Error Install Fedora 36 #12

mordp1 · 2022-12-15T09:23:51Z

mordp1
Dec 15, 2022

When I execute the install, didn't work and received this option. I've excluded it and tried again but the same

Running hooks in /etc/ca-certificates/update.d...

done.
done.
Installation successfull
Installing CShell
/root/cshell_install.sh: line 1: syntax error near unexpected token `newline'
/root/cshell_install.sh: line 1: `<html>'
InstallChroot->chrootEnd: Something went wrong. Chroot unmounted. Fix it or delete /opt/chroot and run this script again

ruyrybeyro · 2022-12-15T09:29:50Z

ruyrybeyro
Dec 15, 2022
Maintainer

Morning,

It seems it was unable to download cshell_install.sh; what does cat /opt/chroot/root/cshell_install.sh show? Some error probably?

0 replies

mordp1 · 2022-12-15T10:22:18Z

mordp1
Dec 15, 2022
Author

Nice, very fast answer! =D

Yeap! You right!

COMPANY - Page not found. The specified page could not be found. (404)</title>

I use the command to install this way:

./vpn.sh -i --vpn=vpn.company.com.br

So, I suppose the script mounts the URL and tries to connect it, but how can I know this? What do you indicate?

0 replies

ruyrybeyro · 2022-12-15T10:26:08Z

ruyrybeyro
Dec 15, 2022
Maintainer

When you open vpn.company.com.br in a browser does it open? Which URL shows there? Login/Login?

9 replies

mordp1 Dec 15, 2022
Author

No, I do not have any option.
For me show only the Form to add a Web Address and a link for World Clock. ( But world clock is a link to 127.0.0.1)

mordp1 Dec 15, 2022
Author

I mount a docker container with Ubuntu, did download and installed:
snx_install_linux30.sh
snxconnect.py
I executed :
python3 snxconnect.py -H vpn.company.com.br -U user -D -L ssl_vpn_Azure-MFA

This way works!

root@64db127076e5:/# python3 vpn.py -H vpn.company.com.br -U user -D -L ssl_vpn_Azure-MFA
Password: 
sslvpn/Login/Login
https://vpn.company.com.br/sslvpn/Login/Login
sslvpn/Login/../Login/JS_RSA.js
{'modulus': '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', 'exponent': '010001'}
sslvpn/Login/Login
https://vpn.company.com.br/sslvpn/Portal/Main
Date: Thu, 15 Dec 2022 12:50:51 GMT
Server: CPWS
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-store
Vary: User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8


purl: https://vpn.company.com.br/sslvpn/Portal/Main
https://vpn.company.com.br/sslvpn/SNX/extender
Date: Thu, 15 Dec 2022 12:50:53 GMT
Server: CPWS
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
Pragma: no-cache
Cache-Control: no-store
X-UA-Compatible: requiresActiveX=true
Set-Cookie: CPCVPN_CSHELL_SEQ_MODES=4; expires=Wed, 15-Mar-2023 12:50:53 GMT; Max-Age=7776000; path=/; secure; httponly
Vary: User-Agent
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

SNX connected, to leave VPN open, leave this running!

But I would like to run with Fedora...

ruyrybeyro Dec 15, 2022
Maintainer

that seems to suggest you are working with an older version of Checkpoint
a docker would run the same way both in Ubuntu and Fedora

Would you also be able to show me the script running with -d, for having debug info?

ruyrybeyro Dec 15, 2022
Maintainer

Checked you snx link. It is indeed for Checkpoint version 75 or something like that. This script is for more recent versions, 80.10 upwards.

See my article in stack exchange for older, 7x versions: https://unix.stackexchange.com/questions/450229/getting-checkpoint-vpn-ssl-network-extender-working-in-the-command-line

edit: I forgot, it not indeed supported for Fedora...it has to be either a specially crafted docker or chroot. you can always install manually your snx in my chroot, I think, I would swear cshell setup is only done at the end of the chroot setup.

mordp1 Dec 16, 2022
Author

Right, I will try.

ruyrybeyro · 2022-12-15T20:44:07Z

ruyrybeyro
Dec 15, 2022
Maintainer

I have just added experimental code to try and warn about an R70 CheckPoint. The script can be extended to support R70+, however I am afraid it will become yet more complicated supporting obsolete hardware and I have not access to one to test it out.

2 replies

mordp1 Dec 16, 2022
Author

I pull your updates. script "die" at this part:

....
I: Configuring apt...
I: Configuring util-linux...
I: Configuring mount...
I: Configuring libc-bin...
I: Unpacking the base system...
I: Base system installed successfully.
+ createCshellUser
+ getent group '^cshell:'
+ groupadd --gid 9000 cshell
+ getent passwd '^cshell:'
+ useradd --uid 9000 --gid 9000 --no-create-home --home /home/cshell --shell /bin/false cshell
+ test -d /home/cshell
+ mkdir -p /home/cshell
+ chown -R cshell:cshell /home/cshell
+ chmod -R u=rwx,g=rwx,o= /home/cshell
+ buildFS
+ cd /opt/chroot
+ mkdir -p tmp/.X11-unix
+ mkdir -p /opt/chroot//home/cshell/.config
+ echo 'TZ=Europe/Lisbon; export TZ'
+ curl -k --fail --silent --output /opt/chroot/root/snx_install.sh https://vpn.company.com.br/sslvpn/SNX/INSTALL/snx_install.sh
+ curl -k --fail --silent --output /opt/chroot/root/cshell_install.sh https://vpn.company.com.br/sslvpn/SNX/INSTALL/cshell_install.sh
+ die 'could not download cshell_install.sh'
+ echo 'InstallChroot->buildFS: could not download cshell_install.sh'
InstallChroot->buildFS: could not download cshell_install.sh
+ exit 2

ruyrybeyro Dec 16, 2022
Maintainer

Thanks for the update. it is behaving better, the order of curl arguments seems to make a difference. The behaviour is consistent with it being a R70+ appliance though, will have to make more changes.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Error Install Fedora 36 #12

{{title}}

Replies: 4 comments 11 replies

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Select a reply

Error Install Fedora 36 #12

mordp1 Dec 15, 2022

Replies: 4 comments · 11 replies

ruyrybeyro Dec 15, 2022 Maintainer

mordp1 Dec 15, 2022 Author

ruyrybeyro Dec 15, 2022 Maintainer

mordp1 Dec 15, 2022 Author

mordp1 Dec 15, 2022 Author

ruyrybeyro Dec 15, 2022 Maintainer

ruyrybeyro Dec 15, 2022 Maintainer

mordp1 Dec 16, 2022 Author

ruyrybeyro Dec 15, 2022 Maintainer

mordp1 Dec 16, 2022 Author

ruyrybeyro Dec 16, 2022 Maintainer

mordp1
Dec 15, 2022

Replies: 4 comments 11 replies

ruyrybeyro
Dec 15, 2022
Maintainer

mordp1
Dec 15, 2022
Author

ruyrybeyro
Dec 15, 2022
Maintainer

mordp1 Dec 15, 2022
Author

mordp1 Dec 15, 2022
Author

ruyrybeyro Dec 15, 2022
Maintainer

ruyrybeyro Dec 15, 2022
Maintainer

mordp1 Dec 16, 2022
Author

ruyrybeyro
Dec 15, 2022
Maintainer

mordp1 Dec 16, 2022
Author

ruyrybeyro Dec 16, 2022
Maintainer