Creating tun device

Hi
I'm trying to run OpenConnect VPN client as non-root. According to http://www.infradead.org/openconnect/nonroot.html
"it can use a tun device which is created and configured in advance by the root user, and set to be owned by the user who runs OpenConnect."
How do I do that?

I cannot find the proper documentation for "ip tuntap".
Here is the relevant part from the netcfg code which should get you started: netcfg.git src/connections/tuntap line 11.

Similar Messages

  • Error while creating a device.

    Hi all,
    I tried to create a device and when i click on save it is giving an ABAP  dump as below.
    The following error text was processed in the system M01 : CREATE DATA: The specified type is not a valid data type.
    The error occurred on the application server wicomp05_M01_04 and in the work process 0 .
    The termination type was: RABAX_STATE
    The ABAP call stack was:
    Method: GET_USERS_FROM_CDS of program CL_SMMW_USER==================CP
    Method: FETCH_USER_LIST of program /1BCWDY/005OX851WLQW549Y03TQ==CP
    Method: IF_USER_SEARCH~FETCH_USER_LIST of program /1BCWDY/005OX851WLQW549Y03TQ==CP
    Method: ONACTIONON_SEARCH of program /1BCWDY/005OX851WLQW549Y03TQ==CP
    Method: IF_WDR_VIEW_DELEGATE~WD_INVOKE_EVENT_HANDLER of program /1BCWDY/005OX851WLQW549Y03TQ==CP
    Method: INVOKE_EVENTHANDLER of program CL_WDR_DELEGATING_VIEW========CP
    Method: IF_WDR_ACTION~FIRE of program CL_WDR_ACTION=================CP
    Method: DO_HANDLE_ACTION_EVENT of program CL_WDR_WINDOW_PHASE_MODEL=====CP
    Method: PROCESS_REQUEST of program CL_WDR_WINDOW_PHASE_MODEL=====CP
    Method: PROCESS_REQUEST of program CL_WDR_WINDOW=================CP
    Is it any bug in the system?
    I am currently on SP07 stack.
    Please help me in resloving this.
    Thanks and regards,
    Rajesh

    Hi Rohit,
    We didnt applied any sap note after upgrading to SP07.if there any sap note for this error pls let me know.I read in some thread that we have to re generate  the Data Object  userdetails in the basis SC.
    When i regenerated the satus becam red.
    Please find the ST22 dump details.
    root_profile_table = ls_cds_list-tablename .                                          |
    104
    ENDIF.
    105
    106
    ENDLOOP.
    107
    108
    LOOP AT lt_mbo_segm_infm INTO ls_mbo_segm_infm .
    109
    110
    CASE ls_mbo_segm_infm-sfld_orgname .
    111
    112
    WHEN 'LOGIN_NAME' .
    113
    tbl_fld_login_nm = ls_mbo_segm_infm-sfld_name .
    114
    WHEN 'FIRST_NAME' .
    115
    tbl_fld_first_nm = ls_mbo_segm_infm-sfld_name .
    116
    WHEN 'LAST_NAME' .
    117
    tbl_fld_last_nm = ls_mbo_segm_infm-sfld_name .
    118
    WHEN 'LONG_NAME' .
    119
    tbl_fld_full_nm = ls_mbo_segm_infm-sfld_name .
    120
    121
    ENDCASE.
    122
    ENDLOOP.
    123
    124
    125
    DATA : var1 TYPE bapiusname .
    126
    DATA: lt_tmp_ref  TYPE REF TO data.
    127
    DATA: ls_tmp_ref  TYPE REF TO data.
    128
    129
    FIELD-SYMBOLS : <lt_tmp>  TYPE ANY TABLE.
    130
    FIELD-SYMBOLS : <ls_tmp>  TYPE any,
    131
    <area> TYPE any.
    132
    >>>>>
    CREATE DATA lt_tmp_ref TYPE TABLE OF (root_profile_table).
    134
    ASSIGN lt_tmp_ref->* TO  <lt_tmp>.
    135
    136
    CREATE DATA ls_tmp_ref TYPE  (root_profile_table).
    137
    ASSIGN ls_tmp_ref->* TO  <ls_tmp>.
    138
    139
    140
    ***Search based on the Importing Parameter - I_USER_NAME ******
    141
    lv_login_name = i_user_name .
    142
    lv_first_name = i_first_name .
    143
    lv_last_name = i_last_name .
    144
    145
    wildcard_flag = ''.
    146
    REPLACE ALL OCCURRENCES OF '*' IN lv_login_name WITH '%'.
    147
    IF sy-subrc EQ 0.
    148
    wildcard_flag = 'X'.
    149
    ENDIF.
    150
    REPLACE ALL OCCURRENCES OF '*' IN lv_first_name WITH '%'.
    151
    IF sy-subrc EQ 0.
    |  152|    wildcard_flag = 'X'.        
    Thanks and regards,
    rajesh

  • While creating a device category i'm getting an error "enter a valid division via eg01,how can the error be overcom?

