F20: Cisco vpn does not launch after a couple of wake-ups from hibernate

[Ranjan Maitra]

Hello,

I have been having a somewhat unusual problem after waking up from
hibernate with the Cisco VPN client. This only happens with F20 -- it
was fine till F19.

Here is what happens: I switch on the Cisco vpnui using:

/opt/cisco/anyconnect/bin/vpnui

The window to connect comes on and vanishes immediately.

Not knowing what is going on, I looked at:

tail -f /var/log/messages

and here is what I get from the time  the client is asked for to the
point of vanishing:

Jan  5 18:55:59 alakananda acvpnui[9684]: Initializing vpnapi version
3.1.04072 (). 
Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 100 No profile is
available. 
Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
getCurrentState File: ../../vpn/Api/ClientIfcBase.cpp Line: 2058 API
service not ready 
Jan  5 18:55:59 alakananda acvpnui[9684]: Current
Preference Settings: ServiceDisable: false CertificateStoreOverride:
false CertificateStore: All ShowPreConnectMessage: false
AutoConnectOnStart: false MinimizeOnConnect: true LocalLanAccess: false
AutoReconnect: true AutoUpdate: true ProxySettings: Native
AllowLocalProxyConnections: true PPPExclusion: Disable
PPPExclusionServerIP:  EnableScripting: false
TerminateScriptOnNextEvent: false AuthenticationTimeout: 12
IPProtocolSupport: IPv4,IPv6 AllowManualHostInput: true
BlockUntrustedServers: true PublicProxyServerAddress: Jan  5 18:55:59
alakananda acvpnui[9684]: Function: CvcGtkNotifyBalloon
File: ../../../vpn/GUI/Linux/CvcGtkNotifyBalloon.cpp Line: 87 Invoked
Function: dlopen Return Code: -33554427 (0xFE000005) Description:
libnotify.so.1: cannot open shared object file: No such file or
directory 
Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
connectTransport File: ../../vpn/Common/IPC/SocketTransport.cpp Line:
995 Invoked Function: ::connect Return Code: 111 (0x0000006F)
Description: unknown 
Jan  5 18:55:59 alakananda acvpnui[9684]:
Function: connectIpc File: ../../vpn/Common/IPC/IPCTransport.cpp Line:
254 Invoked Function: CSocketTransport::connectTransport Return Code:
-31588340 (0xFE1E000C) Description: SOCKETTRANSPORT_ERROR_CONNECT 
Jan 5 18:55:59 alakananda acvpnui[9684]: Function:
terminateIpcConnection File: ../../vpn/Common/IPC/IPCTransport.cpp
Line: 406 Invoked Function: CSocketTransport::writeSocketBlocking
Return Code: -31588319 (0xFE1E0021) Description:
SOCKETTRANSPORT_ERROR_NO_SOCKET_HANDLE:The socket transport does not
possess a valid socket handle. 
Jan  5 18:55:59 alakananda acvpnui [9684]: Function: initIpc
File: ../../vpn/Api/ApiIpc.cpp Line: 423 Invoked Function:
CIpcTransport::connectIpc Return Code: -31588340 (0xFE1E000C)
Description: SOCKETTRANSPORT_ERROR_CONNECT 
Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
initiateAgentConnection File: ../../vpn/Api/ApiIpc.cpp Line: 336
Invoked Function: ApiIpc::initIpc Return Code: -31588340 (0xFE1E000C)
Description: SOCKETTRANSPORT_ERROR_CONNECT 
Jan  5 18:55:59 alakananda acvpnui[9684]: Function: run
File: ../../vpn/Api/ApiIpc.cpp Line: 570 Invoked Function:
ApiIpc::initiateAgentConnection Return Code: -31588340 (0xFE1E000C)
Description: SOCKETTRANSPORT_ERROR_CONNECT 
Jan  5 18:55:59 alakananda acvpnui[9684]: Function: attach
File: ../../vpn/Api/ClientIfcBase.cpp Line: 606 Client failed to
attach. 
Jan  5 18:55:59 alakananda acvpnui [9684]: Function: detach
File: ../../vpn/Api/ClientIfcBase.cpp Line:438 Shutting down vpnapi 
Jan  5 18:55:59 alakananda acvpnui[9684]:
Function: activateConnectEvent File: ../../vpn/Api/ConnectMgr.cpp Line:
1352 NULL object. Cannot establish a connection at this time.

