580] session.info log level set to 50 (session.cpp:1053)
    20121210163739.214645 ncsvc[p6580.t6580] dsio.para poll waiting for 1 fds, max-fd: 5, with timeout : -1
     (dsio.cpp:509)
    20121210163739.214771 ncsvc[p6580.t6580] dsio.para poll got return value of 1
     (dsio.cpp:511)
    20121210163739.214834 ncsvc[p6580.t6580] session.para received 102 msg from UI (session.cpp:112)
    20121210163739.214919 ncsvc[p6580.t6580] session.info ive_host = vpn.<network>.com (session.cpp:195)
    20121210163739.221435 ncsvc[p6580.t6580] session.info Using proxy <proxy>:8080 to connect to the IVE (session.cpp:235)
    20121210163739.226554 ncsvc[p6580.t6580] rmon.info got system route 0.0.0.0/0.0.0.0 gw <ip>.1 metric 0 via 0x00000000 (routemon.cpp:714)
    20121210163739.226686 ncsvc[p6580.t6580] rmon.info got system route <ip>.0/255.255.255.0 gw 0.0.0.0 metric 1 via 0x00000000 (routemon.cpp:714)
    20121210163739.226745 ncsvc[p6580.t6580] rmon.info got system route 169.254.0.0/255.255.0.0 gw 0.0.0.0 metric 1000 via 0x00000000 (routemon.cpp:714)
    20121210163739.226827 ncsvc[p6580.t6580] rmon.info got system route 208.<ip>.128/255.255.255.255 gw <ip>.1 metric 0 via 0x00000000 (routemon.cpp:714)
    20121210163739.226882 ncsvc[p6580.t6580] rmon.info  Collecting latest routes from the system (routemon.cpp:1452)
    20121210163739.227118 ncsvc[p6580.t6580] rmon.info best route to 216.<another ip> is 0.0.0.0/0.0.0.0 via 0x00000000 metric: 0 (routemon.cpp:1473)
    20121210163739.227225 ncsvc[p6580.t6580] rmon.info best route to gateway: <ip>.0/255.255.255.0 gw 0.0.0.0 via 0x00000000 metric 1 (routemon.cpp:1976)
    20121210163739.227284 ncsvc[p6580.t6580] rmon.info attempting to add route to next hop gateway (routemon.cpp:1980)
    20121210163739.227320 ncsvc[p6580.t6580] rmon.info adding route to <ip>.1/255.255.255.255 with gw 0.0.0.0, metric 1, if_id 0 (routemon.cpp:872)
    20121210163739.231793 ncsvc[p6580.t6580] rmon.info adding server route to the IVE: dest = 216.<another ip>, gw = <ip>.1, if_id = 0, dev = eth0 (routemon.cpp:1547)
    20121210163739.232340 ncsvc[p6580.t6580] session.info connecting to ive vpn.<network>.com (session.cpp:362)
    20121210163739.238356 ncsvc[p6580.t6580] ncphandler.debug registering the NCP IO handler (ncphandler.cpp:65)
    20121210163739.238528 ncsvc[p6580.t6580] dsxp.para register handle 0x00000007, total 2 (dsio.cpp:342)
    20121210163739.238644 ncsvc[p6580.t6580] ncp.error ncpEstablish for IVE vpn.<network>.com with context 0x9c15c70 (ncp.cpp:428)
    20121210163739.238930 ncsvc[p6580.t6580] dsio.para poll waiting for 2 fds, max-fd: 7, with timeout : 60
     (dsio.cpp:509)
    20121210163739.239072 ncsvc[p6580.t6581] main.info Setting DSSSL to use Default ciphers (ncp.cpp:1680)
    20121210163739.239587 ncsvc[p6580.t6581] main.info Setting NCP certificate hash for DSSSL certificate verification (ncp.cpp:1689)
    20121210163739.239698 ncsvc[p6580.t6581] main.info Using DSSSL to connect to IVE (ncp.cpp:1750)
    20121210163739.239741 ncsvc[p6580.t6581] connect.para Starting dsssl timed connect (ncp_dsssl.cpp:69)
    20121210163739.239781 ncsvc[p6580.t6581] connect.info creating a new HTTP connection... (ncp_dsssl.cpp:176)
    20121210163739.239823 ncsvc[p6580.t6581] http_connection.para Entering state_start_connection (http_connection.cpp:293)