    While creating a device category i'm getting an error "enter a valid division via eg01,how can the error be overcome?

    Neha,
    you can do in two ways.
    1. Enter a valid Division which you configured in the system.
    2. Remove the Division as required field. However I suggest it should have a valid division. Why can not you check with your Functional owner?
    Linganna Katigiri

  • When trying to restore an iCloud backup, I receive the error message "Appe-ID cannot be created. invalid device while updating mme delegate account".

    After a complete crash of my iPad 3 (WIFI only) because of updating to iOS 7.03, I try to restore my config from iCloud.
    I managed to get into the settings assistant and enter my Apple-ID (which is valid as checked via iTunes).
    But then I see the error message "Apple ID cannot be created - invalid device while upgrading mme delegate account".
    I have no clue what the mme delegate account is but need my data back.
    Any suggestions?

    All you need to do is restore the iphone in itunes as new
    and then set up as new
    after this is done
    then you can restore from itunes back up with out any error!!
    -Johnny

  • Help me in creating a Device Collection - i have a list of machine name (in a excel or CSV file)

    Hello Guys,
    I have created a Device collection for UK region (2000+ machines)
    Now i have been given a list of 1000 machines to which i need to deploy an application.
    I have to create a device collection for this 1000+ machines. as an input i have a excel or CSV file with a list of machine names.
    Please suggest me how can i create a device collection with CSV file as input. Is my CSV file should be in particular format.
    Or is there any other way i can create a collection for this 1000 specific machines.
    Please suggest.

    My previous post was for sccm 2012.
    here its for 2007
    In the Operating System Deployment section of SCCM right click on Computer Association and choose
    Import Computer Information
    when the wizard appears select Import Computers using a file
    The file itself must contain the information we need in this (CSV) format
    COMPUTERNAME,GUID,MACADDRESS
    (sample below)
    Quote
    deployvista,3ED92460-0448-6C45-8FB8-A60002A5B52F,00:03:FF:71:7D:76
    NEWCOMP1,55555555-5555-5555-5555-555555555555,05:06:07:08:09:0A
    NEWPXE,23CA788C-AF62-6246-9923-816CFB6DD39F,00:03:FF:72:7D:76
    w2k8deploy,BFAD6FF2-A04E-6E41-9060-C6FB9EDD4C54,00:03:FF:77:7D:76
    if we look at the last line, I've marked the computer name in Red, the GUID in BLUE and the MAC address in GREEN, separate these values with commas as above.
    w2k8deploy,BFAD6FF2-A04E-6E41-9060-C6FB9EDD4C54,00:03:FF:77:7D:76
    the file can be a standard TEXT file that you create in notepad, and you can rename it to CSV for easier importing into our wizard...
    so, click on Browse and browse to where you've got your CSV file
    on the Choose Mapping screen, you can select columns and define what to do with that mapping, eg: you could tell it to ignore the GUID value (we won't however)
    on the next screen you'll see a Data Preview, and this is useful as it will highlight any errors it finds with a red exclamation mark, in the example below a typo meant that it correctly flagged the MAC address as invalid
    so edit your CSV file again and fix the error, click previous (back) and try again
    Next choose the target collection where you want these computers to end up in
    review the summary
    in SCCM collections, we can now see the computers we've just imported from File,
    Enjoy
    Nikkoscy

