For root:
sudo cisco_cert_mgr -R -op import

When prompted for “Enter filename:”, input
/usr/local/src/duke-vpn-files/ThawteServerCA.509

For user:
cisco_cert_mgr -U -op import

Enter filename:
/usr/local/src/duke-vpn-files/ThawteServerCA.509
Import Password:
Password:
Confirm Password:

(9) Connect to the Duke VPN server:

vpnclient connect duke-broadband

Once connected:
ctrl-z
bg

Note: To check IP addresses, type “ifconfig”.

(10) Disconnect from server:

vpnclient disconnect

Here are the steps I followed in getting vpnc installed
and working with the Duke VPN server.

(1) Start by downloading the tarball of the Cisco VPN client
for Linux from Duke OIT:
http://www.oit.duke.edu/net-security/network/remote/vpn/index.php
Notes: This tarball also includes the Cisco VPN configuration files for the Duke network. These are really the files needed. A NetID username and password is required to download software from Duke OIT.

(2) Extract the contents of the tarball somewhere, and copy the Cisco VPN config files to another directory. I did all the following steps in /usr/local/src, but it is not crucial to put everything there.

mkdir duke-vpn-files
tar xzvf vpn_client_linux_460.tar.gz
cp -v vpnclient/duke-*.pcf duke-vpn-files/
mv -v vpn_client_linux_460.tar.gz duke-vpn-files/
rm -vr vpnclient/

(3) Download the security certificate from Duke OIT, and put it in the duke-vpn-files/ directory:
http://www.oit.duke.edu/net-security/network/remote/vpn/certificate.php
The name of the certificate file upon writing this HOWTO
was ThawteServerCA.509.

(4) By default, vpnc is not compiled with openssl support. To use vpnc with the Duke VPN, openssl is needed. The version of vpnc available in the repositories will not work with the Duke VPN. So, download the source code for vpnc (0.5.3 was the lastest version upon writing this HOWTO):

http://www.unix-ag.uni-kl.de/~massar/vpnc/

(5) Dependencies:

– To get vpnc to compile the following packages need to be installed, if they aren’t already. I used synaptic to install the packages that were not already installed.

libgcrypt11
libgcrypt11-dev
libgpg-error0
libgpg-error-dev
openssl
libcurl4-openssl-dev

(6) Compiling and installation:

– Extract the contents of the vpnc tarball somewhere. Again, I put it in /usr/local/src.

tar xzvf vpnc-0.5.3.tar.gz
cd vpnc-0.5.3

– If all the dependencies have been fulfilled by installing the above packages, then the code is ready to compile with one additional step. The Makefile needs to be edited to enable openssl support. Open Makefile in a text editor (I use nano), and uncomment the following lines:

OPENSSL_GPL_VIOLATION = -DOPENSSL_GPL_VIOLATION
OPENSSLLIBS = -lcrypto

– Save the Makefile, close the editor, compile, and install the program:

make
make install

(7) Configuration:

– Now that vpnc is installed, it is time to set up its configuration files to be able to connect to the Duke VPN. This is done by converting the Cisco .pcf configuration files provided by Duke into vpnc configuration files using the ‘pcf2vpnc’ script included in the vpnc distribution. In addition, the Duke security certificate needs to be converted to a form that vpnc can understand by using ‘openssl’.

cd duke-vpn-files/
pcf2vpnc duke-broadband.pcf duke-broadband.conf
openssl x509 -in ThawteServerCA.509 -inform DER -out ThawteServerCA.pem -outform PEM

– The config file needs to be edited to tell vpnc to use the certificate. Open duke-broadband.conf in a text editor, and add the following line at the end:

CA-File /etc/vpnc/ThawteServerCA.pem

– Now copy both the configuration file and the certificate to /etc/vpnc:

sudo cp -v duke-broadband.conf /etc/vpnc
sudo chmod 600 /etc/vpnc/duke-broadband.conf
sudo cp -v ThawteServerCA.pem /etc/vpnc

– Notes: This step (7) can be repeated for any of the other .pcf files: duke-wireless.pcf, duke-dialup.pcf, if needed.

(8) Running the program:

sudo vpnc duke-broadband

Final Notes: I was at a friend’s house when I got this working. He has cable internet. I have Verizon DSL at my apartment and a Westell Versalink 327W modem/router. It turns out that the Westell router can’t handle VPN connections. So, I am out of luck with using this at home unless I change my ISP.

(1) download …
http://www.duke.edu/~kjr10/vpn/vpn-4.8.02.tar.gz
(2) gunzip vpn-4.8.02.tar.gz
(3) tar -xvf vpn-4.8.02.tar
(4) cd vpn
(5) sudo ./vpn_install
answer “yes” for source code path
answer “no” for start VPN on boot
(6) /opt/cisco-vpnclient/bin/cisco_cert_mgr -R -op import
enter “ThawteServerCA.509″ when prompted
(7) sudo /etc/init.d/vpnclient_init start
(8) vpnclient connect duke-broadband
enter username and password

… voila! …

[Editor's note: Just tried on Ubuntu Jaunty 64-bit AMD, and it crashed with a seg fault.]

