Upgrade disables vpn client kvpnc

[A.Mon]

Binary package hint: kvpnc

After upgrading from xubuntu feisty to gutsy, kvpnc reported that pkcs11-tool was not available and would not allow a connection.
Manually adding the package opensc which contained pkcs11-tool resolved the issue.

[Matthew Tighe (tighem)]

Didn't solve vpnc issue for me put installing the pkcs11-tool fixed the cisco vpnclient.

[A.Mon (amonroe-gmail)]

After the most recent update kvpnc now no longer works. Using the vpnc command line I'm able to connect fine. The failure is immediate. I can't locate where a timeout setting would be.

Here's the edited message I receive as a pop up:

Timeout while connecting to {host} ({group}) after 0s. Please check if the VPN server is reachable and the settings (UDP/TCP, local port, UDP encapsulation port) are correct. Maybe the timeout must be increased too.

Here's the edited debug output:

debug: Preserving network environment
debug: Connect try requested, profile: {group}, type: Cisco
debug: vpnc: /usr/sbin/vpnc
info: Gateway hostname ({host}) resolved to "{host-ip}".
debug: vpnc version (major): "0"
debug: vpnc version (minor): "4"
debug: vpnc version (subminor): "0"
debug: Default interface: "eth1".
debug: IP address of default interface: "{local-ip}".
debug: VpncScript: /root/.kde/share/apps/kvpnc/vpnc-script.{group}
debug: Support for TUN/TAP found (compiled into kernel or kernel module already loaded).
debug: Using UDP.
debug: Using userdefined UDP port "10000."
debug: Using tunnel device type: TUN.
info: Trying to connect to server "{host}" ({host-ip}) with user "{user}" and IPSec ID "{group}"...
debug: vpnc arguments: /usr/sbin/vpnc --script /root/.kde/share/apps/kvpnc/vpnc-script.{group} --pid-file /root/.kde/share/apps/kvpnc/vpnc-pid.{group}.pid --natt-mode cisco-udp --udp-port 10000 --ifmode tun -
debug: "vpnc" started.
debug: Timeout while connecting to {host}. vpnc connect process will be killed.!
debug: Connection failed (timeout).
debug: Disconnect requested
debug: Not connected.

[A.Mon (amonroe-gmail)]

Finally figured it out. I had set the Peer Timeout to 0 on the Connection Specific/Cisco config to disable the dead peer detection which was fixed in a later version. Strangely, having that at 0, doesn't disable it anymore, so it could still be considered a bug.

[Matthew Tighe (tighem)]

I'm no longer having issues with this in Gutsy.

[Sarah Kowalik (hobbsee-deactivatedaccount)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 status fixreleased

Matthew Tighe wrote:
> I'm no longer having issues with this in Gutsy.
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHBywF7/o1b30rzoURAq/TAJsHp69SOaLzJKio6NdhpsJoJthcKwCgkwaX
lKIUqb41pS8YMuCGj4gpghY=
=KHDh
-----END PGP SIGNATURE-----