    20121210163739.308541 ncsvc[p6580.t6581] http_connection.para Entering state_continue_connection (http_connection.cpp:310)
    20121210163739.308738 ncsvc[p6580.t6581] http_connection.para Starting proxy negotiation (http_connection.cpp:734)
    20121210163739.308833 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_connect (requester state = 0) (http_connection.cpp:343)
    20121210163739.309119 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_get_response (http_connection.cpp:369)
    20121210163739.796408 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_get_response (http_connection.cpp:369)
    20121210163739.796797 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_handle_response (http_connection.cpp:409)
    20121210163739.796938 ncsvc[p6580.t6581] http_connection.info CONNECT negotiation complete (http_connection.cpp:445)
    20121210163739.796987 ncsvc[p6580.t6581] http_connection.para Entering state_ssl_connect (http_connection.cpp:481)
    20121210163740.271185 ncsvc[p6580.t6581] dsssl.para SSL connect ssl=0xf7305ef0/sd=11 connection using cipher RC4-SHA (DSSSLSock.cpp:1320)
    20121210163740.271724 ncsvc[p6580.t6581] http_connection.para Returning DSHTTP_COMPLETE from state_ssl_connect (http_connection.cpp:489)
    20121210163740.403764 ncsvc[p6580.t6581] connect.info compression is enabled (ncp_dsssl.cpp:400)
    20121210163740.403939 ncsvc[p6580.t6581] connect.info IVE ncp_version = 2 (ncp_dsssl.cpp:410)
    20121210163740.404831 ncsvc[p6580.t6581] conn.info cleanup 0 (ncp.cpp:1418)
    20121210163740.404945 ncsvc[p6580.t6581] ncp.error NCP_ESTABLISH_DONE for IVE vpn.<network>.com (ncp.cpp:1793)
    20121210163740.405026 ncsvc[p6580.t6580] dsio.para poll got return value of 1
     (dsio.cpp:511)
    20121210163740.405074 ncsvc[p6580.t6580] ncphandler.para got 1 NCP callback (ncphandler.cpp:255)
    20121210163740.405106 ncsvc[p6580.t6580] ncphandler.info establish done (ncphandler.cpp:279)
    20121210163740.405409 ncsvc[p6580.t6580] ncp.info connect to MY-VM:443 svc 4 (ncp.cpp:779)
    20121210163740.405584 ncsvc[p6580.t6580] connect.info creating a new HTTP connection... (ncp_dsssl.cpp:176)
    20121210163740.405634 ncsvc[p6580.t6580] http_connection.para Entering state_start_connection (http_connection.cpp:293)
    20121210163740.406329 ncsvc[p6580.t6580] dsio.para poll waiting for 2 fds, max-fd: 7, with timeout : 59
     (dsio.cpp:509)
    20121210163740.406507 ncsvc[p6580.t6581] worker.para 1 sockets are ready for read/write. (ncp_dsssl.cpp:622)
    20121210163740.407056 ncsvc[p6580.t6581] worker.para intra_ncp_server_sock ready to read. (ncp_dsssl.cpp:632)
    20121210163740.466102 ncsvc[p6580.t6581] worker.para 1 sockets are ready for read/write. (ncp_dsssl.cpp:622)
    20121210163740.466267 ncsvc[p6580.t6581] http_connection.para Entering state_continue_connection (http_connection.cpp:310)
    20121210163740.466314 ncsvc[p6580.t6581] http_connection.para Starting proxy negotiation (http_connection.cpp:734)
    20121210163740.466374 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_connect (requester state = 0) (http_connection.cpp:343)
    20121210163740.466666 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_get_response (http_connection.cpp:369)
    20121210163740.611788 ncsvc[p6580.t6581] worker.para 1 sockets are ready for read/write. (ncp_dsssl.cpp:622)
