cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3153
Views
0
Helpful
1
Replies

64-bit anyconnect on linux - problems with libraries

Hi,

we in the process of setting up Cisco Anyconenct for Linux 64-bit machines and are noticing some problems which seams to be related to the client not finding all libraries it expects. For example we got the issue that when connecting for the first time(no profile, ie no <ServerCertificateThumbprint>) the client find the Server Certificate no valid(which it is). We found out that the reson for that beeing Anyconnect was not properly using the nss-certstore for all operations. That was because the client cold not locate libnssckbi.so which was solved by:

ln -s /usr/lib64/libnssckbi.so /home/user/.mozilla/firefox/smhi.default/libnssckbi.so

Is there any other common librarie problems we should be aware of?

We are running Redhat 6 desktop.

Best regards

/Mattias

1 Reply 1

Hi,

I will reply on my own posting.

Other lib we have found it nessecary to link is:

ln -s /opt/cisco/anyconnect/lib/libcurl.so.3 /opt/cisco/anyconnect/lib/libcurl.so

Also, if running a 32-bit Anyconnect client on a 64-bit OS (which currently would be nessecary if you would like to run host-scan/securedesktop/posture) is:

Create /usr/local/firefox with links

     [a001375@c14446 firefox]$ ls -la

total 8

drwxr-xr-x   2 root root 4096 Oct 31 18:37 .

drwxr-xr-x. 14 root root 4096 Oct 31 18:35 ..

lrwxrwxrwx   1 root root   18 Oct 31 17:06 libfreebl3.so -> /lib/libfreebl3.so

lrwxrwxrwx   1 root root   16 Oct 31 17:00 libnspr4.so -> /lib/libnspr4.so

lrwxrwxrwx   1 root root   19 Oct 31 16:58 libnss3.so -> /usr/lib/libnss3.so

lrwxrwxrwx   1 root root   22 Oct 31 16:59 libnssdbm3.so -> /usr/lib/libnssdbm3.so

lrwxrwxrwx   1 root root   15 Oct 31 17:00 libplc4.so -> /lib/libplc4.so

lrwxrwxrwx   1 root root   21 Oct 31 17:00 libsmime3.so -> /usr/lib/libsmime3.so

lrwxrwxrwx   1 root root   23 Oct 31 17:00 libsoftokn3.so -> /usr/lib/libsoftokn3.so

I can also share that I recieved an e-mail the other day from a nice fellow that would let us know they had produced a .SPEC-file for buliding AnyConnect RPMs.

Very usefull, thanks a lot Philip.

You will find information on that here:

https://github.com/pdurbin/anyconnect