On Mon, 2013-02-04 at 18:21 -0500, Brian D Peyser PhD wrote: > $ openconnect --script=/etc/vpnc/vpnc-script remoteaccessvpn.nih.gov ... > TUNSETIFF failed: Operation not permitted That's expected, if you're not running it as root. Everything worked OK, but it wasn't able to create and configure the tunnel network device. But it would have worked from the command line anyway. It was caching the result of the DNS lookup and using the same IP address every time it had to make a new connection, so you'd never have seen the original issue there. It was only when you had the *separate* authentication and connection stages (for example with the NM GUI, or using openconnect --authenticate followed by openconnect -C $COOKIE --servercert $FINGERPRINT $HOST > When I try to use the Network-Manager-openconnect GUI I get a segfault. That shouldn't happen. First thing I'd do is check that you aren't mixing versions. If you just ran './configure' then it probably installs to /usr/local, leaving the packaged versions in place? Try adding --prefix=/usr to the configure command line? And run 'ldd /usr/libexec/nm-openconnect-auth-dialog' (or wherever Ubuntu puts it) to check which version of the library it's running. Was it a segfault in the auth-dialog? Or in openconnect itself when it tries to connect? > Is there anything I did here that is wrong? When I cloned the git I > looked at ssl.c and it seemed to be updated with the patches in > http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/b0b4b34f. Yes, you have the latest patched version. > Maybe I need to do a reboot? Haven't done that yet. No, that shouldn't be necessary. > Hmm was just thinking maybe I missed the openssl-dev package. I'll need > that too, right? It'll use GnuTLS if you have it. -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6171 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20130204/9cd1ee49/attachment.bin>