  • OpenConnect VPN client suddenly failing -- Failed to open tun device

    This started recently on my laptop, when trying to connect to my company's Cisco VPN it simply fails and doesn't provide much information:
    Jun 28 08:01:25 winter openconnect[17279]: POST https://vpn.company.net/
    Jun 28 08:01:25 winter openconnect[17279]: Attempting to connect to server X.X.X.X
    Jun 28 08:01:26 winter openconnect[17279]: SSL negotiation with vpn.company.net
    Jun 28 08:01:26 winter openconnect[17279]: Connected to HTTPS on vpn.company.net
    Jun 28 08:01:26 winter openconnect[17279]: XML POST enabled
    Jun 28 08:01:36 winter openconnect[17279]: POST https://vpn.company.net/
    Jun 28 08:01:43 winter openconnect[17279]: Got CONNECT response: HTTP/1.1 200 OK
    Jun 28 08:01:44 winter openconnect[17279]: CSTP connected. DPD 30, Keepalive 20
    Jun 28 08:01:54 winter openconnect[17279]: Failed to open tun device: No such device
    I've made sure that the kernel is configured to load the tun device:
    [root@localhost log]# zgrep CONFIG_TUN /proc/config.gz
    CONFIG_TUN=m
    [root@localhost log]#
    And beyond this, I cannot seem to find any more information on what's going on. I know that the client is actually connecting, because we use a 2-step auth service that pushes requests to my phone, and I receive the request to authorize the login. It simply cannot start the tunnel. I've checked if the tun module is actually loaded, and it is not:
    [root@localhost log]# lsmod | grep -i tun
    [root@localhost log]#
    But as I understand it, this shouldn't matter, correct? The module should get loaded as needed by userspace applcations? I *believe* this started after I had setup an OpenVPN connection to connect to a client's VPN, but I made sure to uninstall OpenVPN (as it's not required by openconnect) and the issue still continues. OpenConnect works totally fine and connects to my company's VPN without a problem, on my desktop running Arch.
    If anyone can shine some light on this I would greatly appreciate it! Thanks!
    EDIT: I found a solution, though maybe someone can shine some light on why this works (and what broke in the first place). I basically insmoded the actual .ko file of the tun module:
    [root@localhost net]# find /lib/modules/ -iname 'tun.ko.gz'
    /lib/modules/3.15.1-1-ARCH/kernel/drivers/net/tun.ko.gz
    [root@localhost net]# insmod /lib/modules/3.15.1-1-ARCH/kernel/drivers/net/tun.ko.gz
    [root@localhost net]# lsmod | grep tun
    tun 20931 0
    [root@localhost net]#
    After doing this I can connect to the VPN without issue.
    Last edited by snowblind (2014-06-28 13:15:47)

    Did you upgrade to a newer kernel recently without a reboot afterwards? See https://bbs.archlinux.org/viewtopic.php?id=163377 for a (perhaps) related problem and solution.

  • ISE Failed to Create Network Device Error

    I am trying to add new network device to a new out of the box ISE 3315 appliance under the Administration > Network Resources section.  I was able to do this the other day but now when I try I get an error that says "Failed to create network device.  System Error!
    Any ideas?  I tried a reboot, and Iam pretty certain I was able to do this a few days ago.  Its a lab device so only I have touch it.  Only other thing I can think to add is that I am running on an eval license until my regular licenses arrive.  From what I see I have 81 days left on my base and advance package eval licenses.

    Is there a certain amount of AAA client for that eval license?
    Thanks,
    Scott Fella
    Sent from my iPhone

  • How to create delivery device for all users ?

    hi
    help needed ...
    i activated delivery tool
    but i dont know how to create email devices for all users
    is there any api / manual action
    obiee version : Oracle Business Intelligence 10.1.3.4.1
    thanks
    yuval

    Yuval..u need to setup SA System in RPD..
    refer http://oraclebizint.wordpress.com/2008/04/25/oracle-bi-ee-101332-sa-system-subject-area-autoloading-profiles-and-bursting/

  • How do you create multile devices on on Windows Vista Computer?

    How does one create multiple devices for the many ipod/ipad products in one household. Each serial number should have it's own device name! 

    Using the minor device number is what I would do if I was writing an ethernet driver for example. But all I want to do is if the user accesses device x it then calls routines via the xinfo streamtab - if device y is accessed then calls use the yinfo streamtab. It is usually a matter of registering the info structures with the system and then associating them with a device. Unfortunately Solaris seems to have :-
    modlinkage -> modldrv -> x_ops -> cb_x_ops -> xinfo
    which is all very well for device x
    but how do you fit/ dev/y
    into the picture.

  • Udev doesn't create sd* devices in /dev

    Today I updated udev package and after it I can't start my system. The booting stops with the message about check filesystem manually. When I tried to do this I couldn't find any sd* devices in /dev. Kernel detects all drives and correspond files presents in /sys/block directory. I can make device files with mknod command using information from /sys.
    How do I make udev to create device files in /dev?
    Sorry for bad English.

    I just found one more interesting thing. When I test udev rules by "udevadm test /block/sdb/sdb2" udev creates correct device files - /dev/disk/ dev/block and /dev/sd*. But at daemon mode - udevd --daemon it doesn't do anything!
    Does anybody know how to fix this?

  • Can't create aggregate device in SL

    Just installed SL and i'm having problems with Audio MIDI Setup, i need to create a new aggregate device to use my mixer etc but when i click the + symbol, the new device will flash in the list and immediately disappear. Is this a bug or am i doing something wrong? This worked fine for me with the same setup in Leopard.

    SOLVED!!!!! I spend about 5 hours one the phone with Cameron at AppleCare as well as some time on my own, and we FINALLY figured it out!
    The important thing is that you can ONLY add aggregate devices from an admin account, but that may not be the only problem. It certainly wasn't in my case. So, here are the steps to follow:
    1. Try adding/removing aggregate devices from an ADMIN account. If this works, you're good. If it doesn't, or if you're already on an admin account, try creating a new admin account.
    2. If even a new admin account doesn't work, REINSTALL SNOW LEOPARD. If you just use the default install, it does an Archive and Install. It only takes about an hour, and you won't even notice OS X has been reinstalled except for the fact you'll have to reinstall the 10.6.1 update and any other misc. updates. Besides, it'll run a lot faster. It's so easy in fact that I'm going to start recommending you reinstall like this every couple months or so just to keep your Mac running in top condition.
    3. NOW try creating aggregate devices from one or more admin account. It should work now. If it doesn't, then you have a different problem and I can't really help you much.
    Hope this helps someone!