    20121210163740.611982 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_get_response (http_connection.cpp:369)
    20121210163740.612071 ncsvc[p6580.t6581] http_connection.para Entering state_proxy_handle_response (http_connection.cpp:409)
    20121210163740.612130 ncsvc[p6580.t6581] http_connection.info CONNECT negotiation complete (http_connection.cpp:445)
    20121210163740.612293 ncsvc[p6580.t6581] http_connection.para Entering state_ssl_connect (http_connection.cpp:481)
    20121210163741.10580 ncsvc[p6580.t6581] dsssl.para SSL connect ssl=0xf7305e60/sd=11 connection using cipher RC4-SHA (DSSSLSock.cpp:1320)
    20121210163741.11067 ncsvc[p6580.t6581] http_connection.para Returning DSHTTP_COMPLETE from state_ssl_connect (http_connection.cpp:489)
    20121210163741.137251 ncsvc[p6580.t6581] worker.para 1 sockets are ready for read/write. (ncp_dsssl.cpp:622)
    20121210163741.137526 ncsvc[p6580.t6581] connect.info compression is enabled (ncp_dsssl.cpp:400)
    20121210163741.137620 ncsvc[p6580.t6581] connect.info IVE ncp_version = 2 (ncp_dsssl.cpp:410)
    20121210163741.137828 ncsvc[p6580.t6581] connect.error deflateInit2 returned 0 (ncp_dsssl.cpp:486)
    20121210163741.137937 ncsvc[p6580.t6581] worker.para 2 sockets are ready for read/write. (ncp_dsssl.cpp:622)
    20121210163741.137982 ncsvc[p6580.t6581] worker.para intra_ncp_server_sock ready to read. (ncp_dsssl.cpp:632)
    20121210163741.138087 ncsvc[p6580.t6581] worker.para compressed 20 -> 25 bytes: socket 11, host MY-VM (ncp_dsssl.cpp:726)
    20121210163741.138491 ncsvc[p6580.t6581] worker.para [conn 0x9c1c548] wrote 27 bytes: socket 11, host MY-VM, DSSSL_has_data_tosend 0 (ncp_dsssl.cpp:771)
    20121210163741.275128 ncsvc[p6580.t6581] worker.para 1 sockets are ready for read/write. (ncp_dsssl.cpp:622)
    20121210163741.275817 ncsvc[p6580.t6581] worker.para read 121 bytes from connection: socket 11, host MY-VM (ncp_dsssl.cpp:824)
    20121210163741.276051 ncsvc[p6580.t6580] dsio.para poll got return value of 1
     (dsio.cpp:511)
    20121210163741.276158 ncsvc[p6580.t6580] ncphandler.para got 3 NCP callback (ncphandler.cpp:255)
    20121210163741.276201 ncsvc[p6580.t6580] ncphandler.info connect done (ncphandler.cpp:284)
    20121210163741.276366 ncsvc[p6580.t6580] session.info Connected to ive vpn.<network>.com (session.cpp:426)
    20121210163741.278008 ncsvc[p6580.t6580] adapter.info opened tun adapter 0000000C (adapter.cpp:374)
    20121210163741.278322 ncsvc[p6580.t6580] dsio.para poll waiting for 2 fds, max-fd: 7, with timeout : 30
     (dsio.cpp:509)
    20121210163741.278527 ncsvc[p6580.t6580] dsio.para poll got return value of 1
     (dsio.cpp:511)
    20121210163741.278787 ncsvc[p6580.t6580] ncphandler.para got 5 NCP callback (ncphandler.cpp:255)
    20121210163741.278976 ncsvc[p6580.t6580] ipsec.info received kmp message 301 size 160 (tunnel.cpp:210)
    20121210163741.279157 ncsvc[p6580.t6580] dsipsec.para received tlv group: group 3, len 28 (tunnel.cpp:220)
    20121210163741.279334 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 3, attr 1, len 1 (tunnel.cpp:228)
    20121210163741.279512 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 3, attr 2, len 1 (tunnel.cpp:228)
    20121210163741.279833 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 3, attr 3, len 8 (tunnel.cpp:228)
