Problem:
RPM spec file for forticlient_vpn is the same as forticlient.
Description:
If RPM repo is enabled for forticlient_vpn, it will be overwritten by full version of forticlient ZTNA/APT which is not something we want.
For instance, downgrading to a version less than on repo
$ sudo dnf reinstall ./forticlient_vpn_7.0.7.0246_x86_64.rpm
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered with an entitlement server. You can use subscription-manager to register.
Last metadata expiration check: 2:09:59 ago on to. 09. nov. 2023 kl. 09.51 +0100.
Package forticlient-7.0.7.0246-1.el7.x86_64 not installed, cannot reinstall it.
No match for argument: forticlient_vpn_7.0.7.0246_x86_64.rpm
Error: No packages marked for reinstall. <---- !!!!!
$ sudo dnf install ./forticlient_vpn_7.0.7.0246_x86_64.rpm
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered with an entitlement server. You can use subscription-manager to register.
Last metadata expiration check: 2:10:16 ago on to. 09. nov. 2023 kl. 09.51 +0100.
Dependencies resolved.
=====================================================================================================================
Package Architecture Version Repository Size
=====================================================================================================================
Downgrading:
forticlient x86_64 7.0.7.0246-1.el7 @commandline 145 M
Transaction Summary
=====================================================================================================================
Downgrade 1 Package
Total size: 145 M
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: forticlient-7.0.7.0246-1.el7.x86_64 1/2
Downgrading : forticlient-7.0.7.0246-1.el7.x86_64 1/2
Running scriptlet: forticlient-7.0.7.0246-1.el7.x86_64 1/2
gtk-update-icon-cache: Cache file created successfully.
Running scriptlet: forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
This account is currently not available.
This account is currently not available.
Cleanup : forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
Running scriptlet: forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
Verifying : forticlient-7.0.7.0246-1.el7.x86_64 1/2
Verifying : forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
Installed products updated.
Downgraded:
forticlient-7.0.7.0246-1.el7.x86_64
Complete!
As you can see, once installed, it is called forticlient and not forticlient_vpn as it should.
Then, if you now do an dnf upgrade forticlient_vpn, it fails, and if you do "dnf upgrade" it will install the full licensed version, which we do not want.
$ sudo dnf upgrade forticlient_vpn
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered with an entitlement server. You can use subscription-manager to register.
Last metadata expiration check: 2:13:09 ago on to. 09. nov. 2023 kl. 09.51 +0100.
No match for argument: forticlient_vpn
Error: No packages marked for upgrade.
$ sudo dnf upgrade forticlient
Updating Subscription Management repositories.
Unable to read consumer identity
This system is not registered with an entitlement server. You can use subscription-manager to register.
Last metadata expiration check: 2:13:15 ago on to. 09. nov. 2023 kl. 09.51 +0100.
Dependencies resolved.
=====================================================================================================================
Package Architecture Version Repository Size
=====================================================================================================================
Upgrading:
forticlient x86_64 7.0.10.0346-1.el7.centos repo.fortinet.com 210 M
Transaction Summary
=====================================================================================================================
Upgrade 1 Package
Total download size: 210 M
Is this ok [y/N]:
Conclusion:
RPM SPEC file for forticlient_vpn should be fixed such that name is different to the full version. Should be separate SPEC files for the full and the VPN versions.
And both forticlient and forticlient_vpn should be available on repo.fortinet.com
--ToreL
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello,
As a result of my research, I found the following information. This is expected behavior:
This was done deliberately. Endpoint could only install either the FortiClient full version or the FortiClient VPN-only version at a time. Both cannot be installed at the same time.
FortiClient on Windows and MacOS will behave the same way.
Only one version - full or VPN-only - could be installed at a time.
Thanks & Regards
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1643 | |
1069 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.