Why another step-by-step recipe? Well, none of the ones available worked for me on Linux Mint13 64bit, so here’s a quick rundown of what you need to do in order to connect to your juniper networks vpn gateway using Linux Mint \/ Ubuntu 64bit and your SecureID token (I cannot test any other methods).<\/p>\n
For the impatient, here’s a list of the required steps:<\/p>\n
Need more info? Proceed at your own risk! \ud83d\ude09<\/p>\n
Remove \/ rename any previous installation from your home directory, changing to your home directory first:<\/p>\n
cd\r\nmv .juniper_networks backup_juniper_networks<\/pre>\nMake sure you are using Firefox for the next step with the java plugin enabled and “xterm” installed on your system (ia32-libs are required so that your system can run 32bit binaries):<\/p>\n
sudo apt-get install xterm ia32-libs<\/pre>\nThe Gritty Details<\/h2>\n
In firefox, type “about:plugins” in the browser bar and make sure the java plugin stuff comes up.<\/p>\n
Fire up your browser and go to your regular VPN login page to log in, using your secureid and token like you would on Windows.<\/p>\n
Download & install the juniper networks software as usual, allow the java executable to run. (an xterm will come up asking you for your password). At least this much seemed to work out of the box for me.<\/p>\n
If everything goes well, you’ll find a new .juniper_networks directory in your home directory.<\/p>\n
Change into that directory and install a 32bit JDK from java.sun.com. I used this one:<\/p>\n
<\/p>\n
cd .juniper_networks\r\n\r\nwget\u00a0http:\/\/download.oracle.com\/otn-pub\/java\/jdk\/7u17-b02\/jdk-7u17-linux-i586.tar.gz<\/a><\/pre>\n<\/p>\n
If wget doesn’t work, point your browser to java.sun.com and download the file manually, then move the tar archive to the .juniper_networks-Folder once the download is complete.<\/p>\n
Extract the tar.gz file in your .juniper_networks directory:<\/p>\n
tar xvzf\u00a0jdk-7u17-linux-i586.tar.gz<\/a><\/pre>\nRename it to something like “java32” or thereabouts:<\/p>\n
mv jdk-7u17-linux-i586 java32<\/pre>\nPrepend the new jdk “bin” directory to your PATH:<\/p>\n
export PATH=$HOME\/.juniper_networks\/java32\/bin:$PATH<\/pre>\nMake sure you’re getting the right java:<\/p>\n
which java \r\n$HOME\/.juniper_networks\/java32\/bin\/java<\/pre>\nNow comes the really braindead<\/strong> part: Create a file \/etc\/resolv.conf, otherwise ncsvc will segfault after launch:<\/p>\n
sudo emacs \/etc\/resolv.conf<\/pre>\nEnter a std nameserver here, the important thing is that this file exists:<\/p>\n
nameserver 8.8.8.8<\/pre>\nSave the file. On you std. dhcp \/ network managed Ubuntu, this file won’t exist where jnc expects it, so you have to create it manually. Nice…<\/p>\n
Obtain your gateway’s SSL cert using the shell script provided in the “tmp” directory of your jnc installation:<\/p>\n
cd ~\/.juniper_networks\/tmp\r\n\r\nchmod +x\u00a0.\/getx509certificate.sh\u00a0\r\n\r\n.\/getx509certificate.sh your.vpn.server.com ..\/network_connect\/vpn.crt<\/pre>\nChange to your network_connect directory and run the “ncsvc”<\/strong> Command like so:<\/p>\n
.\/ncsvc -h your.server.com -r \"Your Realm Name\" \u00a0-f vpn.crt -L 5 -u username -p xxxxYYYYYY<\/pre>\nIf you don’t know the realm, check the HTML source of your login page, it’s usually passed along to the cgi script using some form of “hidden” input tag. \u00a0“xxxx” is your SecureID pin, with “YYYYYY” indicates the current token.<\/p>\n
That’s it. Check the file ncsvc.log for any errors that might crop up. To track down the resolv.conf problem, I had to run “strace”<\/strong> on the command line above, dirty work but if it solves the problem…<\/p>\n
Conclusion<\/h2>\n
All of this could be scripted up nicely (the PATH modification, the resolv.conf bits and so on), but wouldn’t it be easier if Juniper fixed their software? It’s quite hard to believe such a pile of crap should be let loose unto the world by such a renowned company, who knows what else lies waiting in this huge binary blob… sorry for the rant. \u00a0\ud83d\ude09<\/p>\n
References<\/h2>\n
http:\/\/www.joshhardman.net\/juniper-network-connect-vpn-linux-64-bit\/<\/a><\/p>\n