    20121210163741.280021 ncsvc[p6580.t6580] dsipsec.para received tlv group: group 6, len 10 (tunnel.cpp:220)
    20121210163741.280196 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 6, attr 2, len 4 (tunnel.cpp:228)
    20121210163741.280398 ncsvc[p6580.t6580] dsipsec.para received tlv group: group 2, len 52 (tunnel.cpp:220)
    20121210163741.280723 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 2, attr 1, len 4 (tunnel.cpp:228)
    20121210163741.280921 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 2, attr 1, len 4 (tunnel.cpp:228)
    20121210163741.281098 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 2, attr 2, len 16 (tunnel.cpp:228)
    20121210163741.281273 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 2, attr 3, len 4 (tunnel.cpp:228)
    20121210163741.283946 ncsvc[p6580.t6580] dsipsec.para received tlv group: group 4, len 10 (tunnel.cpp:220)
    20121210163741.284119 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 4, attr 1, len 4 (tunnel.cpp:228)
    20121210163741.284235 ncsvc[p6580.t6580] dsipsec.para received tlv group: group 1, len 30 (tunnel.cpp:220)
    20121210163741.284346 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 1, attr 1, len 4 (tunnel.cpp:228)
    20121210163741.284472 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 1, attr 2, len 4 (tunnel.cpp:228)
    20121210163741.284616 ncsvc[p6580.t6580] dsipsec.para received tlv attr: group 1, attr 3, len 4 (tunnel.cpp:228)
    20121210163741.284763 ncsvc[p6580.t6580] ProxyConfigManager.info Created an external PAC file (sysdeps.cpp:302)
    20121210163741.284883 ncsvc[p6580.t6580] ProxyConfigManager.info Created an dummy internal PAC string (sysdeps.cpp:348)
    20121210163741.285015 ncsvc[p6580.t6580] ProxyConfigManager.info Created the merged PAC file (sysdeps.cpp:377)
    20121210163741.285131 ncsvc[p6580.t6580] session.info IVE sent DNS server <vpn.ip>.40.54 (session.cpp:1470)
    20121210163741.285265 ncsvc[p6580.t6580] session.info IVE sent DNS server <vpn.ip>.40.53 (session.cpp:1470)
    20121210163741.285382 ncsvc[p6580.t6580] session.info IVE sent DNS suffix int.<network>.com (session.cpp:1498)
    20121210163741.285490 ncsvc[p6580.t6580] session.info IVE DNS has priority over Client DNS (session.cpp:1527)
    20121210163741.291184 ncsvc[p6580.t6580] sysdeps.para Inserting search domain: int.<network>.com (sysdeps.cpp:734)
    20121210163741.291354 ncsvc[p6580.t6580] sysdeps.para Inserting name server: <vpn.ip>.40.54 (sysdeps.cpp:741)
    20121210163741.291464 ncsvc[p6580.t6580] sysdeps.para Inserting name server: <vpn.ip>.40.53 (sysdeps.cpp:741)
    20121210163741.291738 ncsvc[p6580.t6580] session.info IVE sent WINS server 255.255.255.255 (session.cpp:1611)
    20121210163741.291861 ncsvc[p6580.t6580] session.info IVE sent NC IP <vpn.ip>.60.100 netmask 255.255.255.0 (session.cpp:1219)
    20121210163741.291966 ncsvc[p6580.t6580] session.info NC client network is <vpn.ip>.60.0 (session.cpp:1224)
    20121210163741.292071 ncsvc[p6580.t6580] adapter.info IVE get DNS server <vpn.ip>.40.54 (adapter.cpp:459)
    20121210163741.292182 ncsvc[p6580.t6580] adapter.info IVE get DNS server <vpn.ip>.40.53 (adapter.cpp:459)
    20121210163741.292290 ncsvc[p6580.t6580] adapter.para IVE and Client MTU values are same : 1400 (adapter.cpp:521)
    20121210163741.306958 ncsvc[p6580.t6580] adapter.info deleting route: /sbin/route del -net <vpn.ip>.60.0 netmask 255.255.255.0 dev tun0 (adapter.cpp:563)
