Any working package FortiClient for ArchLinux

Nolchetyre · 2020-04-19 12:57:36

Hello, friends!

Have someone get worked FortiClient SSLVPN?

I tried few packages from aur, but
1. 've got segfault from https://aur.archlinux.org/packages/forticlient/
2. https://aur.archlinux.org/packages/openfortigui/ just does not connect
logs with debug show only: sudo: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper

Last edited by Nolchetyre (2020-04-21 15:30:58)

loqs · 2020-04-19 21:08:50

https://aur.archlinux.org/packages/forticlient/
The PKGBUILD has multiple issues such as no dependencies but it is repacking the official binary.

https://aur.archlinux.org/packages/openfortigui/
openfortigui calling sudo to execute openfortigui as root and adding in an sudoers.d snippet to allow that without password seems unnecessarily risky.

Nolchetyre · 2020-04-20 18:00:25

Which dependencies is needed for forticlient? I’ve used ‘ldd’ but nothing strange.

Openforticlient: I’ve started from sudo and add pkcs12 crt - nothing works

Did I am wrong ?

Slithery · 2020-04-20 18:45:28

Nolchetyre wrote:

or configure an askpass helper

So have you tried this?

WorMzy · 2020-04-20 19:35:26

Please change your topic title to one that actually describes your issue: https://wiki.archlinux.org/index.php/Co … ow_to_post

loqs · 2020-04-20 19:38:40

@Nolchetyre
From namcap on forticlient

Checking PKGBUILD
PKGBUILD (forticlient) E: Missing url
PKGBUILD (forticlient) W: Description should not contain the package name.
Checking forticlient-6.0.8.0140-1-x86_64.pkg.tar.zst
forticlient E: ELF files outside of a valid path ('opt/').
forticlient W: ELF file ('opt/forticlient/epctrl') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/fchelper') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/fctsched') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/fmon') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/fortitray') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/fortitraylauncher') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/gui/FortiClient-linux-x64/FortiClient') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/gui/FortiClient-linux-x64/libffmpeg.so') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/gui/FortiClient-linux-x64/libnode.so') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/guichannel.node') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/guimessenger.node') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/libav.so') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/libvcm.so') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/scanunit') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/update') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/vulscan') lacks FULL RELRO, check LDFLAGS.
forticlient W: ELF file ('opt/forticlient/epctrl') lacks PIE.
forticlient W: ELF file ('opt/forticlient/fchelper') lacks PIE.
forticlient W: ELF file ('opt/forticlient/fctsched') lacks PIE.
forticlient W: ELF file ('opt/forticlient/fmon') lacks PIE.
forticlient W: ELF file ('opt/forticlient/fortitray') lacks PIE.
forticlient W: ELF file ('opt/forticlient/fortitraylauncher') lacks PIE.
forticlient W: ELF file ('opt/forticlient/gui/FortiClient-linux-x64/FortiClient') lacks PIE.
forticlient W: ELF file ('opt/forticlient/guichannel.node') lacks PIE.
forticlient W: ELF file ('opt/forticlient/guimessenger.node') lacks PIE.
forticlient W: ELF file ('opt/forticlient/scanunit') lacks PIE.
forticlient W: ELF file ('opt/forticlient/update') lacks PIE.
forticlient W: ELF file ('opt/forticlient/vulscan') lacks PIE.
forticlient W: Directory (var/log/forticlient/vcm_log) is empty
forticlient W: Directory (opt/forticlient/quarantine) is empty
forticlient E: Missing custom license directory (usr/share/licenses/forticlient)
forticlient W: Referenced library 'libxcb.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libnotify.so.4' is an uninstalled dependency
forticlient W: Referenced library 'libX11-xcb.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libXext.so.6' is an uninstalled dependency
forticlient W: Referenced library 'libnode.so' is an uninstalled dependency
forticlient W: Referenced library 'libXi.so.6' is an uninstalled dependency
forticlient W: Referenced library 'libappindicator.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libnspr4.so' is an uninstalled dependency
forticlient W: Referenced library 'libffmpeg.so' is an uninstalled dependency
forticlient W: Referenced library 'libcups.so.2' is an uninstalled dependency
forticlient W: Referenced library 'libgdk_pixbuf-2.0.so.0' is an uninstalled dependency
forticlient W: Referenced library 'libgtk-3.so.0' is an uninstalled dependency
forticlient W: Referenced library 'libXss.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libX11.so.6' is an uninstalled dependency
forticlient W: Referenced library 'libgdk-x11-2.0.so.0' is an uninstalled dependency
forticlient W: Referenced library 'libfontconfig.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libXcursor.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libcairo.so.2' is an uninstalled dependency
forticlient W: Referenced library 'libgdk-3.so.0' is an uninstalled dependency
forticlient W: Referenced library 'libXcomposite.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libXfixes.so.3' is an uninstalled dependency
forticlient W: Referenced library 'libnssutil3.so' is an uninstalled dependency
forticlient W: Referenced library 'libnss3.so' is an uninstalled dependency
forticlient W: Referenced library 'libsmime3.so' is an uninstalled dependency
forticlient W: Referenced library 'libpango-1.0.so.0' is an uninstalled dependency
forticlient W: Referenced library 'libXrandr.so.2' is an uninstalled dependency
forticlient W: Referenced library 'libgconf-2.so.4' is an uninstalled dependency
forticlient W: Referenced library 'libXrender.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libatk-1.0.so.0' is an uninstalled dependency
forticlient W: Referenced library 'libpangocairo-1.0.so.0' is an uninstalled dependency
forticlient W: Referenced library 'libasound.so.2' is an uninstalled dependency
forticlient W: Referenced library 'libXdamage.so.1' is an uninstalled dependency
forticlient W: Referenced library 'libXtst.so.6' is an uninstalled dependency
forticlient W: Referenced library 'libgtk-x11-2.0.so.0' is an uninstalled dependency
forticlient W: Unused shared library '/usr/lib/librt.so.1' by file ('opt/forticlient/gui/FortiClient-linux-x64/FortiClient')
forticlient W: Unused shared library '/usr/lib/librt.so.1' by file ('opt/forticlient/gui/FortiClient-linux-x64/libffmpeg.so')
forticlient W: Unused shared library '/usr/lib/librt.so.1' by file ('opt/forticlient/gui/FortiClient-linux-x64/libnode.so')
forticlient W: Unused shared library '/usr/lib64/ld-linux-x86-64.so.2' by file ('opt/forticlient/gui/FortiClient-linux-x64/libnode.so')
forticlient W: Description should not contain the package name.
forticlient E: Dependency glib2 detected and not included (libraries ['usr/lib/libgmodule-2.0.so.0', 'usr/lib/libgobject-2.0.so.0', 'usr/lib/libglib-2.0.so.0', 'usr/lib/libgio-2.0.so.0'] needed in files ['opt/forticlient/gui/FortiClient-linux-x64/FortiClient'])
forticlient E: Dependency hicolor-icon-theme detected and not included (needed for hicolor theme hierarchy)
forticlient E: Dependency dbus detected and not included (libraries ['usr/lib/libdbus-1.so.3'] needed in files ['opt/forticlient/gui/FortiClient-linux-x64/FortiClient'])

