[cisco VPN] Can't build kernel module with 2.6.9-ARCH

LB06 · 2004-10-29 18:13:58

I need to setup a vpn tunnel to my university in order to gain acces to their resources and be able to surf when I am on the campus. With 2.6.8.1 I used the Cisco VPN client 4.0.5 k9. After my upgrade to 2.6.9 I had to rebuild the module, but now it fails to build. Anyone knows how to solve this? Or does anyone know another vpn client that is compatible with Cisco. This piece of software is essential to me. Please help. Here is the output:

Cisco Systems VPN Client Version 4.0.5 (Rel) Linux Installer
Copyright (C) 1998-2001 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms.


Directory where binaries will be installed [/usr/local/bin] /usr/bin

Automatically start the VPN service at boot time [yes] no

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.

For RedHat 6.x users these files are installed in /usr/src/linux by default
For RedHat 7.x users these files are installed in /usr/src/linux-2.4 by default
For Suse 7.3 users these files are installed in /usr/src/linux-2.4.10.SuSE by default

Directory containing linux kernel source code [/lib/modules/2.6.9-ARCH/build]

* Binaries will be installed in "/usr/bin".
* Modules will be installed in "/lib/modules/2.6.9-ARCH/CiscoVPN".
* The VPN service will *NOT* be started automatically at boot time.
* Kernel source from "/lib/modules/2.6.9-ARCH/build" will be used to build the module.

Is the above correct [y] y

Making module
make -C /lib/modules/2.6.9-ARCH/build SUBDIRS=/home/luk/sources/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.9-ARCH'
  CC [M]  /home/luk/sources/vpnclient/interceptor.o
/home/luk/sources/vpnclient/interceptor.c: In function `add_netdev':
/home/luk/sources/vpnclient/interceptor.c:59: sorry, unimplemented: inlining failed in call to 'supported_device': function body not available
/home/luk/sources/vpnclient/interceptor.c:245: sorry, unimplemented: called from here
make[2]: *** [/home/luk/sources/vpnclient/interceptor.o] Error 1
make[1]: *** [_module_/home/luk/sources/vpnclient] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.9-ARCH'
make: *** [default] Error 2
Failed to make module "cisco_ipsec.ko".

phrakture · 2004-10-29 18:25:01

what about FreeS/WAN?

LB06 · 2004-10-29 18:31:04

Btw I know about vpnc, but it it says:

vpnc: can't open /dev/net/tun, check that it is either device char 10 200 or (with DevFS) a symlink to ../misc/net/tun (not misc/net/tun!!!): No such file or directory
vpnc: can't initialise tunnel interface: No such file or directory

I think I need to load some kernel module to enable tunneling? Any idea, somebody? Dp, aren't you also forced to use the Cisco VPN client? Does it work for you with linux 2.6.9?

edit:
Hmm, I modprobed tun and tried it again. Now it says starting vpnc on pid x or something. But I still don't have a vpn connection. ifconfig does return an external IP, however.

LB06 · 2004-10-29 18:36:36

phrakture wrote:

what about FreeS/WAN?

Isn't freeswan way too advanced for a simple vpn tunnel? It just looks so... complicated.

phrakture · 2004-10-29 19:14:53

im going to try and setup vpnc myself - see if this helps:
http://nic.phys.ethz.ch/readme/96

phrakture · 2004-10-29 20:08:21

make the tun0 device node (not done automagically):

mkdir /dev/net
mknod /dev/net/tun c 10 200

add the alias (/etc/modprobe.conf):

alias char-major-10-200 tun

enable ip-forwarding:

echo "1" > /proc/sys/net/ipv4/ip_forward

now rerun vpnc-connect...

phrakture · 2004-10-29 20:32:02

that does it for me, but you'll get these messages:

Oct 29 15:20:38 animus wait_for_sysfs[29323]: either wait_for_sysfs (udev 042) needs an update to handle the device '/class/net/vpn0' properly (no device symlink) or the sysfs-support of your device's driver needs to be fixed, please report to <linux-hotplug-devel@lists.sourceforge.net>
Oct 29 15:20:38 animus net.agent[29326]: how do I bring interfaces up on this distro?
Oct 29 15:20:38 animus net.agent[29326]: add event not handled

you should be able to safely ignore them

I, however, am stumped connecting to a windows VPN - anyone have any ideas?

LB06 · 2004-10-29 20:57:10

/dev/net/tun is created automagically here when I modprobe tun. I think I know what the problem was.

pacman -Ql vpnc:

vpnc /usr/
vpnc /usr/sbin/
vpnc /usr/sbin/vpnc

I used the PKGBUILD listed on this bbs somewhere. I built it a while ago and I didn't bother trying to build it again. It seems that I am missing some files.