Any suggestions as to what is going wrong. I want to mention that this
is not a problem for the first couple of times the machine is woken up
from hibernation (after reboot). Also, there was not a problem with F19
(but I did go only up to the 3.11 kernel there).

The above behavior is all with an updated F20.

Many thanks and best wishes,
Ranjan

Is this a bug? (Was Re: F20: Cisco vpn does not launch after a couple of wake-ups from hibernate)

[Ranjan Maitra]

So, I have realized that vpnagentd was not running:

/opt/cisco/anyconnect/bin/vpnagentd

file /opt/cisco/anyconnect/bin/vpnagentd 
/opt/cisco/anyconnect/bin/vpnagentd: setuid ELF 64-bit LSB executable,
x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for
GNU/Linux 2.6.15, stripped

Running this command makes it possible to again use the VPN UI.

So, does this mean that sometimes, i.e. after a couple of hibernates,
the agent daemon does not come back up?

Is this a bug? (Most likely so to me, but if so, what should the bug
be filed against?)

Again, this worked fine up to F19 (however, I did not get to the 3.12 
kernel before switching to F20 at the time of the latter's release).

Many thanks and best wishes,
Ranjan

On Sun, 5 Jan 2014 19:00:30 -0600 Ranjan Maitra
 wrote:
> Hello,
>
> I have been having a somewhat unusual problem after waking up from
> hibernate with the Cisco VPN client. This only happens with F20 -- it
> was fine till F19.
>
> Here is what happens: I switch on the Cisco vpnui using:
>
> /opt/cisco/anyconnect/bin/vpnui
>
> The window to connect comes on and vanishes immediately.
>
> Not knowing what is going on, I looked at:
>
> tail -f /var/log/messages
>
> and here is what I get from the time  the client is asked for to the
> point of vanishing:
>
> Jan  5 18:55:59 alakananda acvpnui[9684]: Initializing vpnapi version
> 3.1.04072 (). 
> Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
> loadProfiles File: ../../vpn/Api/ProfileMgr.cpp Line: 100 No profile is
> available. 
> Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
> getCurrentState File: ../../vpn/Api/ClientIfcBase.cpp Line: 2058 API
> service not ready 
> Jan  5 18:55:59 alakananda acvpnui[9684]: Current
> Preference Settings: ServiceDisable: false CertificateStoreOverride:
> false CertificateStore: All ShowPreConnectMessage: false
> AutoConnectOnStart: false MinimizeOnConnect: true LocalLanAccess: false
> AutoReconnect: true AutoUpdate: true ProxySettings: Native
> AllowLocalProxyConnections: true PPPExclusion: Disable
> PPPExclusionServerIP:  EnableScripting: false
> TerminateScriptOnNextEvent: false AuthenticationTimeout: 12
> IPProtocolSupport: IPv4,IPv6 AllowManualHostInput: true
> BlockUntrustedServers: true PublicProxyServerAddress: Jan  5 18:55:59
> alakananda acvpnui[9684]: Function: CvcGtkNotifyBalloon
> File: ../../../vpn/GUI/Linux/CvcGtkNotifyBalloon.cpp Line: 87 Invoked
> Function: dlopen Return Code: -33554427 (0xFE000005) Description:
> libnotify.so.1: cannot open shared object file: No such file or
> directory 
> Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
> connectTransport File: ../../vpn/Common/IPC/SocketTransport.cpp Line:
> 995 Invoked Function: ::connect Return Code: 111 (0x0000006F)
> Description: unknown 
> Jan  5 18:55:59 alakananda acvpnui[9684]:
> Function: connectIpc File: ../../vpn/Common/IPC/IPCTransport.cpp Line:
> 254 Invoked Function: CSocketTransport::connectTransport Return Code:
> -31588340 (0xFE1E000C) Description: SOCKETTRANSPORT_ERROR_CONNECT 
> Jan 5 18:55:59 alakananda acvpnui[9684]: Function:
> terminateIpcConnection File: ../../vpn/Common/IPC/IPCTransport.cpp
> Line: 406 Invoked Function: CSocketTransport::writeSocketBlocking
> Return Code: -31588319 (0xFE1E0021) Description:
> SOCKETTRANSPORT_ERROR_NO_SOCKET_HANDLE:The socket transport does not
> possess a valid socket handle. 
> Jan  5 18:55:59 alakananda acvpnui [9684]: Function: initIpc
> File: ../../vpn/Api/ApiIpc.cpp Line: 423 Invoked Function:
> CIpcTransport::connectIpc Return Code: -31588340 (0xFE1E000C)
> Description: SOCKETTRANSPORT_ERROR_CONNECT 
> Jan  5 18:55:59 alakananda acvpnui[9684]: Function:
> initiateAgentConnection File: ../../vpn/Api/ApiIpc.cpp Line: 336
> Invoked Function: ApiIpc::initIpc Return Code: -31588340 (0xFE1E000C)
> Description: SOCKETTRANSPORT_ERROR_CONNECT 
> Jan  5 18:55:59 alakananda acvpnui[9684]: Function: run
> File: ../../vpn/Api/ApiIpc.cpp Line: 570 Invoked Function:
> ApiIpc::initiateAgentConnection Return Code: -31588340 (0xFE1E000C)
> Description: SOCKETTRANSPORT_ERROR_CONNECT 
> Jan  5 18:55:59 alakananda acvpnui[9684]: Function: attach
> File: ../../vpn/Api/ClientIfcBase.cpp Line: 606 Client failed to
> attach. 
> Jan  5 18:55:59 alakananda acvpnui [9684]: Function: detach
> File: ../../vpn/Api/ClientIfcBase.cpp Line:438 Shutting down vpnapi 
> Jan  5 18:55:59 alakananda acvpnui[9684]:
> Function: activateConnectEvent File: ../../vpn/Api/ConnectMgr.cpp Line:
> 1352 NULL object. Cannot establish a connection at this time.
>
> Any suggestions as to what is going wrong. I want to mention that this
> is not a problem for the first couple of times the machine is woken up
> from hibernation (after reboot). Also, there was not a problem with F19
> (but I did go only up to the 3.11 kernel there).
>
> The above behavior is all with an updated F20.
>
> Many thanks and best wishes,
> Ranjan
>
> -- 
> Important Notice: This mailbox is ignored: e-mails are set to be
> deleted on receipt. Please respond to the mailing list if appropriate.
> For those needing to send personal or professional e-mail, please use
> appropriate addresses.
>
> GET FREE SMILEYS FOR YOUR IM & EMAIL - Learn more at http://www.inbox.com/smileys
> Works with AIM®, MSN® Messenger, Yahoo!® Messenger, ICQ®, Google Talk™ and most webmails
>
> -- 
> users mailing list
> [e-mail]
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org

