cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5570
Views
0
Helpful
8
Replies

Anyconnect VPN failed: drbg_instantiate failed

waldauf
Level 1
Level 1

Hello,

 

I have installed Cisco  Anyconnect  Secure Mobility Client on my laptop. But form some time (I don't know which) a I cannot login to VPN because connection faild with this error message:

# [sudo] /opt/cisco/anyconnect/bin/vpn connect 'VPN KB NONSTANDARD'
Cisco AnyConnect Secure Mobility Client (version 4.6.01098) . Copyright (c) 2004 - 2018 Cisco Systems, Inc. All Rights Reserved. >> state: Disconnected >> state: Disconnected >> notice: Ready to connect. >> registered with local VPN subsystem. >> contacting host (VPN FOO NONSTANDARD) for login information... >> notice: Contacting VPN FOO NONSTANDARD. >> notice: Posture Assessment: Required for access >> notice: Posture Assessment: Checking for updates... >> notice: Posture Assessment: Initiating... >> notice: Posture Assessment: Active >> notice: Posture Assessment: Initiating... >> Please enter your username and password. Username: <AUTOFILLED_USER> Password: drbg_instantiate failed drbg_instantiate failed free(): invalid pointer

... there isn't possible to put password and Client got stuck.

 

Anyconncet version: anyconnect-linux64-4.6.01098-predeploy-k9.tar.gz (also 4.3.05017 version)

OS: Arch Linux

Environment: Company VPN

 

Can I ask you for help?

8 Replies 8

waldauf
Level 1
Level 1
No one, no idea...?

As you have not provided the Linux version, my guess would be that it is hitting the bug CSCvi54979.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi54979/

 

The fix is supposed to be released by Mid-August.

@Shubham Bharti: Thx for your answer. Not sure what next do you need to know... kernel version and something else?

 

$ uname -r
4.17.9-1-ARCH

The bug you sent seems to be similar problem. But there is no information how does it look when AnyConnect got stuck. I hope it should be and it'll be fixed ASAP.

 

 

 

Okay, I did not see the OS. I don't think they have tested this issue on Arch Linux as it mentions only RHEL and Ubuntu. I don't think they have linked the issue to a specific kernel version. The best thing to do is to ask your organization to raise a TAC-case with problem to this specific linux distribution. You only need to provide the Diagnostics package from your Anyconnect module.

Now I found out if I use vpnui so I can connect to VPN. After that I can connect to VPN over command-line. Really strange because I didn't do any system update/upgrade.

Cisco AnyConnect Secure Mobility Client (version 4.6.01098) .

Copyright (c) 2004 - 2018 Cisco Systems, Inc.  All Rights Reserved.


  >> state: Disconnected
  >> state: Disconnected
  >> notice: Ready to connect.
  >> registered with local VPN subsystem.
  >> contacting host (VPN NONSTANDARD) for login information...
  >> notice: Contacting VPN NONSTANDARD.
  >> notice: Posture Assessment: Required for access
  >> notice: Posture Assessment: Checking for updates...
  >> notice: Posture Assessment: Initiating...
  >> notice: Posture Assessment: Active
  >> notice: Posture Assessment: Initiating...

  >> Please enter your username and password.

Username: XXXX
Password: drbg_instantiate failed # I typed password

  >> state: Connecting
  >> notice: Establishing VPN session...
The AnyConnect Downloader is analyzing this computer. Please wait...
The AnyConnect Downloader is performing update checks...
  >> notice: The AnyConnect Downloader is performing update checks...
The AnyConnect Downloader updates have been completed.
Please wait while the VPN connection is established...
  >> notice: Checking for profile updates...
  >> notice: Checking for customization updates...
  >> state: Connecting
  >> notice: Performing any required updates...
  >> notice: The AnyConnect Downloader updates have been completed.
  >> notice: Establishing VPN session...
  >> notice: Establishing VPN - Initiating connection...
  >> notice: Establishing VPN - Examining system...
  >> notice: Establishing VPN - Activating VPN adapter...
  >> notice: Establishing VPN - Configuring system...
  >> notice: Establishing VPN...
  >> state: Connected

Hi.

