Page 50 of 56 FirstFirst ... 404849505152 ... LastLast
Results 491 to 500 of 554

Thread: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

  1. #491
    Join Date
    Jul 2012
    Beans
    6

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    after finally getting the java working, i get the juniper applet popup thingy up, it connects but immediately after it exits, that is both thru the junipernc script from madscientist and from the firefox plugin, the error i am getting is the following:

    20120721135121.507201 ncui[p4463.t4493] ncapp.info New ncapp log level set to 3 (nccommon.cpp:75)
    20120721135121.507269 ncui[p4463.t4493] ncapp.info Version : 7.1
    Release Version : 7.1-0-Build18853
    Build Date/Time : Jul 13 2011
    Copyright 2001-2010 Juniper Networks
    (ncapp.cpp:153)
    20120721135121.553874 ncui[p4463.t4493] dsclient.info state: kStateSignin (dsclient.cpp:256)
    20120721135121.553913 ncui[p4463.t4493] dsclient.info --> GET / (authenticate.cpp:179)
    20120721135121.568433 ncui[p4463.t4493] dsclient.info <-- 302 https://as.afip.gov.ar/dana-na/auth/url_0/welcome.cgi (authenticate.cpp:211)
    20120721135121.568465 ncui[p4463.t4493] dsclient.info state: kStateWelcome (dsclient.cpp:264)
    20120721135121.568477 ncui[p4463.t4493] dsclient.info --> GET /dana-na/auth/url_0/welcome.cgi (authenticate.cpp:179)
    20120721135121.687170 ncui[p4463.t4493] dsclient.info <-- 200 (authenticate.cpp:211)
    20120721135121.687263 ncui[p4463.t4493] dsclient.info state: kStateLogin (dsclient.cpp:296)
    20120721135121.687338 ncui[p4463.t4493] dsclient.info --> POST /dana-na/auth/url_0/login.cgi (authenticate.cpp:179)
    20120721135121.978096 ncui[p4463.t4493] dsclient.info <-- 302 https://as.afip.gov.ar/dana/home/starter0.cgi?check=yes (authenticate.cpp:211)
    20120721135121.978134 ncui[p4463.t4493] dsclient.info --> GET /dana/home/starter0.cgi?check=yes (authenticate.cpp:179)
    20120721135122.128123 ncui[p4463.t4493] dsclient.info <-- 200 (authenticate.cpp:211)
    20120721135122.128195 ncui[p4463.t4493] authStateLogin.info starter0.cgi has asked for tz_offset parameter (authenticate.cpp:372)
    20120721135122.128220 ncui[p4463.t4493] authStateLogin.info starter0.cgi has asked for clienttime parameter (authenticate.cpp:379)
    20120721135122.128256 ncui[p4463.t4493] dsclient.info --> POST /dana/home/starter0.cgi?check=yes (authenticate.cpp:179)
    20120721135122.222343 ncui[p4463.t4493] dsclient.info <-- 302 /dana/home/starter.cgi (authenticate.cpp:211)
    20120721135122.222392 ncui[p4463.t4493] dsclient.info --> GET /dana/home/starter.cgi (authenticate.cpp:179)
    20120721135122.303964 ncui[p4463.t4493] dsclient.info <-- 200 (authenticate.cpp:211)
    20120721135122.304034 ncui[p4463.t4493] dsclient.info state: kStateAuthenticated (dsclient.cpp:376)
    20120721135124.511130 ncui[p4463.t4493] IpcConn.error recv failed with errno 22 (ncipc.cpp:273)
    20120721135124.534406 ncui[p4463.t4493] ncui.error Got signal 17 (ncui.cpp:278)



    any help with this would be greately appreciated

  2. #492
    Join Date
    Aug 2006
    Beans
    Hidden!

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    I was getting the following errors in my NCSVC and NCUI logs respectively when trying to connect via the command line:

    Code:
    20120723150831.208316 ncsvc[p15348.t15348] ncapp.error Failed to authenticate with IVE. Error 2 (ncsvc.cpp:225)
    
    20120724101941.496299 ncui[p22588.t22613] ncapp.error Failed to connect/authenticate with IVE. Error 10 (ncapp.cpp:179)
    I came across this page, which indicates that in some cases, the policy is set up so that you _must_ connect through a browser.

    I found this to be the case.

    I'm running Archlinux, not ubuntu, so ymmv, but here's what I had to do:

    • Install 32-bit jre
    • Install 32-bit firefox
    • Symlink the 32-bit jre browser plugin so to the right directory


    Hope that helps someone!

