HOWTO: Juniper Network Connect on amd64 with firefox-bin

NewBlackDak · Last edited by NewBlackDak on Thu Feb 28, 2008 5:18 am; edited 3 times in total

Network connect has Linux "support", but only for RedHat. I thought I would try and get it working in Gentoo since my company had moved to it.
Installing all the needed peices
1. Ensure you have TUN/TAP support install. It is a kernel option.

static_k · n00b Joined: 10 Oct 2005 Posts: 73 Location: NY

I followed these directions and it worked perfectly.
Thanks for figuring it out!!!

I was running an Intel core duo for those who think it's only for amd64.

slinkp · n00b Joined: 22 May 2003 Posts: 25

Seems to work here on a 32-bit pentium M laptop.
But for that platform, I skipped all the Java steps and just did:

cshobe · n00b Joined: 07 Dec 2007 Posts: 10

This page is looking pretty sketch: http://gentoo-wiki.com/HOWTO_Juniper_SSL_Network_Connect_VPN

So after poking around for a while wondering why that page recommended stuff like installing openmotif (which seems to be necessary with NC 1.0, but not NC 1.2), I was happy to find this post. But sadly, I'm still stuck.

What I've found is that the symlinks for libssl and libcrypto *do* make a noticeable difference, as without them, the java GUI says "Connecting to NCSVC", then immediately fails.

Now, as far as I've been able to get on this, it will say "Connecting to NCSVC" for a moment, then it will change and say "Connecting to IVE", and then it will fail.

What is IVE?
Any ideas on things I can try?

I'm on an Intel Core 2 machine, and am trying using mozilla-bin (32-bit) with Sun 32bit JRE 1.6.0.03 [emul-linux-x86-java-1.6]. I've found that if I change the system-vm to Sun JRE 1.6.0.03 [sun-jre-bin-1.6], then the GUI fails before getting to the IVE connection just as when the lib{ssl,crypto} symlinks were missing.

cshobe · n00b Joined: 07 Dec 2007 Posts: 10

Some more details:

casey@uppsala.osss.net:/home/casey/.juniper_networks/network_connect
$ ./ncdiag -A
NC Diagnostics for Linux.
Version 1.0.
Release Date/Time: Jun 22 2007 13:26:56
+==============================================================================+
| Tests: | Results: |
+==============================================================================+

o NC Installation Check Failed
o NC Diagnostics
NC Service Not Running
NC Driver Test Passed
NC Tunnel Test Not established

o Host Details
Hostname uppsala
Domainname hi5.com
IP Routing Enabled No
IP Loopback test Passed
Nameserver Details
127.0.0.1 Ping Passed
Gateway Ping Test
192.168.64.4 Ping Passed

o Network Connection Diagnostics

Interface: eth0
IP Address: 192.168.64.119
Netmask: 255.255.255.0
Broadcast: 192.168.64.255
MTU: 1500

Interface: lo
IP Address: 127.0.0.1
Netmask: 255.0.0.0
Broadcast: 127.255.255.255
MTU: 16436
o Route Info

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.64.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.64.4 0.0.0.0 UG 0 0 0 eth0

Finished running tests
+==============================================================================+

casey@uppsala.osss.net:/home/casey/.juniper_networks/network_connect
$ cat version.txt
Version: 1.2

cshobe · n00b Joined: 07 Dec 2007 Posts: 10

cshobe · n00b Joined: 07 Dec 2007 Posts: 10

Well, I finally figured out my issue. In short, the Juniper software uses hard linking between /tmp and /etc to replace files, and hard links cannot traverse filesystems. If you have both directories on a single partition you should be fine. However since this is closed source software, if you do have multiple filesystems you're pretty much screwed:
http://www.juniperforum.com/index.php/topic,5454.0.html

Also, I made a handy CLI script so that I don't have to use firefox and java anymore:
http://www.juniperforum.com/index.php/topic,5455.0.html
_________________
--
Casey Allen Shobe

someguy · Posted: Wed Dec 19, 2007 6:03 am Post subject:

east texas ? dallas i take it ?
same here
_________________
print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<>
)]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`
while [ 1 ] ; do echo "*" | telnet ip.of.print.er 9100 ; done

jbo5112 · n00b Joined: 16 Nov 2005 Posts: 19

The company I'm dealing with just upgraded (or somehow changed) their Juniper VPN at the same time I switched to doing my development on my workstation at home. With the old version, I didn't have any trouble setting this up in the office under 32-bit Ubuntu, but now I can't get it to work on 32-bit Ubuntu or 64-bit Gentoo. I'm not sure if it still works at the office. All I get is an error that my platform isn't supported.