[poma]

On 06.01.2014 02:00, Ranjan Maitra wrote:
> Hello,
>
> I have been having a somewhat unusual problem after waking up from
> hibernate with the Cisco VPN client. This only happens with F20 -- it
> was fine till F19.
>
> Here is what happens: I switch on the Cisco vpnui using:
>
> /opt/cisco/anyconnect/bin/vpnui

NetworkManager-openconnect
NetworkManager-vpnc

NetworkManager discussions
https://mail.gnome.org/mailman/listinfo/networkmanager-list

poma

[Ranjan Maitra]

On Mon, 6 Jan 2014 18:29:12 +0100 poma 
wrote:
> On 06.01.2014 02:00, Ranjan Maitra wrote:
> > Hello,
> >
> > I have been having a somewhat unusual problem after waking up from
> > hibernate with the Cisco VPN client. This only happens with F20 -- it
> > was fine till F19.
> >
> > Here is what happens: I switch on the Cisco vpnui using:
> >
> > /opt/cisco/anyconnect/bin/vpnui
>
> NetworkManager-openconnect
> NetworkManager-vpnc
>
> NetworkManager discussions
> https://mail.gnome.org/mailman/listinfo/networkmanager-list

Thank you for this. However, I am not completely sure what this means
in my context. As I mentioned earlier, my vpnui comes up fine for the
first time after reboot (and a second time after a wake-up from
hibernate). I have seemingly localized the problem to the vpnd not
getting activated always after a wakeup from hibernate. Is the above
going to take care of this problem.  I may mention that other than the
VPN, the network comes back up just fine.

Many thanks and best,
Ranjan

____________________________________________________________
FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family!
Visit http://www.inbox.com/photosharing to find out more!

