notes

Well, time for an update here.  This is my first 64bit system I’ve had so things were a bit different.  I followed Eric Hameleers (Alien BOB) instructions on setting up a multilib Slackware64 system and that has been going well.  I had a conference call this morning so I spent last night ensuring that I would be able to remote in to work if they needed anything.  Here is what I found.  Being unsure if the Checkpoint SNX app was 64 bit compatible, I chose to first run the 32dev.sh script to get me in my 32bit environment.

. /etc/profile.d/32dev.sh

After doing that, I downloaded the libprelude slackbuild and the linux-pam slackbuild, both from slacky.eu.  Note that I did get the sources for these slackbuilds and compile them myself since I am running 13.1 and a multilib 64bit system.  libprelude compiled and created a package just fine, while linux-pam did not.  While compiling linux-pam, I got an error

...pam_conv_l.c:843: undefined reference to `yywrap'

After searching around the net, I saw a few references stating that you needed to have flex installed, which does come with the default full install.  Being persistent, I grabbed the flex source package from my closest Slackware mirror and recompiled it in my 32bit environment I set up earlier with the 32dev.sh script.  After upgrading the current flex package installed with the newly compiled package, I was able to build my linux-pam package and install it.  After that, I just installed the Checkpoint SNX script as you would any other script and was able to connect to my company’s VPN without issue.

Well, time for an update…

Download linux-pam and libprelude slackbuilds from here:

http://mirror.yandex.ru/mopslinux/source/pam/

Build and install libprelude first then build and install linux-pam.

Download and install Checkpoint SNX from here:

https://supportcenter.checkpoint.com/supportcenter/portal/user/anon/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=8724

After that, connect to your company VPN as you normally would.  I didn’t need the scripts used last time for Slackware 12.1.

Do your normal fix-up on their machine, then set this as their homepage for Internet Explorer after installing firefox:

Use Firefox!

All of this should be done as root!

cd ~

modprobe tun

wget http://arenahome.dyndns.org/dir/N%20Linux/snx/snx_install.sh

sh snx_install.sh

wget http://www2.linuxpackages.net/packages/Slackware/Slackware-12.1/Library/Linux-PAM/linux-pam-1.0.2-i486-1gds.tgz

installpkg linux-pam-1.0.2-i486-1gds.tgz

echo # TUN interface for ssl network extender >> /etc/rc.d/rc.modules

echo /sbin/modprobe tun >> /etc/rc.d/rc.modules

cat << EOF > /usr/bin/snx_up.sh

#!/bin/sh

LD_PRELOAD=/usr/i486-slackware-linux/lib/libstdc++-libc6.2-2.so.3 snx -s your.server.com -u your_user_name

EOF

chmod +x /usr/bin/snx_up.sh

cat << EOF > /usr/bin/snx_down.sh

#!/bin/sh

LD_PRELOAD=/usr/i486-slackware-linux/lib/libstdc++-libc6.2-2.so.3 snx -d

EOF

chmod +x /usr/bin/snx_down.sh

Then just run snx_up.sh to start your vpn connection and enter your password.  To disconnect, just run snx_down.sh