2009-04-28

Howto: Juniper SSL VPN in Ubuntu.

In Ubuntu 9.04 I had no problems at all with Juniper SSL it self, worked out-of-the-box. But since the last Juniper software update they "looked" access from non Windows clients for VPN connections.

For older versions of Ubuntu ( 8.10 - 6.10 ) please read on.


This walk-through have been tested in Ubuntu 8.10 - 6.10, assume that your system is up and running online.

A lot of hacking to get this "so so" working, still not 100%, but got the vpn up and running.


Update 2009-03-03:
My company updated Juniper server software so now some parts of it (mostly the VPN function) is not available for FireFox and Linux users (checks for Windows and IE). And I can't load the page after login at all. But I found a workaround that gives me some functionality;

$ su
Password:
# gksu firefox https://URL to the site/ &






Old Tests.....


First we need to set 'su' password, ....

sudo passwd


Install dependancies:

sudo apt-get install openssl


sudo apt-get install sun-java6-jre sun-java6-plugin sun-java6-fonts


(careful in 8.10 & 8.04, you may have OpenJDK Java Runtime or Icedtea Java Plugin installed, it will conflict and not work, you need to remove)


sudo apt-get install libmotif3


sudo apt-get install libstdc++2.10-glibc2.2


sudo apt-get install lesstif2






In Ubuntu 8.10 tests;

sudo apt-get install openssl
sudo apt-get install libmotif3
sudo apt-get install libstdc++2.10-glibc2.2

sudo ln -s /usr/lib/libssl.so.0.9.7 /usr/lib/libssl.so.2
sudo ln -s /usr/lib/libcrypto.so.0.9.7 /usr/lib/libcrypto.so.2

# Add /usr/X11R6/lib to ld.so.conf (new line)
sudo gedit /etc/ld.so.conf
sudo ldconfig


---


* login into your Juniper SSL VPN homepage
* Click the Network Connect Start button
* A popup will appear saying “Loading Network Connect Client. Please wait”
* An xterm window will appear with the title installNC.sh which will prompt you for a password.
* CTRL-D at the password prompt and when asked to try again answer ‘N’.
* Logout from the SSL VPN homepage and close Firefox/Mozilla. I did this and then went to the next steps, but it didn’t matter. I then did the steps again and just left Mozilla open
* From a shell do the following…


---

$ cd ~/.juniper_networks
cd network_connect
chmod 744 *.sh
chmod 744 ncu* # <--- this differs sudo chmod 6711 ncsvc sudo chown root:root ncsvc Still don't work? Other tips. wget mirrors.kernel.org/ubuntu/pool/universe/g/gcc-2.95/libstdc++2.10-glibc2.2_2.95.4-24_i386.deb sudo dpkg --install wget libstdc++2.10-glibc2.2_2.95.4-24_i386.deb mad-scientist juniper page

...

3 comments:

  1. I used this recipe for Debian Etch (!!)
    Changes were:

    I installed java from sun explicitly.
    I had to put the plugin into /usr/lib/iceweasel/plugins.

    I did not need libmotif3

    I did use this part of the hack:
    ln -s /bin/true /usr/local/bin/rpm

    Thanks so much for documenting this!!
    I wish we had as useful help from my
    corporate help desk!

    ReplyDelete
  2. Anyone having any luck with Juniper Network Connect under Ubuntu 8.10?

    ReplyDelete
  3. I have it up en running on 8.10, and helped a colleague the other day to sett it up, and all we used was the info above (updated some info)...

    ReplyDelete