[poma]

On 07.01.2014 20:43, Ranjan Maitra wrote:
> On Mon, 6 Jan 2014 18:29:12 +0100 poma 
> wrote:
> > On 06.01.2014 02:00, Ranjan Maitra wrote:
> > > Hello,
> > >
> > > I have been having a somewhat unusual problem after waking up from
> > > hibernate with the Cisco VPN client. This only happens with F20 -- it
> > > was fine till F19.
> > >
> > > Here is what happens: I switch on the Cisco vpnui using:
> > >
> > > /opt/cisco/anyconnect/bin/vpnui
> >
> > NetworkManager-openconnect
> > NetworkManager-vpnc
> >
> > NetworkManager discussions
> > https://mail.gnome.org/mailman/listinfo/networkmanager-list
>
> Thank you for this. However, I am not completely sure what this means
> in my context. As I mentioned earlier, my vpnui comes up fine for the
> first time after reboot (and a second time after a wake-up from
> hibernate). I have seemingly localized the problem to the vpnd not
> getting activated always after a wakeup from hibernate. Is the above
> going to take care of this problem.  I may mention that other than the
> VPN, the network comes back up just fine.

If you insist on using proprietary solution rather than free and open
one, go ahead, knock yourself out.
https://wiki.archlinux.org/index.php/Systemd/Services#Cisco_AnyConnect_VPN
http://0pointer.de/blog/projects/systemd-for-admins-3.html
Good luck with that, Ran. ;)

poma

[Ranjan Maitra]

> If you insist on using proprietary solution rather than free and open
> one, go ahead, knock yourself out.
> https://wiki.archlinux.org/index.php/Systemd/Services#Cisco_AnyConnect_VPN
> http://0pointer.de/blog/projects/systemd-for-admins-3.html
> Good luck with that, Ran. ;)

Thanks for your e-mail, poma. Btw, you got my name wrong, but anyway.

Well, I agree with you on staying off proprietary solutions, but as with
flash, I don't really have an option here. The Cisco vpn is needed to
be a node on my employer's network sot that I can access stuff that
they have a license for. It is the only thing that they will accept.
Openvpn never worked for accessing there: I have tried earlier and for
insane amounts of time (a few Fedora's ago, to no avail.)

I will look into this, but it seems that the agent is not started or
killed after a couple of wakeups from hibernate. This did not use to be
an issue earlier (F19 and before).

Best wishes,
Ranjan

____________________________________________________________
FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family!
Visit http://www.inbox.com/photosharing to find out more!

[poma]

On 09.01.2014 15:21, Ranjan Maitra wrote:
> Thanks for your e-mail, poma. Btw, you got my name wrong, but anyway.
>
> Well, I agree with you on staying off proprietary solutions, but as with
> flash, I don't really have an option here. The Cisco vpn is needed to
> be a node on my employer's network sot that I can access stuff that
> they have a license for. It is the only thing that they will accept.
> Openvpn never worked for accessing there: I have tried earlier and for
> insane amounts of time (a few Fedora's ago, to no avail.)
>
> I will look into this, but it seems that the agent is not started or
> killed after a couple of wakeups from hibernate. This did not use to be
> an issue earlier (F19 and before).

OK Ranjan.
However people do use 'Open client for Cisco AnyConnect VPN' &
'NetworkManager VPN plugin for openconnect' as a viable solution.
For troubleshooting contact folks on the corresponding mailing lists.

poma

Shumway should be part of the upcoming version of Firefox.
http://mozilla.github.io/shumway/

[Fred Smith]

On Thu, Jan 09, 2014 at 08:21:06AM -0600, Ranjan Maitra wrote:
> > If you insist on using proprietary solution rather than free and open
> > one, go ahead, knock yourself out.
> > https://wiki.archlinux.org/index.php/Systemd/Services#Cisco_AnyConnect_VPN
> > http://0pointer.de/blog/projects/systemd-for-admins-3.html
> > Good luck with that, Ran. ;)
>
> Thanks for your e-mail, poma. Btw, you got my name wrong, but anyway.
>
> Well, I agree with you on staying off proprietary solutions, but as with
> flash, I don't really have an option here. The Cisco vpn is needed to
> be a node on my employer's network sot that I can access stuff that
> they have a license for. It is the only thing that they will accept.
> Openvpn never worked for accessing there: I have tried earlier and for
> insane amounts of time (a few Fedora's ago, to no avail.)
>
> I will look into this, but it seems that the agent is not started or
> killed after a couple of wakeups from hibernate. This did not use to be
> an issue earlier (F19 and before).