  3. #493
    Join Date
    Jul 2012
    Beans
    1

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    Hi,

    I'm having problems connecting to my employers network using MadScientist's script. Network Connect Version is 7.0 and Ubuntu is 12.04 (64bit). In the logs I can see the following, but I have no idea what that means or how to fix it:

    [...]
    20120726110102.832623 ncsvc[p13984.t13984] ncp.error ncpEstablish for IVE abc.cde.de with context 0x8f709a8 (ncp.cpp:410)
    20120726110102.832886 ncsvc[p13984.t13985] main.info Setting DSSSL to use Default ciphers (ncp.cpp:1635)
    20120726110102.833167 ncsvc[p13984.t13985] main.info Setting NCP certificate hash for DSSSL certificate verification (ncp.cpp:1644)
    20120726110102.833213 ncsvc[p13984.t13985] main.info Using DSSSL to connect to IVE (ncp.cpp:1705)
    20120726110102.833242 ncsvc[p13984.t13985] connect.info creating a new HTTP connection... (ncp_dsssl.cpp:168)
    20120726110102.981348 ncsvc[p13984.t13985] connect.info compression is enabled (ncp_dsssl.cpp:392)
    20120726110102.981461 ncsvc[p13984.t13985] connect.info IVE ncp_version = 2 (ncp_dsssl.cpp:402)
    20120726110102.981726 ncsvc[p13984.t13985] conn.info cleanup 0 (ncp.cpp:1393)
    20120726110102.981782 ncsvc[p13984.t13985] ncp.error NCP_ESTABLISH_DONE for IVE abc.cde.de (ncp.cpp:1748)
    20120726110102.981917 ncsvc[p13984.t13984] ncphandler.info establish done (ncphandler.cpp:238)
    20120726110102.982034 ncsvc[p13984.t13984] ncp.info connect to myComputer:443 svc 4 (ncp.cpp:760)
    20120726110102.982092 ncsvc[p13984.t13984] connect.info creating a new HTTP connection... (ncp_dsssl.cpp:168)
    20120726110103.125932 ncsvc[p13984.t13985] connect.info compression is enabled (ncp_dsssl.cpp:392)
    20120726110103.126043 ncsvc[p13984.t13985] connect.info IVE ncp_version = 2 (ncp_dsssl.cpp:402)
    20120726110103.126191 ncsvc[p13984.t13985] connect.error deflateInit2 returned 0 (ncp_dsssl.cpp:478)
    20120726110103.152979 ncsvc[p13984.t13985] worker.error connect to myComputer:443 failed. IVE returned error 20001069 (ncp_dsssl.cpp:1054)
    20120726110103.153222 ncsvc[p13984.t13984] ncphandler.info control channel disconnected due to error 20001069 (ncphandler.cpp:286)
    20120726110103.153299 ncsvc[p13984.t13984] session.info initial connection to IVE is lost. (session.cpp:550)
    20120726110103.153332 ncsvc[p13984.t13984] session.info disconnecting from ive abc.cde.de with reason 5 (session.cpp:486)
    20120726110103.153358 ncsvc[p13984.t13984] adapter.info closing tun adapter FFFFFFFF (adapter.cpp:781)
    20120726110103.153385 ncsvc[p13984.t13984] sysdeps.info restoring DNS settings... (sysdeps.cpp:796)
    20120726110103.153418 ncsvc[p13984.t13984] sysdeps.error rename /etc/jnpr-nc-resolv.conf => /etc/resolv.conf failed wirh error 2 (sysdeps.cpp:799)
    20120726110103.153447 ncsvc[p13984.t13984] sysdeps.error rename /etc/jnpr-nc-hosts.bak => /etc/hosts failed wirh error 2 (sysdeps.cpp:803)
    20120726110103.153486 ncsvc[p13984.t13984] ncp.error ncpTearDown for IVE abc.cde.de (ncp.cpp:482)
    20120726110103.153639 ncsvc[p13984.t13985] worker.error NCP worker has been requested to stop (ncp_dsssl.cpp:641)
    20120726110103.153889 ncsvc[p13984.t13985] conn.info cleanup 0 (ncp.cpp:1393)

    Any help would be appreciated.

    Hamrag
    Last edited by Hamrag; August 1st, 2012 at 08:48 AM.

