Comments on: VPN on Ubuntu Linux with Juniper Network Connect

By: gosbeau

gosbeau — Thu, 08 Jul 2010 07:17:44 +0000

Hi all,
I use Ubuntu 10.4 (Lucid Lynx) 64 bits, with Firefox (Latest version).
I’ve followed all the steps above (Which are very clear ! Thanks).
However i still cannot connect.
I did:

1- sudo apt-get install ia32-sun-java6-bin
2- update-alternatives –set java /usr/lib/jvm/ia32-java-6-sun/jre/bin/java
3- export JDK_HOME=/usr/lib/jvm/ia32-java-6-sun (added in junipernc)
….. Now when I run junipernc from a console, I am prompted the server .. then the username …… and nothing else ! In the console, the junipernc command does not ends….. All I can do is CTRL+C.
At this step if I try to connect to my jobs’ vpn, using the brower…… I can see from the java debug console that it stills tries to use the 64bits version of Java.
Here is the command:
/usr/lib/jvm/java-6-sun-1.6.0.20/jre/bin/java “-classpath” “/home/gosbeau/.juniper_networks/network_connect/NC.jar” “NC” “-h” “webportal.lloydstsb.ch” “-L” “0″ “-l” “0″ “-n” “” “-t” “” “-x”

I tried to remove anything, and repeated the procedure again (Even added with JDK_HOME=/usr/lib/jvm/ia32-java-6-sun as environment variable set in my .profile)…. but still the same.

Any idea would be really appreciated.

Regards,

By: TN

TN — Wed, 10 Mar 2010 17:46:33 +0000

Cannot find the realm value. I also have a dropdown on my login page. We have an entire portal, not just for Network Connect but access to invididual apps as well.

(select size=”1″ onchange=”javascript:changeContent();” name=”realm” id=”realmTxt”)

(option value=”RSA SecurID-login (Description1)”)RSA SecurID-login (Network1)(/option)

(option value=”RSA SecurID-login (Description2)”)RSA SecurID-login (Network2)(/option)

(/select)
(/td)

(/tr)

So, I tried REALM=”RSA SecurID-login (Network1)” which is what I normally choose but I cannot connect with that as my realm.

20100310183807.662032 ncsvc[p7967.t7967] dsclient.error state login failed, error 104 (dsclient.cpp:290)
20100310183807.662315 ncsvc[p7967.t7967] ncapp.error Failed to authenticate with IVE. Error 104 (ncsvc.cpp:192)

(erased special characters that I cannot print in this comment box )

By: DrDave

DrDave — Wed, 10 Mar 2010 03:53:22 +0000

I just had this problem of “unable to connect to IVE” pop up. The certificate changed on me so I had to reload it. There is a script in the juniper directory for getting the x500 certificate from your site. I had the cert file write protected so it wouldn’t update.

By: Ashok

Ashok — Sat, 19 Dec 2009 19:27:36 +0000

great … I got this to work with Karmic Koala 64 bit as well…. cheers
Ashok

By: Yinon

Yinon — Mon, 12 Oct 2009 20:15:38 +0000

Matt, did you start it the first time by browsing to your company’s site by opera browser ? (has Java capabilities built-in) ?

By: Matt Park

Matt Park — Thu, 10 Sep 2009 23:41:26 +0000

Benjamin,
I’m running Ubuntu 9.04 x64 as a Sun VirtualBox Guest under a Windows 7 Host. I can get Network Connect to work under Windows 7, but VirtualBox does not successfully pass the traffic through the VPN. I followed the instructions here and on the mad-scientist.us page and also read a lot on the ubuntu forums and I finally got the app to come up. However, I immediately get “unable to connect to IVE” and the connection never succeeds. Nothing is ever easy. I’ve got no clue what IVE is. Can you shed any light on the subject? I though I saw the solution somewhere, but couldn’t find it when I actually got the error.

By: Austin

Austin — Sun, 06 Sep 2009 23:15:01 +0000

Okay, it erased the HTML code I had for the dropdown example. Here it is again, with replaced by ). Hopefully it will post this time:

(select size=”1″ name=”realm”)
(option value=”realm1″)First Realm(/option)
(option value=”realm2″)Second Realm(/option)
(/select)

In this example there are two realms: realm1 and realm2.

By: Austin

Austin — Sun, 06 Sep 2009 23:10:37 +0000

Thank you so much Benjamin! Thanks to your post I finally have Juniper Network Connect working!

I thought I should add something I determined about Issue #2, the Realm. On my university’s VPN webpage, we have a dropdown list labeled “Home Folder Server.” It turns out that this is, in fact, the realm. Looking around on the internet, it looks like some folks see “Realm” or something different, but no matter the label, the item in the dropdown is probably your realm. Since it’s a dropdown, the html code doesn’t look like you have in your post, rather, it looks like:

First Realm
Second Realm

In this example there are two realms: realm1 and realm2.

Another tip I found is to launch the program with the command nohup:
nohup /home/austin/bin/junipernc
This lets you close the terminal window without killing the actual network connect program. I’ve actually made an entry in my application list that runs this command, so I don’t have any other windows besides the Java one.

Thanks again, and I hope this comment helps someone!

By: Sriraman

Sriraman — Thu, 23 Jul 2009 17:31:55 +0000

Thanks for your effort and time!

By: benjamin

benjamin — Tue, 21 Jul 2009 21:17:09 +0000

Very glad I could be of help to you!