So far my experiences with VPN's have been like a kick in the nads. Do they over any advantage over something like ssh, other secure protocols or even remote desktop?

NewBlackDak · Posted: Thu Feb 28, 2008 5:18 am Post subject:

I just made some edits, because it got easier with emul-linux-x86-java package.
_________________
Gentoo systems.
X2 4200+@2.6 - Athy
X2 3600+ - Myth
UltraSparc5 440 - sparcy

colschmi · n00b Joined: 09 Jun 2008 Posts: 8 Location: Chicago, IL

Thank you so much! Worked like magic. And, a personal comment, this is my best tuned gentoo install yet. Everything works as it should! Thanks to the forums, and the wiki!

xmaes · n00b Joined: 13 Aug 2008 Posts: 69 Location: Madrid

Is it still working ?

I am trying to connect my gentoo laptop to my work vpn with juniper.
I am able to enter the user name password and it looks like it get connected (i get my company web page) but i dont get the java applet and i cant browse any network ressource.

Thanks,

Xavier

static_k · n00b Joined: 10 Oct 2005 Posts: 73 Location: NY

xmaes · n00b Joined: 13 Aug 2008 Posts: 69 Location: Madrid

yes i did follow the instruction as well as using this script

Can it be that linux client are not allowed to connect ?

When i use FF to loggin before trying to open network connection, i get a web page with "host checker" turning red ( which normaly turn green on my windows PC) the i get the welcome page from my company.

But it doesnt create any extra connection with an ip from my company network.

If i use the script, i cant connect i get an error "failed to connect ive error 10"

Thank you,

Xavier

static_k · n00b Joined: 10 Oct 2005 Posts: 73 Location: NY

Weird. I don't see that host checker with mine. I have the company login bookmarked. After I enter my credentials a popup window comes up that says it's loading Network Connect from an applet. It's spawns the Network Connect java client and then that popup window closes out.

Did you check popup blocker stuff?

xmaes · n00b Joined: 13 Aug 2008 Posts: 69 Location: Madrid

Hi, Thanks, :-)

Well i never had a popup using juniper. After entering my user name and password i get a window with the following message

static_k · n00b Joined: 10 Oct 2005 Posts: 73 Location: NY

Where did you find that log file? I can post mine and we can check differences.

xmaes · n00b Joined: 13 Aug 2008 Posts: 69 Location: Madrid

in your home directory

static_k · n00b Joined: 10 Oct 2005 Posts: 73 Location: NY

Yeah I don't have any of those host checker log files. My company must not be doing that. Hope it's not gonna happen.

Anyway, yes I do have an extra connection:

xmaes · n00b Joined: 13 Aug 2008 Posts: 69 Location: Madrid

Hello,

I got an answer from my it department saying that it should work but i am on my own.
Anyway i gave a try in a VM to ubuntu 32 bits and it did work, i have got a tun0 interface with an ip from my company network but i am not able to browse the internet.

So i suppose i have a problem with my java setup in my gentoo box but first i d like to solve my proxy problem.
On the intranet it says that i should configure FF as no proxy.

In windows i had a look and as soon as it connects to the network a new page open that asked me which as me if i want to run a script to change my proxy settings.
When i am done with that i had a look, it changed the proxy settings to "automatic proxy configuration url" that point to a pac file
http://en.wikipedia.org/wiki/Proxy_auto-config

In linux the proxy settings are not change automatically.
I tried to transfer the pac file from windows to my linux box and i specified the file in the proxy settings but it doesnt do the trick.
I suppose the host checker is responsible for the configuration....

Anybody has experience in using juniper with a proxy configured through pac files ?
Are they suppose to be platform independent ?

Thanks,

Xavier