    20121210163741.332941 ncsvc[p6580.t6580] adapter.info cip = <vpn.ip>.60.100, mask = 255.255.255.0, gw = <vpn.ip>.60.50, domain = int.<network>.com (adapter.cpp:580)
    20121210163741.333012 ncsvc[p6580.t6580] dsxp.para register handle 0x0000000c, total 3 (dsio.cpp:342)
    20121210163741.333033 ncsvc[p6580.t6580] adapter.para Sending MTU (1400) to IVE (adapter.cpp:738)
    20121210163741.333050 ncsvc[p6580.t6580] ipsec.info send kmp message 303 size 16 (tunnel.cpp:202)
    20121210163741.333087 ncsvc[p6580.t6580] session.info adapter is configured (session.cpp:1251)
    20121210163741.333111 ncsvc[p6580.t6580] session.info Deny route count = 0 (session.cpp:1284)
    20121210163741.333157 ncsvc[p6580.t6580] rmon.info modifying the metric for a conflicting route to 0.0.0.0/0.0.0.0 gw <ip>.1 metric 10 (routemon.cpp:837)
    20121210163741.333185 ncsvc[p6580.t6580] rmon.info adding a conflicting route with a lower metric to 0.0.0.0/0.0.0.0 gw <vpn.ip>.60.100 metric 1 (routemon.cpp:861)
    20121210163741.333215 ncsvc[p6580.t6580] rmon.info adding route to 0.0.0.0/0.0.0.0 with gw <vpn.ip>.60.100, metric 1, if_id 0 (routemon.cpp:872)
    20121210163741.333243 ncsvc[p6580.t6580] session.info added route to dest = 0.0.0.0, mask = 0.0.0.0 (session.cpp:1336)
    20121210163741.333265 ncsvc[p6580.t6580] session.info route count = 1 (session.cpp:1340)
    20121210163741.333359 ncsvc[p6580.t6580] rmon.info system routes:  (routemon.cpp:257)
    20121210163741.333383 ncsvc[p6580.t6580] rmon.info 0.0.0.0/0.0.0.0 gw <vpn.ip>.60.100 via 0x00000000 metric 1 (routemon.cpp:1864)
    20121210163741.333397 ncsvc[p6580.t6580] rmon.info 0.0.0.0/0.0.0.0 gw <ip>.1 via 0x00000000 metric 10 (routemon.cpp:1864)
    20121210163741.333406 ncsvc[p6580.t6580] rmon.info <ip>.0/255.255.255.0 gw 0.0.0.0 via 0x00000000 metric 1 (routemon.cpp:1864)
    20121210163741.333425 ncsvc[p6580.t6580] rmon.info <ip>.1/255.255.255.255 gw 0.0.0.0 via 0x00000000 metric 1 (routemon.cpp:1864)
    20121210163741.333444 ncsvc[p6580.t6580] rmon.info 169.254.0.0/255.255.0.0 gw 0.0.0.0 via 0x00000000 metric 1000 (routemon.cpp:1864)
    20121210163741.333464 ncsvc[p6580.t6580] rmon.info 208.<ip>.128/255.255.255.255 gw <ip>.1 via 0x00000000 metric 0 (routemon.cpp:1864)
    20121210163741.333475 ncsvc[p6580.t6580] rmon.info 216.<another ip>/255.255.255.255 gw <ip>.1 via 0x00000000 metric 1 (routemon.cpp:1864)
    20121210163741.333494 ncsvc[p6580.t6580] rmon.info monitored routes:  (routemon.cpp:259)
    20121210163741.333505 ncsvc[p6580.t6580] rmon.info <ip>.1/255.255.255.255 gw 0.0.0.0 via 0x00000000 metric 1 (routemon.cpp:1864)
    20121210163741.333523 ncsvc[p6580.t6580] rmon.info 216.<another ip>/255.255.255.255 gw <ip>.1 via 0x00000000 metric 1 (routemon.cpp:1864)
    20121210163741.333535 ncsvc[p6580.t6580] rmon.info 0.0.0.0/0.0.0.0 gw <vpn.ip>.60.100 via 0x00000000 metric 1 (routemon.cpp:1864)
    20121210163741.333553 ncsvc[p6580.t6580] rmon.info Excluded Routes:  (routemon.cpp:261)
    20121210163741.333565 ncsvc[p6580.t6580] rmon.info starting the route monitor... (routemon.cpp:316)
    20121210163741.333599 ncsvc[p6580.t6580] dsxp.para register handle 0x0000000d, total 4 (dsio.cpp:342)
    20121210163741.333621 ncsvc[p6580.t6580] session.info Tunnel setup done (session.cpp:489)