It looks like I have a similar issue

OpenSUSE Leap 42.3 (4.4.140-62-default), AnyConnect 4.6.00362. Windows's client connects successfully. 

 


./vpn connect vpn.somedomain.com
Cisco AnyConnect Secure Mobility Client (version 4.6.00362) .

Copyright (c) 2004 - 2018 Cisco Systems, Inc. All Rights Reserved.


>> state: Disconnected
>> state: Disconnected
>> notice: Ready to connect.
>> registered with local VPN subsystem.
>> contacting host (vpn.wtc.somedomain.com) for login information...
>> notice: Contacting vpn.wtc.somedomain.com.
>> notice: Posture Assessment: Required for access
>> notice: Posture Assessment: Checking for updates...
>> notice: Posture Assessment: Updating...
>> notice: Posture Assessment: Initiating...
>> notice: Posture Assessment: Active
>> notice: Posture Assessment: Initiating...

>> Connection Banner
>> Comedomain Copyright

>> Please enter your username and password.

Username: bluk
Password:
>> notice: Hostscan is performing system scan
>> notice: Hostscan is performing software scan
drbg_instantiate failed
drbg_instantiate failed
*** Error in `/home/bluk/.cisco/hostscan/bin/cscan': free(): invalid pointer: 0x00007fb8c1a0fec0 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x740ef)[0x7fb8c37d30ef]
/lib64/libc.so.6(+0x79646)[0x7fb8c37d8646]
/lib64/libc.so.6(+0x7a393)[0x7fb8c37d9393]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale5_Impl16_M_install_facetEPKNS_2idEPKNS_5facetE+0x142)[0x7fb8c15a4602]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale5_ImplC1Em+0x1e3)[0x7fb8c1587db3]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale18_S_initialize_onceEv+0x15)[0x7fb8c1588d25]
/lib64/libpthread.so.0(+0x6bf3)[0x7fb8c4378bf3]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale13_S_initializeEv+0x21)[0x7fb8c1588d71]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6localeC1Ev+0x13)[0x7fb8c1588db3]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt8ios_base4InitC2Ev+0xbc)[0x7fb8c15890dc]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(+0x1aa8a7)[0x7fb8c11058a7]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(+0x1aa9b5)[0x7fb8c11059b5]
/lib64/ld-linux-x86-64.so.2(+0xf1ea)[0x7fb8c49b81ea]
/lib64/ld-linux-x86-64.so.2(+0xf2d3)[0x7fb8c49b82d3]
/lib64/ld-linux-x86-64.so.2(+0x13718)[0x7fb8c49bc718]
/lib64/ld-linux-x86-64.so.2(+0xf0a4)[0x7fb8c49b80a4]
/lib64/ld-linux-x86-64.so.2(+0x12e7b)[0x7fb8c49bbe7b]
/lib64/libdl.so.2(+0xeeb)[0x7fb8c47a5eeb]
/lib64/ld-linux-x86-64.so.2(+0xf0a4)[0x7fb8c49b80a4]
/lib64/libdl.so.2(+0x149d)[0x7fb8c47a649d]
/lib64/libdl.so.2(dlopen+0x31)[0x7fb8c47a5f81]
/home/blu/.cisco/hostscan/lib/libinspector.so(hs_dl_load+0x5a)[0x7fb8c247994a]
/home/blu/.cisco/hostscan/lib/libinspector.so(hs_dl_load_alt+0x101)[0x7fb8c2479bb1]
/home/blu/.cisco/hostscan/lib/libinspector.so(_ZN15COpswatV4PluginC2ER13eOpswatStatus+0xa7)[0x7fb8c22a21a7]
/home/blu/.cisco/hostscan/lib/libinspector.so(_ZN7COpswatC2ER13eOpswatStatus+0xc8)[0x7fb8c2299e38]
/home/blu/.cisco/hostscan/lib/libinspector.so(_ZN7COpswat11GetInstanceEv+0x65)[0x7fb8c2299f05]
/home/blu/.cisco/hostscan/lib/libinspector.so(ins_get_version+0x41)[0x7fb8c2473df1]
/home/blu/.cisco/hostscan/lib/libhostscan.so(hs_get_inspector_version_string+0x67)[0x7fb8c2a0f437]
/home/blu/.cisco/hostscan/bin/cscan(+0x4e3c3)[0x55591c3643c3]
