Package Details: cisco-anyconnect 4.8.03052-1

Git Clone URL: https://aur.archlinux.org/cisco-anyconnect.git (read-only, click to copy)
Package Base: cisco-anyconnect
Description: Cisco AnyConnect Secure Mobility Client
Upstream URL: https://www.cisco.com/c/en/us/products/security/anyconnect-secure-mobility-client/index.html
Licenses: custom
Submitter: K900
Maintainer: K900
Last Packager: K900
Votes: 6
Popularity: 0.54
First Submitted: 2019-03-28 09:19
Last Updated: 2020-05-15 09:54

Pinned Comments

K900 commented on 2019-04-03 13:02

As the comment in the PKGBUILD says (you've read it, right? ;) ), Cisco does not provide public downloads for this, so you have to obtain the installer yourself either through your own Cisco account or through your company's.

Latest Comments

1 2 3 Next › Last »

DrTph commented on 2020-05-15 18:20

Thanks for the addition! I'm still having issues, but this feels like progress.

I do have webkit2gtk installed:

extra/webkit2gtk 2.28.2-2 [installed]

There is a bug report here which looks related: https://bugzilla.redhat.com/show_bug.cgi?id=1823421

But I do not see similar log messages on my system. And coredumpctl list shows nothing related to AnyConnect. And their workaround, which I'm taking as WEBKIT_DISABLE_COMPOSITING_MODE=1 vpnui is not doing anything for me.

acwebhelper is perfectly undocumented and opaque. No help messages and no source code online according to Google. With various command-line arguments I cannot get anything interesting to happen beyond a couple different-but-equally-unhelpful journal messages. So far my best attempt has been strings /opt/cisco/anyconnect/*/* | grep -C2 acwebhelper -- still no luck. I guess I can try watching the process table. But even if I can invoke acwebhelper standalone, I'm skeptical I'll get any fresh insight.

K900 commented on 2020-05-13 17:46

What happens if you just launch acwebhelper separately?

Edit: sounds like you're missing webkit2gtk. Added it as an optdepend in the latest version.

DrTph commented on 2020-05-13 17:27

It seems my acwebhelper is not working. Any suggestions? I have all dependencies installed including glib2, gtk2, and gtk3. Are the AUR packages in parenthesis also required? Please forgive my ignorance. Same issue in both Wayland and xorg.

My corp IT provided anyconnect-linux64-4.8.03052-predeploy-k9.tar.gz, which is a small version bump from 4.8.03043. I don't know if this is related or not, but that's what I'm using since that's all I have.

vpnui shows: Please complete the authentication process in the AnyConnect Login window. No other windows show. I'm not sure how I should go about diagnosing acwebhelper, assuming that's the culprit.

journalctl shows:

acvpnui[5152]: Function: ProcessPromptData File: ../../vpn/Api/SDIMgr.cpp Line: 336 Authentication is not token based (OTP).
acvpnui[5152]: Message type prompt sent to the user: Please complete the authentication process in the AnyConnect Login window.
acvpnui[5152]: Function: UserPromptCB File: ../../../vpn/GUI/Linux/CvcGtkMainWindow.cpp Line: 1253 SSO prompt not handled (web helper plugin initialization had failed)

Yatha commented on 2020-04-26 23:34

@K900 I sent my local policy to your email but I think that problem can be in downloading profile policy. When I set BypassDownloader to false in your policy I receive message that download 100% but error occured.

K900 commented on 2020-04-26 22:12

Can you post the .xml file that worked for you? Or maybe email it to me? I'd like to investigate what configuration changes got made.

Yatha commented on 2020-04-26 21:53

I was able to use this package only as a template. I recently started using Manjaro instead Ubuntu-based. I have 4.7 version from my company that worked in Ubuntu.

For working this package:

  1. git clone and

1a. replace in PKGBUILD cisco-4.8.sh with cisco-4.7.sh

1b. replace in PKGBUILD _filehash with sha256sums cisco-4.7.sh

1c. replace in PKGBUILD manifesttool_vpn with manifesttool

But it's still not worked. I tried to change BypassDownloader to false in /opt/cisco/anyconnect/AnyConnectLocalPolicy.xml but only error was occured.

It started to work only after

I copied /opt/cisco/anyconnect/AnyConnectLocalPolicy.xml (and /opt/cisco/anyconnect/profile/*.xml) from my Ubuntu-based system.

Conclusion: You may need Ubuntu or RedHat live cd to install this package :)

K900 commented on 2020-04-23 13:45

Updated to the latest version.

K900 commented on 2020-03-30 07:41

Please don't flag the package as out of date if there is no actual new version. The package will not build with your favorite AUR helper, and it will not download the files from Cisco for you. You need to obtain the source package in some way and put it next to the PKGBUILD.

K900 commented on 2020-03-06 14:35

The file:// thing is an unfortunate side effect of how AUR parses packages - I don't think there's a way to refer to a file that does not exist in the package source just by name.

@indianahorst: you need to obtain the file yourself and put it in the same directory as the PKGBUILD. Cisco doesn't provide direct download links.

@Xihu0208: what "app" are you opening exactly? vpnui? Is vpnagentd running?

Xihu0208 commented on 2020-03-06 14:32

Don't forget to call systemctl enable --now vpnagentd after build.