Btw thank you very much for your help! I will try to build it myself and try it again after I got some sleep

phrakture · 2004-10-29 21:11:07

pkgname=vpnc
pkgver=0.2
pkgrel=1
pkgdesc="Linux Client for Cisco3000 VPN Concentrator"
url="http://www.unix-ag.uni-kl.de/~massar/vpnc/"
depends=('iproute')
makedepends=('libgpg-error' 'libgcrypt')
source=($url$pkgname-$pkgver-rm+zomb-pre9.tar.gz)

build()
{
  cd $startdir/src/$pkgname-$pkgver-rm+zomb-pre9
  make || return 1

  mkdir -p $startdir/pkg/usr/bin
  install -m755 {vpnc,vpnc-connect,vpnc-disconnect} $startdir/pkg/usr/bin

  mkdir -p $startdir/pkg/etc
  install -m 644 vpnc.conf $startdir/pkg/etc

  mkdir -p $startdir/pkg/usr/man/man8
  install -m 644 vpnc.8 $startdir/pkg/usr/man/man8
}

i'm curious as to how your tun device is created automatically... i'll do some testing
are you going to be connecting to a windows vpn? I cannot seem to connect... it requires 2 usernames/passwords - i'll check with the admin and see what he has to say - but it's a windows VPN... maybe theres soemthing I don't know

$ pacman -Ql vpnc
vpnc /etc/
vpnc /etc/vpnc.conf
vpnc /usr/
vpnc /usr/bin/
vpnc /usr/bin/vpnc
vpnc /usr/bin/vpnc-connect
vpnc /usr/bin/vpnc-disconnect
vpnc /usr/man/
vpnc /usr/man/man8/
vpnc /usr/man/man8/vpnc.8.gz

LB06 · 2004-10-29 21:28:46

I modified the pkgbuild posted here by someone (thank you!) so it includes all relevant files (meaning also vpnc-connect and vpnc-disconnect and vpnc.conf).

pkgname=vpnc
pkgver=0.2
pkgrel=1
pkgdesc="Client for Cisco3000 VPN Concentrator"
url="http://www.unix-ag.uni-kl.de/~massar/vpnc/"
license="GPL"
depends=(libgcrypt)
source=(http://www.unix-ag.uni-kl.de/~massar/vpnc/vpnc-0.2-rm+zomb.1.tar.gz)
md5sums=(ded67de747874c4245ed8405146dc94a)

build() {
  cd $startdir/src/vpnc-0.2-rm+zomb.1

  # We want the CFLAGS specified in makepkg.conf to be used
  mv Makefile Makefile.old
  sed -e 's/-W -Wall -O -g/$(MYCFLAGS)/g' -e 's/LDFLAGS=-g /LDFLAGS=/g' Makefile.old > Makefile
  export MYCFLAGS=$CFLAGS

  make
  install -d $startdir/pkg/usr/sbin
  install vpnc $startdir/pkg/usr/sbin
  install vpnc-connect $startdir/pkg/usr/sbin
  install vpnc-disconnect $startdir/pkg/usr/sbin
  install -d $startdir/pkg/etc
  install vpnc.conf $startdir/pkg/etc
}

Guess what, it works

I can reproduce my steps.
- makepkg
- pacman -A vpnc-xxxxxx.tar.gz
- add tun to the daemons array in rc.conf
- Modify /etc/vpnc.conf
- vpnc-connect

LB06 · 2004-10-29 21:40:28

Well, in order to connect to my uni I need 2 combi's. A groupname/grouppasswd combo and a username/password combo. The group thing is probably available to anyone (search the site of your university) and your own username/password is known only to you. This was also the case when I used Cisco's own vpn client.

Hope this helps.

edit:
Your PKGBUILD seems to actually be better and it worked for me, so thank you very much

Arch Linux

#1 2004-10-29 18:13:58

[cisco VPN] Can't build kernel module with 2.6.9-ARCH

#2 2004-10-29 18:25:01

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#3 2004-10-29 18:31:04

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#4 2004-10-29 18:36:36

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#5 2004-10-29 19:14:53

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#6 2004-10-29 20:08:21

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#7 2004-10-29 20:32:02

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#8 2004-10-29 20:57:10

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#9 2004-10-29 21:11:07

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#10 2004-10-29 21:28:46

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

#11 2004-10-29 21:40:28

Re: [cisco VPN] Can't build kernel module with 2.6.9-ARCH

Board footer