Arch Linux User Repository

After package installation, vpnagentd service must be enabled: sudo systemctl enable --now vpnagentd.service; sudo systemctl status vpnagentd.service

@alllexx88 - Please verify and confirm.

Because of /opt/cisco/secureclient/AnyConnectLocalPolicy.xml file created explicitly in PKGBUILD, I was having this error when trying to connect: "Automatic profile updates are disabled and the local VPN profile does not match the secure gateway VPN profile. Contact your system administrator." After moving this file (and the respective .xsd file), I was able to connect. Looks like it does more than just disabling self updates.

@dmsh I don't have an access to a public ftp with upload rights (at least one I feel safe to share), and I wasn't able to google up a free one. I temporarily uploaded the file on 0x0.st: https://0x0.st/8VZi.tar.gz

The original filename is cisco-secure-client-linux64-5.1.9.113-predeploy-k9.tar.gz

It will remain available for 30 days. If you have a public ftp fit for the task, feel free to upload it :)

@alllexx88 - Not sure about github, probably can be used any public ftp and then used https://web.archive.org to get snapshot of location with direct link (without auth).

Hi, I have an archive with the latest version, but I haven't downloaded it from a public URL. Is there anywhere I can safely upload it to? I was thinking about github, but I'm not sure if there're any legal implications.

I'm looking for link to archive with latest version, if you have it, you can share it and I'll update PKGBUILD.

Installing cisco-secure-client 5.1.6.103-1 onto a new (refurbished) Thinkpad, I'm getting an message ...

Connect capability is unavailable because the VPN service is unavailable.

On an older Thinkpad, I have Cisco AnyConnect 4.10.08029 working just fine, so it's not the destination network.

I found a similar error at https://forum.manjaro.org/t/anyconnect-connection-attempt-has-failed/155171/6 that pointed to https://bbs.archlinux.org/viewtopic.php?pid=2141236#p2141236 as a solution. I've mostly tried to follow that. (There are some spelling mistakes there, so I've done my best to adjust).

I'm still having iusses with vpnagentd.

sudo systemctl enable --now vpnagentd.service
[sudo] password for daviding: The unit files have no installation config (WantedBy=, RequiredBy=, UpheldBy=, Also=, or Alias= settings in the [Install] section, and DefaultInstance= for template units). This means they are not meant to be enabled or disabled using systemctl.

Possible reasons for having these kinds of units are: • A unit may be statically enabled by being symlinked from another unit's .wants/, .requires/, or .upholds/ directory. • A unit's purpose may be to act as a helper for some other unit which has a requirement dependency on it. • A unit may be started when needed via activation (socket, path, timer, D-Bus, udev, scripted systemctl call, ...). • In case of template units, the unit is meant to be enabled with some instance name specified. Failed to start vpnagentd.service: Unit vpnagentd.service has a bad unit file setting. See system logs and 'systemctl status vpnagentd.service' for details.

Please let me know if I can provide any additional information for diagnosis.

Update to 5.1.6.103 with new source that I found.

PKGBUILD source link seems to be broken. Could not connect to server.

The updated source link (5.1.6.103) seems to work, thanks!

You may also need to install webkit2gtk if you need MFA authentication through SSO:

sudo pacman -S webkit2gtk