Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I deal with a customer who has provided me a SSL VPN address. When I log in it downloads a .jnlp file, and then some files are created in /tmp.

The meat of how it works, is it tries to run Safari with a downloaded library included:

DYLD_INSERT_LIBRARIES=/tmp/narwhal.dylib /Applications/

Safari soon crashes with a segfault:

PlugIn Path:       /tmp/narwhal.dylib
Crashed Thread:  3  Dispatch queue:
Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000068
OS Version:      Mac OS X 10.7.1 (11B26)

(See the full stack trace.)

The only other mention I can find of this error is on the Apple forum, which suggests it worked in 10.5.8 but not 10.6 or later. I have a colleague that is running 10.6.8 and it works for him. I am running Lion (10.7.1). Running Safari in 32 bit mode does not seem to make a difference, nor whether I prefer 32- or 64-bit Java.

My end goal is "connect to the SSL VPN". The administrators of the server aren't able to support Mac users. I can connect fine with Windows.

Is there a way to fix this, or perhaps take the details from the .jnlp file, and use a different Cisco client, which works on Mac OS X?

share|improve this question
up vote 1 down vote accepted

As of May 30, 2012, Smart Tunnel on OS X 10.7 is officially not supported by Cisco and it looks like it won't be an easy fix to support it because it shares many attributes of the Flasback Trojan. I use VMware Fusion to run a Windows VM on my Mac for just this sort of thing.

share|improve this answer
This is exactly the solution I resorted to the other day. Would really hope that there's some kind of native workaround though. :( – LessPop_MoreFizz Jun 15 '12 at 1:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.