Simple Single Sign-On
October 4th, 2011
It is possible to create a single sign-on system using only the Java jdk and its built-in support for public key infrastructure (PKI) and digital signatures.
There are a number of problems getting the Juniper Network Connect VPN client running on the Mac. The permissions on directories are not correct after install, there are issues with the 64 bit kernel, problems if VMWare or Parallels is installed, etc. These instructions are the result of research I did to get Network Connect 6.2.0 running on OS X 10.6.8 (Snow Leopard). If you have Network Connect installed already you should uninstall it completely.
To Remove Network Connect You may not have some of the files listed to run or remove and you can just skip those steps. You should review these steps carefully particularly if you have other Juniper products installed. They remove directories that may include installations of other Juniper products. These instructions should be run from your home directory.
To Install Network Connect
Download NetworkConnect.dmg. I was unable to get the applet installer from the VPN login to work correctly. You can download the dmg file directly from your vpn site. Add the path “/dana-cached/nc/NetworkConnect.dmg” to your VPN URL. If your VPN login is at https://vpn.mycompany.com/... then you would download from https://vpn.mycompany.com/dana-cached/nc/NetworkConnect.dmg. You may have to login to the VPN site to access the download.
Open NetworkConnect.dmg and run the installer. If you get an error saying there is already a version installed do the uninstall steps above.
sudo chmod 755 /usr/local/juniper/nc/[version number]
sudo mkdir ‘/Applications/Network Connect.app/Contents/Frameworks’
If you have VMWare or Parallels installed you will have to deactivate the network interfaces they add. If you don’t do this you will probably be able to connect but have a very high packet loss rate. You may have similar issues with other products that interact with routing. To do this go to ‘System Preferences -> Network’ and change ‘Configure IPv4’ to ‘off’ for these extra interfaces. They will typically be named something like ‘Ethernet Adaptor (en2)‘. Entries like these in the Network Connect log are indicative of this type of problem:
rmon.warn adding back the missing route to 0.0.0.0/0.0.0.0 with gw 0.0.0.0, metric 1, ifid 9 rmon.info Adding route: 0.0.0.0/0.0.0.0 -> 0.0.0.0 (metric:1) (ifid:9) rmon.warn deleted route to 0.0.0.0/0.0.0.0 with gw 0.0.0.0, if_id 7 reappeared rmon.info Deleting route: 0.0.0.0/0.0.0.0 (routemon.cpp:1979) rmon.error Failed to delete route. No such process (routemon.cpp:1014)
sudo chmod 4711 /usr/local/juniper/nc/[version number]/ncproxyd
If your kernel is running in 64 bit mode you will have to change it to 32 bit mode. This may no longer be true with newer versions of Network Connect but it is for version 6.2.0. You can change the kernel to 32 bit mode temporarily by shutting down then holding the 3 and 2 keys down while starting up.
You should now be able to launch Network Connect from Applications. Since you did not use the applet installer you will have to enter your VPN URL. This does not include the path part of the URL. For example: https://vpn.mycompany.com.
It is possible to create a single sign-on system using only the Java jdk and its built-in support for public key infrastructure (PKI) and digital signatures.
As a thought experiment, I muse what could be done to make a cluster to run locally.
How to Set up Google Analytics on localhost for testing in development.
Insert bio here