[Openswan Users] Mac OS 10.3.8 connection kills Pluto

Paul Wouters paul at xelerance.com
Wed Mar 16 19:01:09 CET 2005


On Wed, 16 Mar 2005, Alan Whinery wrote:

> I have a working setup, actually several of them, all of which work
> with the built-in Windows client. I set up a test machine for PSK
> operation, and although it works OK with Windows, it gags every time
> with the Mac client. I have tried this with kernel 2.6.11.2 IPSec and
> with 2.6 KLIPS. Sometimes it gets as far as "SA Established", but
> right around then, it's all over.
>
> I'll take any suggestions, but I suspect from recent reports, it's a
> wait for 2.4...
>
>
> The crash looks like some version of:
> (...)
> Mar 15 20:25:36 nibbler pluto[3372]: "L2TP-PSK-Panther" #2:
> "L2TP-PSK-Panther": 128.171.6.143:17/1701...128.171.6.68:17/49571;
> unrouted; eroute owner: #0
> Mar 15 20:25:36 nibbler pluto[3372]: "L2TP-PSK-Panther" #2:
> "L2TP-PSK-Panther":     srcip=unset; dstip=unset
> Mar 15 20:25:36 nibbler pluto[3372]: "L2TP-PSK-Panther" #2:
> "L2TP-PSK-Panther":   ike_life: 3600s; ipsec_life: 28800s;
> rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3
> Mar 15 20:25:36 nibbler pluto[3372]: "L2TP-PSK-Panther" #2:
> "L2TP-PSK-Panther":   policy: PSK+ENCRYPT+TUNNEL; prio: 32,32;
> interface: eth0;
> Mar 15 20:25:36 nibbler pluto[3372]: "L2TP-PSK-Panther" #2:
> "L2TP-PSK-Panther":   newest ISAKMP SA: #1; newest IPsec SA: #0;
> Mar 15 20:25:36 nibbler pluto[3372]: "L2TP-PSK-Panther" #2:
> "L2TP-PSK-Panther":   IKE algorithm newest: 3DES_CBC_192-SHA1-MODP1024
> Mar 15 20:25:36 nibbler pluto[3372]: "L2TP-PSK-Panther" #2:
> *Mar 15 20:25:46 nibbler ipsec__plutorun: Restarting Pluto subsystem...*

Can you enable dumpdir=/tmp in the config setup section so you get a core
file and then give us a backtrace using gdb of teh core?

Paul


More information about the Users mailing list