forticlient_vpn RPM has error in SPEC file

[torel]

Problem:   

RPM spec file for forticlient_vpn is the same as forticlient.

Description:

If RPM repo is enabled for forticlient_vpn, it will be overwritten by full version of forticlient ZTNA/APT which is not something we want.

For instance, downgrading to a version less than on repo

$ sudo dnf reinstall ./forticlient_vpn_7.0.7.0246_x86_64.rpm
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 2:09:59 ago on to. 09. nov. 2023 kl. 09.51 +0100.
Package forticlient-7.0.7.0246-1.el7.x86_64 not installed, cannot reinstall it.
No match for argument: forticlient_vpn_7.0.7.0246_x86_64.rpm
Error: No packages marked for reinstall.   <---- !!!!!

$ sudo dnf install ./forticlient_vpn_7.0.7.0246_x86_64.rpm
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 2:10:16 ago on to. 09. nov. 2023 kl. 09.51 +0100.
Dependencies resolved.
=====================================================================================================================
Package Architecture Version Repository Size
=====================================================================================================================
Downgrading:
forticlient x86_64 7.0.7.0246-1.el7 @commandline 145 M

Transaction Summary
=====================================================================================================================
Downgrade 1 Package

Total size: 145 M
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: forticlient-7.0.7.0246-1.el7.x86_64 1/2
Downgrading : forticlient-7.0.7.0246-1.el7.x86_64 1/2
Running scriptlet: forticlient-7.0.7.0246-1.el7.x86_64 1/2
gtk-update-icon-cache: Cache file created successfully.

Running scriptlet: forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
This account is currently not available.
This account is currently not available.

Cleanup : forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
Running scriptlet: forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
Verifying : forticlient-7.0.7.0246-1.el7.x86_64 1/2
Verifying : forticlient-7.0.10.0346-1.el7.centos.x86_64 2/2
Installed products updated.

Downgraded:
forticlient-7.0.7.0246-1.el7.x86_64

Complete!

As you can see, once installed, it is called forticlient and not forticlient_vpn as it should.

Then, if you now do an dnf upgrade forticlient_vpn, it fails, and if you do "dnf upgrade" it will install the full licensed version, which we do not want.

$ sudo dnf upgrade forticlient_vpn
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 2:13:09 ago on to. 09. nov. 2023 kl. 09.51 +0100.
No match for argument: forticlient_vpn
Error: No packages marked for upgrade.
$ sudo dnf upgrade forticlient
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 2:13:15 ago on to. 09. nov. 2023 kl. 09.51 +0100.
Dependencies resolved.
=====================================================================================================================
Package Architecture Version Repository Size
=====================================================================================================================
Upgrading:
forticlient x86_64 7.0.10.0346-1.el7.centos repo.fortinet.com 210 M

Transaction Summary
=====================================================================================================================
Upgrade 1 Package

Total download size: 210 M
Is this ok [y/N]:

Conclusion:

RPM SPEC file for forticlient_vpn should be fixed such that name is different to the full version. Should be separate SPEC files for the full and the VPN versions.

And both forticlient and forticlient_vpn should be available on repo.fortinet.com

--ToreL

[fatihseyligli]

Hello,

As a result of my research, I found the following information. This is expected behavior:

This was done deliberately. Endpoint could only install either the FortiClient full version or the FortiClient VPN-only version at a time. Both cannot be installed at the same time.

FortiClient on Windows and MacOS will behave the same way.

Only one version - full or VPN-only - could be installed at a time.

Thanks & Regards