OS X 10.6.3 Tun Tap Kexts missing.

[Gabriel]

Hello. I recently figured out how to setup an openvpn server. I 've
had great success with windows and debian and I wanted to get it
working for my mac as well. My conf and certificates are working fine
in debian. Whenever I am trying to connect using tunnelblick I am
getting this error.

2010-04-16 00:31:34 *Tunnelblick: openvpnstart status #247: Error:
Unable to load tun and tap kexts. Status = 71

I checked the folder where the two kexts are supposed to be and they
are missing. I downloaded tuntap for osx and the installer failed.
What can I do to solve this? Is there any place I can download the
kernel extensions alone and throw them in the appropriate directory?

I'm not sure if it's appropriate to say by I also tried viscosity and
didn't have any more success.

Any help will be appreciated.

Gabriel.

[jkbull...gmail.com]

I'm going to assume you were looking in the wrong place for the kexts.
They should be in
Tunnelblick.app/Contents/Resources/
and are named tun.kext and tap.kext

In other words, they are inside the Tunnelblick application itself. It
loads them from there -- it doesn't copy them anywhere else.
Tunnelblick tries to be a good citizen by loading them when
Tunnelblick is launched (and, if necessary, when you connect to a
VPN), and unloading them when you quit Tunnelblick.

With that assumption, your problem is probably because you have, at
some point in the past, used Cisco AnyConnect (or whatever it is
called). Cisco installs its own, incompatible kexts so they are loaded
each time you reboot (or maybe login, I'm not sure). If you unload
them, you should be able to run Tunnelblick.

Take a look at
http://code.google.com/p/tunnelblick/issues/detail?id=18

For a discussion about having both Cisco VPN and an OpenVPN tunnels up
simultaneously, you might want to look at
http://groups.google.com/group/tunnelblick-discuss/t/c85c9b233bda4684

[Gabriel]

Thank's for the quick reply.

You are right. I was looking in the system/library/extensions folder
for the two kexts.

I haven't used Cisco Anyconnect (didn't know what it is till you
mentioned and I looked it up :-) )

Any other idea?

Another thing, can I at least use tunnelblicks TUN/TAP kexts in the
the extensions folder and compile openvpn from source? That was what I
planned to do in the first place but the site everyone recommended as
a source for the kexts is no longer available.

Thank's.

[jkbull...gmail.com]

You shouldn't have to be doing any of this fiddling with kexts or
OpenVPN -- Tunnelblick should take care of all of that.

But if you want to, go ahead and put the kexts where you think they
should go. However, I caution you that OS X is not Linux and that may
not work because OS X may not look for them there.

I would suggest instead that you list the kexts that are loaded by
using the kextstat command in Terminal.app and make sure there aren't
any tun or tap kexts loaded -- maybe something else loads them.
Tunnelblick loads them (I'm not sure why, lost in history) as
"foo.tap" and "foo.tun". If you are not running Tunnelblick and
kextstat shows them loaded, then that's your problem -- unload them
and Tunnelblick should be able to load its own.

[Gabriel]

Oh that could be it.. I have these two loaded.

145 0 0x592a3000 0x5000 0x4000
com.viscosityvpn.Viscosity.tap (1.0.6) <7 5 4 1>
146 0 0x592a8000 0x5000 0x4000
com.viscosityvpn.Viscosity.tun (1.0.6) <7 5 4 1>

how can I unload them? I am pretty new to OS X.

[Gabriel]

That did the trick.

Thank you!

Gabriel.

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.
To post to this group, send email to tunnelbli...@googlegroups.com.
To unsubscribe from this group, send email to tunnelblick-dis...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/tunnelblick-discuss?hl=en.

[jkbull...gmail.com]

This may be a duplicate, but it isn't showing up on the Discussion
Group discussion (only in the email):

Easiest thing to do is to restart your computer. If they are loaded
after that, use the "kextunload" command. You probably have to sudo
it, and I'm not sure but I think you would use something like

sudo kextunload -b com.viscosityvpn.Viscosity.tun
and
sudo kextunload -b com.viscosityvpn.Viscosity.tap

but maybe the -b needn't be there. The bundle identifier for the
Tunnelblick kexts are, as I said, foo.tun and foo.tap, but I think
that may be the identifier for Cisco, too.

Keep trying!