Juniper 网络连接进行身份验证,然后显示未进行身份验证

Juniper 网络连接进行身份验证,然后显示未进行身份验证

我正在尝试通过 VPN 进入我的工作地点。以前这对我来说是可行的,但现在我不知道发生了什么,它只是停止工作了。我确实更新了我的 Linux 机器。

我正在运行:
juniper network connect v8.0
gentoo linux

Passcode: my-pass-code
mkdir(/root/.juniper_networks) failed: Permission denied
20151031170302.836047 ncsvc[p4202.t4202] ncsvc.info New ncsvc log level set to 5 (nccommon.cpp:75)
20151031170302.836174 ncsvc[p4202.t4202] sysdeps.info restoring DNS settings... (sysdeps.cpp:951)
20151031170302.836216 ncsvc[p4202.t4202] sysdeps.error rename /etc/jnpr-nc-resolv.conf => /etc/resolv.conf failed wirh error 2 (sysdeps.cpp:954)
20151031170302.836247 ncsvc[p4202.t4202] sysdeps.error rename /etc/jnpr-nc-hosts.bak => /etc/hosts failed wirh error 2 (sysdeps.cpp:958)
Connecting to vpn.my-place.com : 443
20151031170302.850113 ncsvc[p4202.t4202] ncsvc.info Connecting to vpn.my-place.com:443 (ncsvc.cpp:494)
20151031170302.956606 ncsvc[p4202.t4202] dsclient.para DSClient::authenticate(): user:me, password:..., cert:0, realm:MYVPN (dsclient.cpp:247)
20151031170303.5181 ncsvc[p4202.t4202] DSInet.info IVE host vpn.my-place.com resolved to a.b.c.c, port 443 (dsinet.cpp:311)
20151031170303.5579 ncsvc[p4202.t4202] http_connection.para Starting a timed connect with SSL session 0x94d1e90, proxy (null):0, and timeout 30 (http_connection.cpp:232)
20151031170303.5628 ncsvc[p4202.t4202] http_connection.para Entering state_start_connection (http_connection.cpp:344)
20151031170303.5674 ncsvc[p4202.t4202] http_connection.para Remote Address: ip=a.b.c.c, port=443, familiy=2 (http_connection.cpp:788)
20151031170303.5715 ncsvc[p4202.t4202] http_connection.para Remote Server=vpn.my-place.com (http_connection.cpp:790)
20151031170303.5757 ncsvc[p4202.t4202] http_connection.para Local Address: ip=0.0.0.0, port=0, familiy=2 (http_connection.cpp:795)
20151031170303.5796 ncsvc[p4202.t4202] http_connection.para Proxy Address: ip=(null), port=0, familiy=0 (http_connection.cpp:800)
20151031170303.111713 ncsvc[p4202.t4202] http_connection.para Entering state_continue_connection (http_connection.cpp:361)
20151031170303.111853 ncsvc[p4202.t4202] http_connection.para Entering state_ssl_connect (http_connection.cpp:531)
20151031170303.334069 ncsvc[p4202.t4202] dsssl.para SSL connect ssl=0x94d29b0/sd=3 connection using cipher AES256-SHA (DSSSLSock.cpp:1428)
20151031170303.334388 ncsvc[p4202.t4202] dsssl.error ive_cert_hash = 9adf4asdffadsfa2fas5f2asdfas3e, computed_hash = 9fadfasfdfasdfdasdfa25fasdf37 (DSSSLSock.cpp:1563)
20151031170303.334445 ncsvc[p4202.t4202] http_connection.para Returning DSHTTP_ERROR from state_ssl_connect (http_connection.cpp:546)
20151031170303.334488 ncsvc[p4202.t4202] http_connection.para do_connect error: state 5, err 5 (http_connection.cpp:334)
20151031170303.334730 ncsvc[p4202.t4202] DSInet.error failed to connect to (vpn.my-place.com) error 100005 (dsinet.cpp:383)
20151031170303.334783 ncsvc[p4202.t4202] dsclient.error unable to open URL: (https://vpn.my-place.com/) with error -7 (dsclient.cpp:262)
20151031170303.334823 ncsvc[p4202.t4202] ncapp.error Failed to authenticate with IVE. Error 2 (ncsvc.cpp:225) 
20151031170303.334877 ncsvc[p4202.t4202] dsncuiapi.para DsNcUiApi::~DsNcUiApi (dsncuiapi.cpp:83)

对于具有 rwx 权限的 root 用户来说,目录 /root/.juniper_networks 确实存在,但第 2 行仍然会出现错误。此外,管理员告诉我这是成功验证,上面的日志中也这么说,但随后不久又出现了错误。

答案1

你有这句话,

  ncsvc[p4202.t4202] dsssl.error ive_cert_hash = 9adf4asdffadsfa2fas5f2asdfas3e, computed_hash = 9fadfasfdfasdfdasdfa25fasdf37 (DSSSLSock.cpp:1563)

这表明您服务器上的自签名证书与向您提供的证书不匹配。您可以尝试通过以下方式检查服务器上的证书安装情况:https://cryptoreport.thawte.com/checker/除此之外,它看起来像是一个证书问题,而不是连接/权限/...问题。

相关内容