  • Failed to create Directx device

    I am running Windows 7 Home Premium 64-bit on a Vaio laptop and occasionally I get "Critical Error, Failed to create Directx device" if I leave an unbfinished game of Freecell open. I always get a Devicex error when my system dose a checkup. How do I fix
    this error?

    Hi,
    Please go the manufacturer official website to download and install the latest graphic card driver for Windows 7.
    In addition, uou may refer to:
    Critical error "failed to create directx device"
    http://answers.microsoft.com/en-us/windows/forum/windows_other-gaming/critical-error-failed-to-create-directx-device/a2061d79-eec4-4363-bc65-83fb1b0adb12
    Hope this helps.
    Vincent Wang
    TechNet Community Support

  • Creating Aggregate devices

    I cannot create aggregate devices with audio/midi setup. Every time I click a component to use it unchecks as fast as it checked. Im at a loss, without hte ability to make ag devices I cannot record at all, but there seems to be no documentation on the problem.

    I cannot create aggregate devices with audio/midi setup. Every time I click a component to use it unchecks as fast as it checked. Im at a loss, without hte ability to make ag devices I cannot record at all, but there seems to be no documentation on the problem.

  • Creating Aggregate device?

    I'm having trouble with creating an Aggregate deivce on 10.6
    Are there any tutorials for 10.6 (not leopard as it seems to have changed in 10.6?)
    I basically want to record in Soundflower but output and monitor on my Edirol USB interface?
    I have both of these selected in Audio MIDI setup and what i thought was "soundflower INPUT and Edirol OUTPUT but can't seem to get it to work
    Any info or tutorials on creating Aggregate Devices in 10.6 or help would be great
    Thanks

    Problem solved: Must be done from an admin account.

  • Re-create audio devices

    Sometimes sound stops working on my desktop, and I'm fairly certain that it's usually, if not always, correlated with usage of Flash. Regardless of the source of the problem, what would the easiest catch-all solution be to restore audio? Rebooting is an annoying last resort.
    I would assume the simplest thing would be to destroy and re-create the existing sound devices (which would be simple to do in a script). What steps are required to do so? Is it as simple as reloading the appropriate modules?

    test1000 wrote:
    test1000 wrote:
    I think it was lsof(fuser probably works aswell) /dev/audio/* that used to work fine to identify processes hogging the audio device(then you could just kill those), but with the .29 kernel/new alsa drivers, i don't know, it doesn't seem to contain the same devices so i don't know.
    Either way, the "audio disappears" problem stopped occuring to me a couple of months ago with some update, might have been a flashplugin update.
    B-Con wrote:
    MarCustomized wrote:Yes, reloading the modules is the simplest and probably the only solution outside of rebooting.  I've been meaning to write a script to do this, but I'm super lazy.  If you write one, please share. tongue
    Thanks for the confirmation.
    No dissenting opinion?
    You didn't say anything about re-creating sound devices. I took that as an alternative solution to the bigger problem, not an objection to the specific solution.

Maybe you are looking for

  • DVD Compression Quality

    I created a 25 minute video using photos and music and the quality was excellent. Recently, I updated the project in same version of iMovie by changing a few of the photos and rearranging some of the music. When I made the Disk Image (with same prefe

  • Nested query in BPEL JDeveloper

    Hi, Can anyone help me with nested query writing in BPEL (JDeveloper) the query is : SELECT LENGTH, WIDTH, HEIGHT, WEIGHT, LENGTH*WIDTH* HEIGHT AS ITEM_CUBE FROM ITEM_SUPP_COUNTRY_DIM WHERE ITEM= <Level1 item> AND DIM_OBJECT= (SELECT CASE_NAME FROM I

  • Open a PDF document stoed in Oracle 9i

    Hi Everybody, Someone can tell me if it is possible to read, from FORMS6i, a PDF document stored in the DB. I am running the application directly from forms not from WEB.

  • If I have an old iPhone 4 that is not factory unlocked how could I unlocked? Don't want any anymore to jailbreak it

    If I have an old iPhone 4 that is not factory unlocked how could I unlocked? Don't want any anymore to jailbreak it

  • Missing Preview Images

    Hi all, I've just installed CS4 Bridge (Mac) 3.0.0.464 - and am unable to get any Image Previews to appear. I'm either getting just empty space, or if I use "purge cache" I get the generic |PSD/JPG icons. This is happening in all gallery modes, and a