/home/blu/.cisco/hostscan/bin/cscan(+0x4c9ab)[0x55591c3629ab]
/home/blu/.cisco/hostscan/bin/cscan(main+0x3e)[0x55591c3630de]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7fb8c377f725]
/home/blu/.cisco/hostscan/bin/cscan(+0x4a129)[0x55591c360129]
======= Memory map: ========
55591c316000-55591c5e9000 r-xp 00000000 08:03 317815284 /home/blu/.cisco/hostscan/bin/cscan
55591c7e9000-55591c80b000 r--p 002d3000 08:03 317815284 /home/blu/.cisco/hostscan/bin/cscan
55591c80b000-55591c843000 rw-p 002f5000 08:03 317815284 /home/blu/.cisco/hostscan/bin/cscan
55591c843000-55591c84c000 rw-p 00000000 00:00 0
55591dcf6000-55591e1a4000 rw-p 00000000 00:00 0 [heap]
7fb8bc000000-7fb8bc021000 rw-p 00000000 00:00 0
7fb8bc021000-7fb8c0000000 ---p 00000000 00:00 0
7fb8c0f5b000-7fb8c17bb000 r-xp 00000000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c17bb000-7fb8c19ba000 ---p 00860000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c19ba000-7fb8c19e3000 r--p 0085f000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c19e3000-7fb8c19f8000 rw-p 00888000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c19f8000-7fb8c1a12000 rw-p 00000000 00:00 0
7fb8c1a12000-7fb8c1a3d000 r-xp 00000000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1a3d000-7fb8c1c3c000 ---p 0002b000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1c3c000-7fb8c1c3d000 r--p 0002a000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1c3d000-7fb8c1c3e000 rw-p 0002b000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1c3e000-7fb8c1c54000 r-xp 00000000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1c54000-7fb8c1e53000 ---p 00016000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1e53000-7fb8c1e54000 r--p 00015000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1e54000-7fb8c1e55000 rw-p 00016000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1e55000-7fb8c1fcf000 r-xp 00000000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c1fcf000-7fb8c21ce000 ---p 0017a000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c21ce000-7fb8c21d8000 r--p 00179000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c21d8000-7fb8c21da000 rw-p 00183000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c21da000-7fb8c21de000 rw-p 00000000 00:00 0
7fb8c21de000-7fb8c2545000 r-xp 00000000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c2545000-7fb8c2744000 ---p 00367000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c2744000-7fb8c276d000 r--p 00366000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c276d000-7fb8c2788000 rw-p 0038f000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c2788000-7fb8c278d000 rw-p 00000000 00:00 0
7fb8c278d000-7fb8c2aea000 r-xp 00000000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2aea000-7fb8c2ce9000 ---p 0035d000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2ce9000-7fb8c2d12000 r--p 0035c000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2d12000-7fb8c2d2f000 rw-p 00385000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2d2f000-7fb8c2d35000 rw-p 00000000 00:00 0
7fb8c2d35000-7fb8c2d36000 ---p 00000000 00:00 0
7fb8c2d36000-7fb8c3536000 rw-p 00000000 00:00 0