  4. #494
    Join Date
    Dec 2007
    Location
    Los Angeles
    Beans
    35
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    I have 2 12.04 (32bit) systems. Both have been able to use network connect (NC), until about a week ago. I am using the browser approach. My employer's vpn website has a "Start" button for Network Connect. This opens a new window with the network connect process. On both systems it connects, but now, on one of them I immediately get a "Config Failed" window.

    The ncui.log and ncsvc.log on the failing system are both empty. The only difference between the systems is that the one where NC is NOT working has been kept up to date. I have 247 pending updates on the other system (where NC is working) and I am afraid to apply any of them for fear of breaking NC.

    Both systems have sun java installed
    NC is broken vs NC is working
    FF 14.0.1 vs FF 13.0.1
    kernel 3.2.0-27-generic vs 3.2.0-26-generic-pae
    Java.com Ver 6 update 30 vs Ver 6 update 30

    Any help on what log I should look in for hints as to what is broken would be appreciated, or what other package versions I should compare.

    Another symptom is that on the system where NC fails, when I plug into my employers LAN, I can no longer connect via smb://machine_name/share, I have to specify smb://user@machine_name.business.corp/share or smb://machine_ip_address.

  5. #495
    Join Date
    Dec 2007
    Location
    Los Angeles
    Beans
    35
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    I suppose everyone probably knows this, but I solved my problem by reading the info entry for resolvconf. Seems that due to some other WIFI network problems I was having, I moved /etc/resolv.conf to a backup file. Under 12.04 this is a bad idea, as /etc/resolv.conf is supposed to be a symbolic link to /run/resolvconf/resolv.conf. On my broken system, /run/resolvconf/resolv.conf did not exist. Nevertheless, I created /etc/resolv.conf as a symlink to this and rebooted. Immediately, names were resolved when I had an ethernet connection to the network.

    More pertinent to this thread, Network Connect (from outside the LAN) now works fine as well.

  6. #496
    Join Date
    May 2012
    Beans
    3

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    Post #441:
    You sir, are a hero.
    Thank you.

  7. #497
    Join Date
    May 2012
    Beans
    3

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    And also, @mdwy62 in post #494, you need to update your java. Java 6 update 30 is banned in firefox now, only 31 and above work now. Same thing goes for java 7 updates 1 and 2.
    (This is due to security vulnerabilities)

  8. #498
    Join Date
    Jan 2007
    Beans
    36

    Re: HOWTO set up Juniper Network Connect VPN on Ubuntu Dapper

    I've been trying to get this working for over a month .

    When I run the following I get

    java -classpath /home/tom/.juniper_networks/network_connect/NC.jar NC -h <url> -L 5 -l 5 -n -t -x

    I get

    failed to load ncui library. I am running a 64 bit system, 12.04 with oracle java 6 installed.

    I have tried mad scientist script but I get a failure for NC when running diagnostics.

    Please someone put me out of my misery!!

  9. #499
    Join Date
    Jun 2006
    Location
    Lexington, MA
    Beans
    183
    Distro
    Ubuntu 12.04 Precise Pangolin

    Smile New Juniper NC utility available

    Hi all. First the good news. I decided to completely rework the script that I have, and write it in Perl/GTK2 as a complete and separate UI to the Juniper Network Connect that replaces the Java UI that comes from Juniper.

    This will allow you to forget all requirements for Java of any aspect. Additionally it has some extra features not found in the NC UI, such as automatically retrying on timeout (if you use a password) and storing multiple VPN profiles which you can select from.

    I added simplistic support for proxy services, but I don't have any access to a system that uses proxy so I have no idea if what I've done works well or not.

    Please go visit my Juniper Network Connect page for some more details and a download link.

    Here's the bad news: later this week (on Thursday Aug 23 2012) I will lose access to my Juniper NC server, as my company is switching to a different VPN service. After that I won't be able to test any changes to the script.

    So I recommend that you grab a copy now and try it out!
    "Please remain calm...I may be mad, but I am a professional." --Mad Scientist

  10. #500
    Join Date
    Jun 2006
    Location
    Lexington, MA
    Beans
    183
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: New Juniper NC utility available

    It turns out I may have a bit longer access to Juniper Network Connect, rather than losing it this Wednesday. But even if I do my last day of access is coming soon (within weeks at most).

    I created a mailing list you can subscribe to, as well, if you want to be kept up-to-date with news or info.
    "Please remain calm...I may be mad, but I am a professional." --Mad Scientist

Page 50 of 56 FirstFirst ... 404849505152 ... LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •