[Openswan Users] _plutorun/_plutoload stops after shell logout

[netvipe]

Paul Wouters wrote:
> On Mon, 9 May 2005, netvipe wrote:
> 
>> after i've started the ipsec process while using "/etc/init.d/ipsec
>> start" everything works fine.
> 
> 
>> my problem starts after i've left the shell (from where i've started the
>> ipsec init script). when i logout, the ike process
>> (_plutorun/_plutoload) will also finish. i've tried to figure out what
>> happens but can not find any problems. even debug doesn't helps (...as
>> expected cause it's not an ipsec/ike communication problem)
>>
>> there is only some short output in the logfile:
>>
>> May  9 21:51:25 pluto[24551]: Pluto ignores SIGHUP -- perhaps you want
>> "whack --listen"
>> May  9 21:51:25 pluto[24551]: ADNS process terminated by signal 1
>> May  9 21:51:25 pluto[24551]: closing helper(0) pid=-1 fd=6
>>
>> what happens here???
>> as a matter of course the ipsec connection will be available till the
>> next rekeying period.
>>
>> some info's about the system:
>> - x86 (pentium IIT) hardware with 2.4.29-grsec kernel
>> - os resides on a flash module and is based on uClibc
>> - /etc, /var and /tmp are writeable (tmpfs)
>> - busybox provides most services (incl. init)
>> - sh replaced by bash (3.00.16(2))
> 
> 
> This seems to be some weird shell issue. Or perhaps related to openssh's
> sshd.
> 
> There was a signal issue a month or two ago, but I thought the fix for that
> already went into 2.3.0. Can you see if this behaviour still happens
> with 2.3.1?
> If so, please let me know so I can file it as a bug.
> 
> Paul

hi...

thanks for the fast reply!
i followed your hint and updated to openswan 2.3.1 but unfortunatly
nothing changed.

some important startup functions have been changed (as far as could find
out for now). specially the  behavior of _plutorun (eval $execdir/pluto
--nofork ...)

here is an other ps output. looks nearly the same:

 7853 root       1184 S   /usr/sbin/sshd: xxxxxxxxxxx at pts/2
 9454 root       1056 S   -sh
15711 root        800 S   /bin/sh /usr/lib/ipsec/_plutorun --debug none
--uniqueids yes --nocrsend  --strictcrlpolicy  --nat_traversal
--keep_alive  --force
32152 root        404 S   logger -s -p daemon.error -t ipsec__plutorun
  393 root        812 S   /bin/sh /usr/lib/ipsec/_plutorun --debug none
--uniqueids yes --nocrsend  --strictcrlpolicy  --nat_traversal
--keep_alive  --force
22515 root        796 S   /bin/sh /usr/lib/ipsec/_plutoload --wait no --post
 7595 root       1612 S   /usr/libexec/ipsec/pluto --nofork
--secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --debug-none
--uniqueids --virtual_priva
  543 root       1028 S N pluto helper  #  0
11511 root        440 S   _pluto_adns
 8099 root        396 R   ps


...but there is a new entry in the logfile:

May 10 15:54:35 pluto[16652]: Pluto ignores SIGHUP -- perhaps you want
"whack --listen"
May 10 15:54:35 pluto[16652]: ADNS process terminated by signal 1
May 10 15:54:35 pluto[16652]: closing helper(0) pid=17207 fd=6 exit=0
May 10 15:54:35 pluto[16652]: reapchild failed with errno=10 No child
processes


not sure if sshd is the fault. i would also tend to some "weird shell
issue".

thx for your support!


Florian

-- 
Florian Reinholz               mailto:me at netvipe.com

GnuPG Key:   http://netvipe.com/netvipe-pubkey.asc
Fingerprint: C808 9B2E 002F FE88 A916 0CFF 128A 6EC0 5C97 DE78