7fb8c3536000-7fb8c355d000 r-xp 00000000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c355d000-7fb8c375d000 ---p 00027000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c375d000-7fb8c375e000 r--p 00027000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c375e000-7fb8c375f000 rw-p 00028000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c375f000-7fb8c38fa000 r-xp 00000000 00:28 690120 /lib64/libc-2.22.so
7fb8c38fa000-7fb8c3afa000 ---p 0019b000 00:28 690120 /lib64/libc-2.22.so
7fb8c3afa000-7fb8c3afe000 r--p 0019b000 00:28 690120 /lib64/libc-2.22.so
7fb8c3afe000-7fb8c3b00000 rw-p 0019f000 00:28 690120 /lib64/libc-2.22.so
7fb8c3b00000-7fb8c3b04000 rw-p 00000000 00:00 0
7fb8c3b04000-7fb8c3b0b000 r-xp 00000000 00:28 690154 /lib64/librt-2.22.so
7fb8c3b0b000-7fb8c3d0a000 ---p 00007000 00:28 690154 /lib64/librt-2.22.so
7fb8c3d0a000-7fb8c3d0b000 r--p 00006000 00:28 690154 /lib64/librt-2.22.so
7fb8c3d0b000-7fb8c3d0c000 rw-p 00007000 00:28 690154 /lib64/librt-2.22.so
7fb8c3d0c000-7fb8c3e07000 r-xp 00000000 00:28 690128 /lib64/libm-2.22.so
7fb8c3e07000-7fb8c4007000 ---p 000fb000 00:28 690128 /lib64/libm-2.22.so
7fb8c4007000-7fb8c4008000 r--p 000fb000 00:28 690128 /lib64/libm-2.22.so
7fb8c4008000-7fb8c4009000 rw-p 000fc000 00:28 690128 /lib64/libm-2.22.so
7fb8c4009000-7fb8c4168000 r-xp 00000000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c4168000-7fb8c4367000 ---p 0015f000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c4367000-7fb8c436f000 r--p 0015e000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c436f000-7fb8c4371000 rw-p 00166000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c4371000-7fb8c4372000 rw-p 00000000 00:00 0
7fb8c4372000-7fb8c438a000 r-xp 00000000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c438a000-7fb8c4589000 ---p 00018000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c4589000-7fb8c458a000 r--p 00017000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c458a000-7fb8c458b000 rw-p 00018000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c458b000-7fb8c458f000 rw-p 00000000 00:00 0
7fb8c458f000-7fb8c45a4000 r-xp 00000000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c45a4000-7fb8c47a3000 ---p 00015000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c47a3000-7fb8c47a4000 r--p 00014000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c47a4000-7fb8c47a5000 rw-p 00015000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c47a5000-7fb8c47a7000 r-xp 00000000 00:28 690126 /lib64/libdl-2.22.so
7fb8c47a7000-7fb8c49a7000 ---p 00002000 00:28 690126 /lib64/libdl-2.22.so
7fb8c49a7000-7fb8c49a8000 r--p 00002000 00:28 690126 /lib64/libdl-2.22.so
7fb8c49a8000-7fb8c49a9000 rw-p 00003000 00:28 690126 /lib64/libdl-2.22.so
7fb8c49a9000-7fb8c49ca000 r-xp 00000000 00:28 690112 /lib64/ld-2.22.so
7fb8c4b65000-7fb8c4b9a000 r--s 00000000 00:14 20615 /run/nscd/passwd
7fb8c4b9a000-7fb8c4ba1000 rw-p 00000000 00:00 0
7fb8c4bc8000-7fb8c4bca000 rw-p 00000000 00:00 0
7fb8c4bca000-7fb8c4bcb000 r--p 00021000 00:28 690112 /lib64/ld-2.22.so
7fb8c4bcb000-7fb8c4bcc000 rw-p 00022000 00:28 690112 /lib64/ld-2.22.so
7fb8c4bcc000-7fb8c4bcd000 rw-p 00000000 00:00 0
7ffefc31a000-7ffefc33c000 rw-p 00000000 00:00 0 [stack]
7ffefc3f7000-7ffefc3fa000 r--p 00000000 00:00 0 [vvar]
7ffefc3fa000-7ffefc3fc000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

 

 

How did you get the stacktrace from that?

smolz
Level 4
Level 4

Has this ever gotten fixed?  I am having this issue on the latest 16.04 and latest 4.6 linux client