Cisco vpn-client installation not working on FC5

Dattilo · #1 10th October 2006, 10:42 PM

I'm having trouble to install the vpn-client (vpnclient-linux-4.7.00.0640-k9.tar.gz). I'm just installed linux on my laptop so I'm new to this, anyway I red the manuals and did following:

1. Installing kernel source (not really sure waht that does

)
yum install kernel-devel-2.6.16-1.2111_FC5
2. Unpack Cisco vpn client:
tar zxf vpnclient-linux-4.7.00.0640-k9.tar.gz
3. applyed patche I saw in this forum:
patch -p0 < patch48.txt
4. Ran the installation program:
./vpn_install

Messages (shortly before the error):

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.15-1.2054_FC5/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "" will be used to build the module.

Is the above correct [y]

Making module
./driver_build.sh
Cisco Systems VPN Client Version BUILDVER_STRING
Copyright (C) 1998-2001 Cisco Systems, Inc. All Rights Reserved.

usage: ./driver_build.sh 'kernel_src_dir'

'kernel_src_dir' is the directory containing the linux kernel source

Failed to make module "cisco_ipsec.ko".

I tryed to follow the instruction in diffrent forums but I still got the same problem.
Can anyone help? Thank you.

Beside: I also tryed it with NetworkManager but I haven't got the group password (only crypted)

marko · #2 11th October 2006, 12:32 AM

Hi
Your problem was that you installed the wrong
version of the kernel development rpm, you
installed the kernel devel package for 2.6.16-1.2111
when you're actually running kernel 2.6.15-1.2054.
I can tell this because the vpn build script diagnosed
your kernel as 2.6.15-1.2054 where it quotes where
the module will be placed.

Code:

Modules will be installed in "/lib/modules/2.6.15-1.2054_FC5/CiscoVPN".

You need to install the right one:

Code:

# yum install kernel-devel-2.6.15-1.2054_FC5

or since 2.6.15-1.2054 is really quite old for FC5,
update the kernel AND the kernel-devel at the same
time (are you doing yum updates on that host?):

Code:

# yum update kernel kernel-devel

Notice that doesn't say what one, it just grabs the newest
one (which I think currently for FC5 is: 2.6.17-1.2187_FC5 )

Mark

Dattilo · #3 11th October 2006, 09:06 AM

Hi Mark, thanks for your replay.

Yes I using yum (but most of the time yum extender), so I did now the update with:

Code:

# yum update kernel kernel-devel

I don't know why it didn't grab the newest one, but at least it grabed the one you were telling:

Code:

[root@localhost vin]# uname -rm
2.6.15-1.2054_FC5 i686

so I tried again:

Code:

[root@localhost vpnclient]# ./vpn_install
Cisco Systems VPN Client Version 4.7.00 (0640) Linux Installer
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms.


Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.

For RedHat 6.x users these files are installed in /usr/src/linux by default
For RedHat 7.x users these files are installed in /usr/src/linux-2.4 by default
For Suse 7.3 users these files are installed in /usr/src/linux-2.4.10.SuSE by de fault

Directory containing linux kernel source code []/usr/src/kernels/2.6.17-1.2187_F C5-i686/

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.15-1.2054_FC5/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/usr/src/kernels/2.6.17-1.2187_FC5-i686/" will be used to build the module.

Is the above correct [y]

Making module
make -C /usr/src/kernels/2.6.17-1.2187_FC5-i686/ SUBDIRS=/etc/vpnclient modules
make[1]: Entering directory `/usr/src/kernels/2.6.17-1.2187_FC5-i686'
  CC [M]  /etc/vpnclient/linuxcniapi.o
/etc/vpnclient/linuxcniapi.c: In Funktion »CniInjectReceive«:
/etc/vpnclient/linuxcniapi.c:281: Fehler: redeclaration of »timecount« with no linkage
/etc/vpnclient/linuxcniapi.c:279: Fehler: previous declaration of »timecount« was here
/etc/vpnclient/linuxcniapi.c: In Funktion »CniInjectSend«:
/etc/vpnclient/linuxcniapi.c:401: Fehler: redeclaration of »timecount« with no linkage
/etc/vpnclient/linuxcniapi.c:399: Fehler: previous declaration of »timecount« was here
make[2]: *** [/etc/vpnclient/linuxcniapi.o] Fehler 1
make[1]: *** [_module_/etc/vpnclient] Fehler 2
make[1]: Leaving directory `/usr/src/kernels/2.6.17-1.2187_FC5-i686'
make: *** [default] Fehler 2
Failed to make module "cisco_ipsec.ko".
[root@localhost vpnclient]#

but still not working, any other suggestions? cheers

marko · #4 11th October 2006, 04:44 PM

Dattilo:

You'd ideally like to get the devel headers for the same kernel you already had
because 2.6.15-1.2054 is very old and had some bugs.
it seems your newest kernel is this:

2.6.17-1.2187_FC5

What you've done is back down to the original old FC5 kernel --> 2.6.15-1.2054

I'd suggest you get the kernel devel header rpm for 2.6.17-1.2187_FC5 manually
and install it yourself via rpm, get the rpm :

http://download.fedora.redhat.com/pu...7_FC5.i686.rpm

then as root install it:

su -
<root password>
# rpm -ivh kernel-devel-2.6.17-1.2187_FC5.i686.rpm

now reboot the machine and pick 2.6.17-1.2187 kernel
from the grub menu and boot to it and run the ./vpn_install
script as root like you did before.

This time make sure that the vpn_install script quotes to you the right
source development directory (see where it says "Kernel source from ")
quoted by the script is to the right source area,
which would be

Directory containing linux kernel source code [/lib/modules/2.6.17-1.2187_FC5/build]

because before you had it pointing to the wrong kernel source version
for the kernel you had

If it all works and installs vpn, then edit your grub menu so it defaults
to the 2.6.17-1.2187 kernel because otherwise if you use a different
kernel you can't use vpn. In theory you could install the devel kernel
headers for any number of kernels and compile a vpn module for each
but Cisco didn't setup their code to have a separate directory
for their code (like the "vpnclient" tool ) but maybe that stuff is
generic enough so all the kernels can use just one ? What really
matters is that the cisco-ipsec.ko is unique for each kernel

Another point, there's a newer vpn client, vpnclient-4.8.00.0490 ...
maybe you should try that one too. I use the 4.8.00.0490 version on
FC5.

Mark

Dattilo · #5 12th October 2006, 12:14 AM

Hi Mark, thanks for all the effort.

It didn't work but I found an other way arround. I found a way to decrypt the group password:
http://www.unix-ag.uni-kl.de/~massar/bin/cisco-decode

so I can now use the NetworkManager whitch is much simpler to handle, anyway thanks again you
gave me the right motivation to keep on working with Linux.

Cheers!