I have missed the earlier parts of this thread, so plsl forgive me if  
I'm re-covering something.

for cisco vpn thyere's vpnc, which should be available in the standard
repos, and for their SSL vpn there's anyconnect. I've used both and have
had good luyck with both,

[Ranjan Maitra]

On Thu, 9 Jan 2014 16:06:33 -0500 Fred Smith
 wrote:
> On Thu, Jan 09, 2014 at 08:21:06AM -0600, Ranjan Maitra wrote:
> > > If you insist on using proprietary solution rather than free and open
> > > one, go ahead, knock yourself out.
> > > https://wiki.archlinux.org/index.php/Systemd/Services#Cisco_AnyConnect_VPN
> > > http://0pointer.de/blog/projects/systemd-for-admins-3.html
> > > Good luck with that, Ran. ;)
> >
> > Thanks for your e-mail, poma. Btw, you got my name wrong, but anyway.
> >
> > Well, I agree with you on staying off proprietary solutions, but as with
> > flash, I don't really have an option here. The Cisco vpn is needed to
> > be a node on my employer's network sot that I can access stuff that
> > they have a license for. It is the only thing that they will accept.
> > Openvpn never worked for accessing there: I have tried earlier and for
> > insane amounts of time (a few Fedora's ago, to no avail.)
> >
> > I will look into this, but it seems that the agent is not started or
> > killed after a couple of wakeups from hibernate. This did not use to be
> > an issue earlier (F19 and before).
>
> I have missed the earlier parts of this thread, so plsl forgive me if  
> I'm re-covering something.
>
> for cisco vpn thyere's vpnc, which should be available in the standard
> repos, and for their SSL vpn there's anyconnect. I've used both and have
> had good luyck with both,

Thanks! I guess you meant openconnect: I will take a look. I notice
from the webpage

http://www.infradead.org/openconnect/mail.html

that there are two gui's: NetworkManager-openconnect and connman: any
preferences for either?

many thanks,
ranjan

____________________________________________________________
FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family!
Visit http://www.inbox.com/photosharing to find out more!

[poma]

On 09.01.2014 23:06, Ranjan Maitra wrote:
> Thanks! I guess you meant openconnect: I will take a look. I notice
> from the webpage
>
> http://www.infradead.org/openconnect/mail.html
>
> that there are two gui's: NetworkManager-openconnect and connman: any
> preferences for either?

http://blogs.gnome.org/dcbw/2009/06/25/networkmanager-and-connman/

poma

[Ranjan Maitra]

On Fri, 10 Jan 2014 04:34:58 +0100 poma 
wrote:
> On 09.01.2014 23:06, Ranjan Maitra wrote:
> > Thanks! I guess you meant openconnect: I will take a look. I notice
> > from the webpage
> >
> > http://www.infradead.org/openconnect/mail.html
> >
> > that there are two gui's: NetworkManager-openconnect and connman: any
> > preferences for either?
>
> http://blogs.gnome.org/dcbw/2009/06/25/networkmanager-and-connman/

Thanks! Btw, I was able to get NetworkManager work with openconnect.
(It however had troubled coming up after a hibernate, but did
eventually make it after a few tries. Not clear why this happened.)
So, at least before Cisco breaks this perhaps (don't really know if it
is part of their plan a la Microsoft), we are good with openconnect.

Judging by it, I will soon have a completely OSS laptop (if flash can
be gotten rid of).

Best wishes,
Ranjan

____________________________________________________________
FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family!
Visit http://www.inbox.com/photosharing to find out more!

[poma]

On 10.01.2014 04:55, Ranjan Maitra wrote:
> Thanks! Btw, I was able to get NetworkManager work with openconnect.
> (It however had troubled coming up after a hibernate, but did
> eventually make it after a few tries. Not clear why this happened.)

# cp /usr/lib/systemd/system/NetworkManager.service /etc/systemd/system/

Difference(log-level):
- /usr/lib/systemd/system/NetworkManager.service
  ExecStart=/usr/sbin/NetworkManager --no-daemon
- /etc/systemd/system/NetworkManager.service
  ExecStart=/usr/sbin/NetworkManager --no-daemon --log-level=DEBUG

# systemctl reenable NetworkManager

# systemctl restart NetworkManager

# systemctl hibernate

Resume from hibernate(thaw)

# journalctl -u NetworkManager -b -x > NetworkManager-log-level-DEBUG.txt

- NetworkManager discussions
  https://mail.gnome.org/mailman/listinfo/networkmanager-list
- Red Hat Bugzilla
  https://bugzilla.redhat.com/

poma