Juniper SSL VPN Client on Linux

Introduction

Juniper SSL/VPN for Linux users
It's reached the point where we're happy to admit to its existence on the OpenConnect web site: After about a week of trying in vain, I came across the below post on Ubuntu Forums that is a simple fix for the problem. The tar files were downloaded and extracted to their respective download folders. I installed it right over the Windows XP partition I had been saving for absolutely no sensible reason. I tried the same based on your instructions and they work fine. Additionally, if I go to about: Having downloaded the relevant file for my computer, I needed to run it with administrative permissions.

1. Install the pre-requisite software: Java 6 Runtime


For more details, refer KB article KB". Please install 32 bit Java and update alternatives links using update-alternatives command. For some odd reason, it seems the You could try the suggestion in this post: Juniper setup on First run with Network Connect on My NC version is 7. I did have all the libraries installed and openjdkjre: Digging a little bit deeper revealed that Network Connect is using update-alternatives listing to decide if bit jre is installed.

Just for completeness, as well as having to install a bit JRE, I also had to follow the info here: I must already have done this on This fixed the problem. I just set up a VPN connect to juniper using MadScientist's msjnc script that wraps around a binary ncsvc from the juniper linux client.

The ncsvc binary does not require java at all, so this is somewhat the neatest solution I could find. For me, it was as follows:. Try here if you need more help: So, make sure you have xterm installed! You will almost certainly have this unless you compiled your own kernel, in which case you will know what you are doing anyway! The client creates some files in. For me, that was all there was to it. It then ran the Java application, asked me a couple of times to confirm that I was willing to run the application, and then I was in.

Got the same error what I received from CentOS. Just installed JRE and set plugin to Firefox. Ash for bringing this to my attention in the comments. The approach in the linked forum post is much much easier to implement.

And a special shout out to dvo over at ubuntuforums. I received an email from a nice fellow, also named Scott, who produced some code to automate this process a bit.

With his permission I am sharing the link to his Google Code project here: It just worked and it worked very well. Er, not so fast. And to top it off, Unbuntu 9. It went quite well. I installed it right over the Windows XP partition I had been saving for absolutely no sensible reason. So I put on my hacker hat and started digging. Starting, of course, with a Google search that turned me onto a nice solution that some other gentleman had worked out.

We use a two-phase auth scheme and this only supports a one phase. We need a username, password, and RSA token. The fortunate part is that his script really identified all of the key pieces so I could eventually solve the puzzle.

In a bit Linux system this works wonderfully well. In a bit Linux system not so much. It pretty much just chokes when the dynamic linker tries to pull in a file called libncui. By now you are either very bored or you are thinking, well hey, why not just run the application and give the DSID! If so, then you are pretty much on the same page as I was at the time.

It must be providing that DSID right? The ncsvc application actually does provide some command line switches that are really useful. Notice, there is a -p for password? There is more to it than just ncsvc. Quite a bit more. Here is the listing:.

Some shell scripts that prove mostly useless and a couple of logs containing anything but useful information. The files that look interesting are ncsvc obviously , NC.

I figure I could jar xf it, javap all of the class files and see if they led me down any interesting paths, I could try to run it with java -jar NC. More command line switches, and they look like this:.

Your Answer

Leave a Reply