Hi.
Recently on both my desktop and laptop, both running Fedora (31 and 32 respectively) I was trying to use the anyconnect client without success.
I installed the anyconnect client provided by my company and executed the install script.
When I try to connect either using the user interface client or the command line, the process gets stuck after a crash of cscan.
Version: 4.8.02045
Here is a snippet of what happens:
p@new-host-3 /o/c/anyconnect> ./bin/vpn -s connect myaccess-companydomain.com
Cisco AnyConnect Secure Mobility Client (version 4.8.02045) .
Copyright (c) 2004 - 2020 Cisco Systems, Inc. All Rights Reserved.
>> state: Disconnected
>> state: Disconnected
>> notice: Ready to connect.
>> registered with local VPN subsystem.
>> contacting host (myaccess.companydomain.com) for login information...
>> notice: Contacting myaccess-companydomain.com.
>> notice: Posture Assessment: Required for access
>> notice: Posture Assessment: Checking for updates...
>> notice: Posture Assessment: Initiating...
>> notice: Posture Assessment: Active
>> notice: Posture Assessment: Initiating...
Username: drbg_instantiate failed
drbg_instantiate failed
double free or corruption (!prev)
From this point on I can insert my username and password but the process never progresses.
On the log I can see (journalctl)
May 22 14:39:03 new-host-3 abrt-dump-journal-core[1052]: Failed to save detect problem data in abrt database
May 22 14:39:03 new-host-3 abrt-dump-journal-core[1052]: Failed to obtain all required information from journald
May 22 14:39:03 new-host-3 acvpncli[9853]: Function: reset_connection_cb Thread Id: 0x2BFFF700 File: /tmp/build/thehoff/Negasonic0.166695223187/Negasonic/posture/asa/libcsd/csd_api.c Line: 90 Level: all :: *** reset connection [7f3a2409a>
May 22 14:39:03 new-host-3 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@0-9862-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? >
May 22 14:39:03 new-host-3 systemd[1]: systemd-coredump@0-9862-0.service: Succeeded.
May 22 14:39:03 new-host-3 systemd-coredump[9863]: Process 9857 (cscan) of user 1000 dumped core.
May 22 14:39:03 new-host-3 systemd-coredump[9863]: Resource limits disable core dumping for process 9857 (cscan).
May 22 14:39:03 new-host-3 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@0-9862-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=?>
May 22 14:39:03 new-host-3 systemd[1]: Started Process Core Dump (PID 9862/UID 0).
May 22 14:39:03 new-host-3 systemd[1]: Created slice system-systemd\x2dcoredump.slice.
May 22 14:39:03 new-host-3 audit[9857]: ANOM_ABEND auid=1000 uid=1000 gid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=9857 comm="cscan" exe="/home/pgomes/.cisco/hostscan/bin/cscan" sig=6 res=1
May 22 14:39:02 new-host-3 acvpncli[9853]: Function: WMHintCB File: ../../vpn/Api/ClientIfc.cpp Line: 169 User did not implement WMHintCB.
May 22 14:39:02 new-host-3 acvpncli[9853]: Function: ProcessPromptData File: ../../vpn/Api/SDIMgr.cpp Line: 336 Authentication is not token based (OTP).
May 22 14:39:02 new-host-3 acvpncli[9853]: Message type information sent to the user: Posture Assessment: Initiating...
May 22 14:39:02 new-host-3 acvpncli[9853]: Function: processCSDData File: ../../vpn/Api/ConnectMgr.cpp Line: 4376 CSD launched, continuing until token is validated.
May 22 14:39:02 new-host-3 acvpncli[9853]: Message type information sent to the user: Posture Assessment: Active
May 22 14:39:02 new-host-3 acvpncli[9853]: Function: launchCSDStub File: ../../vpn/Api/ConnectMgr.cpp Line: 9070 CSD successfully launched.
May 22 14:39:02 new-host-3 acvpncli[9853]: Function: doCsdApiLaunch File: ../../vpn/Api/ConnectMgr.cpp Line: 9375 Starting CSD system scan.
May 22 14:39:02 new-host-3 acvpncli[9853]: Function: doCsdApiLaunch File: ../../vpn/Api/ConnectMgr.cpp Line: 9358 CSD prelogin verification finished with return code 0
Please advise as without a working scan utility I cannot connect to my company network with this or any other client.