  8. #518
    Join Date
    Jan 2007
    Location
    NH, USA
    Beans
    242
    Distro
    Ubuntu Jaunty Jackalope (testing)

    Re: HOWTO set up Juniper Network Connect VPN on 64-bit Ubuntu 11.04

    Quote Originally Posted by dvo View Post
    I also had quite some trouble getting Juniper to run on a new 64-bit Linux installation (Ubuntu 11.04 "Natty").
    Using a 32-bit chroot works, but is quite cumbersome.

    After a lot of investigation and trial and error, I realized that the - only - problem is that ~/.juniper_networks/network_connect/libncui.so is a 32-bit library, thus it cannot be used by 64-bit Java.
    Shame on Juniper that they do not provide a 64-bit version of the library! This would be the only thing they'd need to do to support 64-bit Linux systems out-of-the box.

    First note that JNC will only work with the Java Runtime Environment from Sun/Oracle. In case your installation uses another JRE as default, you may use the command sudo update-alternatives --config java to switch to java-6-sun.

    My workaround for a 64-bit installation is as follows.

    Additionally install the 32-bit variant of Java: aptitude install ia32-sun-java6-bin .
    Assuming that Java is installed at /usr/lib/jvm/java-6-sun/jre/bin/ and at /usr/lib/jvm/ia32-java-6-sun/jre/bin/ ,
    rename /usr/lib/jvm/java-6-sun/jre/bin/java as /usr/lib/jvm/java-6-sun/jre/bin/java.orig and
    save the following shell script as /usr/lib/jvm/java-6-sun/jre/bin/java :

    Code:
    #!/bin/bash
    if [ $3x = "NCx" ]
    then
        /usr/lib/jvm/ia32-java-6-sun/jre/bin/java "$@"
    else
        /usr/lib/jvm/java-6-sun/jre/bin/java.orig "$@"
    fi
    This script should be readable and executable for all. It will call the 32-bit variant of Java when launching Network Connect (and otherwise call the default 64-bit variant).
    Thank you so much! I have been messing with this for about an hour...