(I doubt Chavez and Amadinijad are “Western-style” pro-gay.)

Unfortunately, funds became insufficient and the Kharkov authorities made an original decision. Keeping within the limits of Euro-2012 preparation Kharkov reduces the number of tubercular departments. So, by March, 15th 345 places of 545 available will be reduced in the first Kharkov’s antitubercular clinic №1. But do not worry, it is a temporary situation: liquidation of last two hundred places and complete liquidation of the whole clinic will occur till the end of this year.
http://ua-ru-news.blogspot.com/2009/01/shvonders-struggle-with-crisis.html

Another item that is mentioned quite often with sinister connotations, is his
“possibly”, “potentially”, “high unlikely but in the realm of possibility”, of him having a “rumored”, “whispered”, “controversial” past with the Soviet KGB, and his role in importing of tax free tobacco products, that made him extremely rich in the process. The press didn’t dig deep enough, because he also ran 3/4 of the church
bingo (gambling) halls of America.

Excuse the tongue-in-cheek, it’s just to show how patently ridiculous these “wink,” “wink,” schoolyard rumors are. Scrape just the surface of these character assassination pieces wrapped in news articles, show the depths the Western press plunges to.
Even though there is a large variety journalistic voices, they are saying essentially the same things, I wonder who is pulling the strings of all their editors. It’s as if
everyone works for a few large corporations, and trot out the official company line. Either way it is deliberate, so much for providing facts to people to digest and make an opionion.

Were the KGB monitoring the the Russian Orthodox Church, of course. It’s widely known, at least to those who look for it, that Kirill (Vladimir) as a child did not
join the atheist sponsored Red Pioneers Scouting group (scouting for young commies). And later on in high school he argued with teachers that taught the Darwin
theory of evolution, that it was wrong. Later as a cleric he worked in ways to tell the Soviets what they wanted, and at the same time undermine their
authority, for instance by restoring the Smolensk diocesce that was ruined by Bolsheviks/Soviets, Nazis, WWII, etc.

The then Metropolitan Kirill crushed illegal duty free schemes of church income back in the ’90s when the Russia was lauded in the West as a model emerging
democracy, while at home everyone was going broke, Russia was being swindled and sold out by sneaky businessmen and corrupt bureacrats. It was a nuanced situation that was lost on
nearly the entire muckracking Western press, where copy sells much better when you report (false) scandals and then (maybe) apoligize for it at the
bottom of page 2 “corrections” in tiny lettering. Sorry folks looks like yellow journalism is still thriving even now in the 21th century. Do these 6th grade tactics really work?

The Church has a gone a long way from the early ’90s, where I now regulary see on television, icons in offices, on military aircraft, even at police headquarters. Over 30,000 people took the plunge during the Feast of Theophany (Baptism of Christ) in freezing waters in Russia; the numbers are increasing every year. (Right now you couldn’t pay be to do it, one day I’ll gather the courage as well.) For me as an average Orthodox Christian at the local level, some things I look forward to Patriarch Kirill leading the Church in is fostering parish life, social outreach, lay involvment that includes increased levels of church attendance and understanding of the services. Maybe in this the Patriarch is being modern, he’s encouraging the clergy to go seek out youth outside of the Church walls, where-ever they are. Then again what is old seems new again. A lot of time, people, church property, traditions, were lost to the devastation of communism. We need to keep commemorating and never forgetting the people and restore what we can, at the same time, the Church has to keep moving forward to restablish itself as the moral compass of society and fill the vacuum and emptiness left by the athiest state.

On meeting with the Pope, it all depends on actions by the Catholic Church. I cannot wait when the Catholic Church officially backs away from proselytizing in traditional Orthodox lands. There are plenty of people in traditionally Catholic countries that don’t go to church regulary and are somewhat
lost.

I have travelled numerous times to Europe and I’m struck by wonder and saddness on seeing the great old Catholic churches, especially in Spain and Italy. Many are quite large and also quite empty; European society is riddled with religious apathy. During Catholic mass, maybe a dozen pews are filled on a regular Sunday, while a typical church was built to accomodate hundreds.

Like any good sheperd, take care of your own flock, make sure it is healthy and growing before trying to take on more sheep. And surely do not try and “borrow” sheep from your neighbor.

Patriarch Kirill is a very good choice to lead the Russian Orthodox Church, I have seen his involvement in shows like Name of Russia, practically jumping on stage in Kiev at a rock concert to give a quick pep-rally/sermon to the 100,000 people in attendance, a regular weekly religious program on TV, etc. We really need him in today’s apathetic and economically trying times.

http://www.lamnk.com/blog/domain/how-to-install-cisco-vpn-client-on-ubuntu-hardy-heron-804/