It could well be you have packages already installed providing all the dependencies but the PKGBUILD is meant to ensure that rather than leaving it to chance.

Edit:
Noelchetyre is your user in the sudo group? https://github.com/theinvisible/openfor … enfortigui

Last edited by loqs (2020-04-20 21:38:48)

Nolchetyre · 2020-04-22 09:16:57

Slithery wrote:

Nolchetyre wrote:
or configure an askpass helper
So have you tried this?

Yup, but I use certificate authentication and it doesn't help me
Openfortigui still got error:
ERROR: Could not authenticate to gateway (No cookie given).
I guess that's why my certificate has a password protection.

WorMzy wrote:

Please change your topic title to one that actually describes your issue

Thanks, done.

loqs,
thanks for listing dependencies

loqs wrote:

Noelchetyre is your user in the sudo group? https://github.com/theinvisible/openfor … enfortigui

I'm in group wheel

forticlientsslvpn 4.4.2336-1
I tried to use https://aur.archlinux.org/packages/forticlientsslvpn/ and it connects out of box (I thought that version 4.4 was deprecated).
Thanks for help, mates.

loqs · 2020-04-22 11:14:47

Nolchetyre wrote:

loqs wrote:
Noelchetyre is your user in the sudo group? https://github.com/theinvisible/openfor … enfortigui
I'm in group wheel

openfortigui uses the sudo group. The PKGBUILD does not create the group or change the config to another group or print a message that the user is expected to be in the group sudo.

%sudo  ALL=NOPASSWD:SETENV: /usr/bin/openfortigui

Arch Linux

#1 2020-04-19 12:57:36

Any working package FortiClient for ArchLinux

#2 2020-04-19 21:08:50

Re: Any working package FortiClient for ArchLinux

#3 2020-04-20 18:00:25

Re: Any working package FortiClient for ArchLinux

#4 2020-04-20 18:45:28

Re: Any working package FortiClient for ArchLinux

#5 2020-04-20 19:35:26

Re: Any working package FortiClient for ArchLinux

#6 2020-04-20 19:38:40

Re: Any working package FortiClient for ArchLinux

#7 2020-04-22 09:16:57

Re: Any working package FortiClient for ArchLinux

#8 2020-04-22 11:14:47

Re: Any working package FortiClient for ArchLinux

Board footer