  9. #519
    Join Date
    Jan 2013
    Beans
    1

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    I don't know what happened but from linux (ubuntu 12.04 64bits) I couldn't connect anynome , from 3 months ago It was working but now i get this error:

    ui[p11089.t11112] DSInet.error failed to get HTTP response headers. Error 1 (dsinet.cpp:674)
    20130114150513.147042 ncui[p11089.t11112] dsclient.error unable to send HTTP login request, error -8 (authenticate.cpp:184)
    20130114150513.147069 ncui[p11089.t11112] dsclient.error state login failed, error 8 (dsclient.cpp:298)
    20130114150513.147207 ncui[p11089.t11112] ncapp.error Failed to connect/authenticate with IVE. Error 8 (ncapp.cpp:179)


    does it sound familiar to you?

    Please help me , I really appreciate your help

  10. #520
    Join Date
    Apr 2009
    Beans
    1

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    I was still having problems with this after following this doc:
    http://kb.juniper.net/InfoCenter/ind...ent&id=KB25230

    It was the same segmentation fault shenanigans that avira was experiencing. After much research, I found that manually supplying the ssl certificate and realm from the command line made everything happy.

    I even came across an excellent tutorial for using network connect in an entirely non-gui way at this link:

    http://makefile.com/.plan/2009/10/ju...olved-mystery/
    many props to scott for being a genius

    I personally like the gui window and thus have created this bash script to make it cooperate:

    Code:
    #!/bin/bash
    #
    # 01-30-2013 RobertKempton
    # this script will launch the juniper network connect java client with the given paramters
    # if you don't know your realm, open your juniper site in your browser (don't log in)
    # right click on the page, choose view source
    # search for realm. The value field in the same html tag is your realm
    #
    # This script will also automatically download the ssl certificate for you
    ##
    
    #make sure network connect is actually installed
    if [ ! -f $HOME/.juniper_networks/network_connect/NC.jar ]; then
        echo "Juniper Network Connect is not installed for the current user"
        exit
    fi
    
    #check if 32bit java is installed
    if [ ! -d /usr/lib/jvm/ia32-java-6-sun ]; then
        echo "32bit java does not appear to be installed"
        echo "check if /usr/lib/jvm/ia32-java-6-sun exists"
        exit
    fi
    
    #make sure we got all our options
    if [ $# -ne 6 ]; then
        echo "Usage:"
        echo "launcNC.sh -h HOST -u USERNAME -r REALM"
        exit
    fi
    while getopts :h:u:r: opt ; do
        case $opt in
            h)
                nchost=$OPTARG;;
            u)
                ncuser=$OPTARG;;
            r)
                ncrealm=$OPTARG;;
            :)
                echo "$opt requires an argument"
                exit;;
            ?)
                echo "$opt is an invalid option"
                exit;; 
        esac
    done
    
    #get the ssl certificate
    if [ ! -f $HOME/.juniper_networks/network_connect/ssl.crt ];then
        echo "downloading ssl certificate"
        echo | openssl s_client -connect $nchost:443 2>&1 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'| openssl x509 -outform der > $HOME/.juniper_networks/network_connect/ssl.crt
    fi
    
    #launch the application
    /usr/lib/jvm/ia32-java-6-sun/bin/java -jar $HOME/.juniper_networks/network_connect/NC.jar -h "$nchost" -r "$ncrealm" -u "$ncuser" -f $HOME/.juniper_networks/network_connect/ssl.crt
    
    
    #non gui http://makefile.com/.plan/2009/10/juniper-vpn-64-bit-linux-an-unsolved-mystery/
    # if javascript:alert(document.cookie) does not work for you, 
    # install the view cookies addon, then right click -> view page info
    #$HOME/.juniper_networks/network_connect/ncui -h $nchost -c DSID=<dsid value> -f ssl.crt

    if you have questions/issues/etc let me know.

    This script assumes the 32bit java is installed at /usr/lib/jvm/ia32-java-6-sun, which is the location it lands in when installed via apt. Feel free to use/modify/distribute this script.

Page 52 of 56 FirstFirst ... 2425051525354 ... LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •