cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5526
Views
0
Helpful
8
Replies

Anyconnect VPN failed: drbg_instantiate failed

waldauf
Level 1
Level 1

Hello,

 

I have installed Cisco  Anyconnect  Secure Mobility Client on my laptop. But form some time (I don't know which) a I cannot login to VPN because connection faild with this error message:

# [sudo] /opt/cisco/anyconnect/bin/vpn connect 'VPN KB NONSTANDARD'
Cisco AnyConnect Secure Mobility Client (version 4.6.01098) . Copyright (c) 2004 - 2018 Cisco Systems, Inc. All Rights Reserved. >> state: Disconnected >> state: Disconnected >> notice: Ready to connect. >> registered with local VPN subsystem. >> contacting host (VPN FOO NONSTANDARD) for login information... >> notice: Contacting VPN FOO NONSTANDARD. >> notice: Posture Assessment: Required for access >> notice: Posture Assessment: Checking for updates... >> notice: Posture Assessment: Initiating... >> notice: Posture Assessment: Active >> notice: Posture Assessment: Initiating... >> Please enter your username and password. Username: <AUTOFILLED_USER> Password: drbg_instantiate failed drbg_instantiate failed free(): invalid pointer

... there isn't possible to put password and Client got stuck.

 

Anyconncet version: anyconnect-linux64-4.6.01098-predeploy-k9.tar.gz (also 4.3.05017 version)

OS: Arch Linux

Environment: Company VPN

 

Can I ask you for help?

8 Replies 8

waldauf
Level 1
Level 1
No one, no idea...?

As you have not provided the Linux version, my guess would be that it is hitting the bug CSCvi54979.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi54979/

 

The fix is supposed to be released by Mid-August.

@Shubham Bharti: Thx for your answer. Not sure what next do you need to know... kernel version and something else?

 

$ uname -r
4.17.9-1-ARCH

The bug you sent seems to be similar problem. But there is no information how does it look when AnyConnect got stuck. I hope it should be and it'll be fixed ASAP.

 

 

 

Okay, I did not see the OS. I don't think they have tested this issue on Arch Linux as it mentions only RHEL and Ubuntu. I don't think they have linked the issue to a specific kernel version. The best thing to do is to ask your organization to raise a TAC-case with problem to this specific linux distribution. You only need to provide the Diagnostics package from your Anyconnect module.

Now I found out if I use vpnui so I can connect to VPN. After that I can connect to VPN over command-line. Really strange because I didn't do any system update/upgrade.

Cisco AnyConnect Secure Mobility Client (version 4.6.01098) .

Copyright (c) 2004 - 2018 Cisco Systems, Inc.  All Rights Reserved.


  >> state: Disconnected
  >> state: Disconnected
  >> notice: Ready to connect.
  >> registered with local VPN subsystem.
  >> contacting host (VPN NONSTANDARD) for login information...
  >> notice: Contacting VPN NONSTANDARD.
  >> notice: Posture Assessment: Required for access
  >> notice: Posture Assessment: Checking for updates...
  >> notice: Posture Assessment: Initiating...
  >> notice: Posture Assessment: Active
  >> notice: Posture Assessment: Initiating...

  >> Please enter your username and password.

Username: XXXX
Password: drbg_instantiate failed # I typed password

  >> state: Connecting
  >> notice: Establishing VPN session...
The AnyConnect Downloader is analyzing this computer. Please wait...
The AnyConnect Downloader is performing update checks...
  >> notice: The AnyConnect Downloader is performing update checks...
The AnyConnect Downloader updates have been completed.
Please wait while the VPN connection is established...
  >> notice: Checking for profile updates...
  >> notice: Checking for customization updates...
  >> state: Connecting
  >> notice: Performing any required updates...
  >> notice: The AnyConnect Downloader updates have been completed.
  >> notice: Establishing VPN session...
  >> notice: Establishing VPN - Initiating connection...
  >> notice: Establishing VPN - Examining system...
  >> notice: Establishing VPN - Activating VPN adapter...
  >> notice: Establishing VPN - Configuring system...
  >> notice: Establishing VPN...
  >> state: Connected

Hi.

It looks like I have a similar issue

OpenSUSE Leap 42.3 (4.4.140-62-default), AnyConnect 4.6.00362. Windows's client connects successfully. 

 


./vpn connect vpn.somedomain.com
Cisco AnyConnect Secure Mobility Client (version 4.6.00362) .

Copyright (c) 2004 - 2018 Cisco Systems, Inc. All Rights Reserved.


>> state: Disconnected
>> state: Disconnected
>> notice: Ready to connect.
>> registered with local VPN subsystem.
>> contacting host (vpn.wtc.somedomain.com) for login information...
>> notice: Contacting vpn.wtc.somedomain.com.
>> notice: Posture Assessment: Required for access
>> notice: Posture Assessment: Checking for updates...
>> notice: Posture Assessment: Updating...
>> notice: Posture Assessment: Initiating...
>> notice: Posture Assessment: Active
>> notice: Posture Assessment: Initiating...

>> Connection Banner
>> Comedomain Copyright

>> Please enter your username and password.

Username: bluk
Password:
>> notice: Hostscan is performing system scan
>> notice: Hostscan is performing software scan
drbg_instantiate failed
drbg_instantiate failed
*** Error in `/home/bluk/.cisco/hostscan/bin/cscan': free(): invalid pointer: 0x00007fb8c1a0fec0 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x740ef)[0x7fb8c37d30ef]
/lib64/libc.so.6(+0x79646)[0x7fb8c37d8646]
/lib64/libc.so.6(+0x7a393)[0x7fb8c37d9393]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale5_Impl16_M_install_facetEPKNS_2idEPKNS_5facetE+0x142)[0x7fb8c15a4602]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale5_ImplC1Em+0x1e3)[0x7fb8c1587db3]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale18_S_initialize_onceEv+0x15)[0x7fb8c1588d25]
/lib64/libpthread.so.0(+0x6bf3)[0x7fb8c4378bf3]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6locale13_S_initializeEv+0x21)[0x7fb8c1588d71]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt6localeC1Ev+0x13)[0x7fb8c1588db3]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(_ZNSt8ios_base4InitC2Ev+0xbc)[0x7fb8c15890dc]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(+0x1aa8a7)[0x7fb8c11058a7]
/home/blu/.cisco/hostscan/lib/libwautils.so.4(+0x1aa9b5)[0x7fb8c11059b5]
/lib64/ld-linux-x86-64.so.2(+0xf1ea)[0x7fb8c49b81ea]
/lib64/ld-linux-x86-64.so.2(+0xf2d3)[0x7fb8c49b82d3]
/lib64/ld-linux-x86-64.so.2(+0x13718)[0x7fb8c49bc718]
/lib64/ld-linux-x86-64.so.2(+0xf0a4)[0x7fb8c49b80a4]
/lib64/ld-linux-x86-64.so.2(+0x12e7b)[0x7fb8c49bbe7b]
/lib64/libdl.so.2(+0xeeb)[0x7fb8c47a5eeb]
/lib64/ld-linux-x86-64.so.2(+0xf0a4)[0x7fb8c49b80a4]
/lib64/libdl.so.2(+0x149d)[0x7fb8c47a649d]
/lib64/libdl.so.2(dlopen+0x31)[0x7fb8c47a5f81]
/home/blu/.cisco/hostscan/lib/libinspector.so(hs_dl_load+0x5a)[0x7fb8c247994a]
/home/blu/.cisco/hostscan/lib/libinspector.so(hs_dl_load_alt+0x101)[0x7fb8c2479bb1]
/home/blu/.cisco/hostscan/lib/libinspector.so(_ZN15COpswatV4PluginC2ER13eOpswatStatus+0xa7)[0x7fb8c22a21a7]
/home/blu/.cisco/hostscan/lib/libinspector.so(_ZN7COpswatC2ER13eOpswatStatus+0xc8)[0x7fb8c2299e38]
/home/blu/.cisco/hostscan/lib/libinspector.so(_ZN7COpswat11GetInstanceEv+0x65)[0x7fb8c2299f05]
/home/blu/.cisco/hostscan/lib/libinspector.so(ins_get_version+0x41)[0x7fb8c2473df1]
/home/blu/.cisco/hostscan/lib/libhostscan.so(hs_get_inspector_version_string+0x67)[0x7fb8c2a0f437]
/home/blu/.cisco/hostscan/bin/cscan(+0x4e3c3)[0x55591c3643c3]
/home/blu/.cisco/hostscan/bin/cscan(+0x4c9ab)[0x55591c3629ab]
/home/blu/.cisco/hostscan/bin/cscan(main+0x3e)[0x55591c3630de]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7fb8c377f725]
/home/blu/.cisco/hostscan/bin/cscan(+0x4a129)[0x55591c360129]
======= Memory map: ========
55591c316000-55591c5e9000 r-xp 00000000 08:03 317815284 /home/blu/.cisco/hostscan/bin/cscan
55591c7e9000-55591c80b000 r--p 002d3000 08:03 317815284 /home/blu/.cisco/hostscan/bin/cscan
55591c80b000-55591c843000 rw-p 002f5000 08:03 317815284 /home/blu/.cisco/hostscan/bin/cscan
55591c843000-55591c84c000 rw-p 00000000 00:00 0
55591dcf6000-55591e1a4000 rw-p 00000000 00:00 0 [heap]
7fb8bc000000-7fb8bc021000 rw-p 00000000 00:00 0
7fb8bc021000-7fb8c0000000 ---p 00000000 00:00 0
7fb8c0f5b000-7fb8c17bb000 r-xp 00000000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c17bb000-7fb8c19ba000 ---p 00860000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c19ba000-7fb8c19e3000 r--p 0085f000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c19e3000-7fb8c19f8000 rw-p 00888000 08:03 66908621 /home/blu/.cisco/hostscan/lib/libwautils.so.4
7fb8c19f8000-7fb8c1a12000 rw-p 00000000 00:00 0
7fb8c1a12000-7fb8c1a3d000 r-xp 00000000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1a3d000-7fb8c1c3c000 ---p 0002b000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1c3c000-7fb8c1c3d000 r--p 0002a000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1c3d000-7fb8c1c3e000 rw-p 0002b000 08:03 66908622 /home/blu/.cisco/hostscan/lib/libwaapi.so
7fb8c1c3e000-7fb8c1c54000 r-xp 00000000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1c54000-7fb8c1e53000 ---p 00016000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1e53000-7fb8c1e54000 r--p 00015000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1e54000-7fb8c1e55000 rw-p 00016000 00:28 526337 /lib64/libgcc_s.so.1
7fb8c1e55000-7fb8c1fcf000 r-xp 00000000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c1fcf000-7fb8c21ce000 ---p 0017a000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c21ce000-7fb8c21d8000 r--p 00179000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c21d8000-7fb8c21da000 rw-p 00183000 00:28 526629 /usr/lib64/libstdc++.so.6.0.24
7fb8c21da000-7fb8c21de000 rw-p 00000000 00:00 0
7fb8c21de000-7fb8c2545000 r-xp 00000000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c2545000-7fb8c2744000 ---p 00367000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c2744000-7fb8c276d000 r--p 00366000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c276d000-7fb8c2788000 rw-p 0038f000 08:03 66908803 /home/blu/.cisco/hostscan/lib/libinspector.so
7fb8c2788000-7fb8c278d000 rw-p 00000000 00:00 0
7fb8c278d000-7fb8c2aea000 r-xp 00000000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2aea000-7fb8c2ce9000 ---p 0035d000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2ce9000-7fb8c2d12000 r--p 0035c000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2d12000-7fb8c2d2f000 rw-p 00385000 08:03 66908610 /home/blu/.cisco/hostscan/lib/libhostscan.so
7fb8c2d2f000-7fb8c2d35000 rw-p 00000000 00:00 0
7fb8c2d35000-7fb8c2d36000 ---p 00000000 00:00 0
7fb8c2d36000-7fb8c3536000 rw-p 00000000 00:00 0
7fb8c3536000-7fb8c355d000 r-xp 00000000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c355d000-7fb8c375d000 ---p 00027000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c375d000-7fb8c375e000 r--p 00027000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c375e000-7fb8c375f000 rw-p 00028000 00:28 24328 /usr/lib64/liblzma.so.5.2.2
7fb8c375f000-7fb8c38fa000 r-xp 00000000 00:28 690120 /lib64/libc-2.22.so
7fb8c38fa000-7fb8c3afa000 ---p 0019b000 00:28 690120 /lib64/libc-2.22.so
7fb8c3afa000-7fb8c3afe000 r--p 0019b000 00:28 690120 /lib64/libc-2.22.so
7fb8c3afe000-7fb8c3b00000 rw-p 0019f000 00:28 690120 /lib64/libc-2.22.so
7fb8c3b00000-7fb8c3b04000 rw-p 00000000 00:00 0
7fb8c3b04000-7fb8c3b0b000 r-xp 00000000 00:28 690154 /lib64/librt-2.22.so
7fb8c3b0b000-7fb8c3d0a000 ---p 00007000 00:28 690154 /lib64/librt-2.22.so
7fb8c3d0a000-7fb8c3d0b000 r--p 00006000 00:28 690154 /lib64/librt-2.22.so
7fb8c3d0b000-7fb8c3d0c000 rw-p 00007000 00:28 690154 /lib64/librt-2.22.so
7fb8c3d0c000-7fb8c3e07000 r-xp 00000000 00:28 690128 /lib64/libm-2.22.so
7fb8c3e07000-7fb8c4007000 ---p 000fb000 00:28 690128 /lib64/libm-2.22.so
7fb8c4007000-7fb8c4008000 r--p 000fb000 00:28 690128 /lib64/libm-2.22.so
7fb8c4008000-7fb8c4009000 rw-p 000fc000 00:28 690128 /lib64/libm-2.22.so
7fb8c4009000-7fb8c4168000 r-xp 00000000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c4168000-7fb8c4367000 ---p 0015f000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c4367000-7fb8c436f000 r--p 0015e000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c436f000-7fb8c4371000 rw-p 00166000 00:28 219441 /usr/lib64/libxml2.so.2.9.4
7fb8c4371000-7fb8c4372000 rw-p 00000000 00:00 0
7fb8c4372000-7fb8c438a000 r-xp 00000000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c438a000-7fb8c4589000 ---p 00018000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c4589000-7fb8c458a000 r--p 00017000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c458a000-7fb8c458b000 rw-p 00018000 00:28 690150 /lib64/libpthread-2.22.so
7fb8c458b000-7fb8c458f000 rw-p 00000000 00:00 0
7fb8c458f000-7fb8c45a4000 r-xp 00000000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c45a4000-7fb8c47a3000 ---p 00015000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c47a3000-7fb8c47a4000 r--p 00014000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c47a4000-7fb8c47a5000 rw-p 00015000 00:28 604286 /lib64/libz.so.1.2.8
7fb8c47a5000-7fb8c47a7000 r-xp 00000000 00:28 690126 /lib64/libdl-2.22.so
7fb8c47a7000-7fb8c49a7000 ---p 00002000 00:28 690126 /lib64/libdl-2.22.so
7fb8c49a7000-7fb8c49a8000 r--p 00002000 00:28 690126 /lib64/libdl-2.22.so
7fb8c49a8000-7fb8c49a9000 rw-p 00003000 00:28 690126 /lib64/libdl-2.22.so
7fb8c49a9000-7fb8c49ca000 r-xp 00000000 00:28 690112 /lib64/ld-2.22.so
7fb8c4b65000-7fb8c4b9a000 r--s 00000000 00:14 20615 /run/nscd/passwd
7fb8c4b9a000-7fb8c4ba1000 rw-p 00000000 00:00 0
7fb8c4bc8000-7fb8c4bca000 rw-p 00000000 00:00 0
7fb8c4bca000-7fb8c4bcb000 r--p 00021000 00:28 690112 /lib64/ld-2.22.so
7fb8c4bcb000-7fb8c4bcc000 rw-p 00022000 00:28 690112 /lib64/ld-2.22.so
7fb8c4bcc000-7fb8c4bcd000 rw-p 00000000 00:00 0
7ffefc31a000-7ffefc33c000 rw-p 00000000 00:00 0 [stack]
7ffefc3f7000-7ffefc3fa000 r--p 00000000 00:00 0 [vvar]
7ffefc3fa000-7ffefc3fc000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]

 

 

How did you get the stacktrace from that?

smolz
Level 4
Level 4

Has this ever gotten fixed?  I am having this issue on the latest 16.04 and latest 4.6 linux client

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: