[Openswan Users] Is "bug#412" already fixed ?

[Tetsuya Okumichi]

> I don't think so. Try setting nhelpers=0 as workaround?

I trid setting nhelpers=0, it succeeded.

Thanks for your advice !!



Paul Wouters <paul at xelerance.com> wrote:

> On Thu, 27 Oct 2005, Tetsuya Okumichi wrote:
> 
> > http://bugs.xelerance.com/view.php?id=412
> >
> > Is "bug#412" already fixed?
> 
> I don't think so. Try setting nhelpers=0 as workaround?
> 
> Paul
> 
> > ===================
> > I'm using Openswan 2.3.1 and 2.4.0 on Linux2.4.20,
> > Multiple tunnels between two vpn gateways are configured.
> > 3 conn-section(test1, test2, test3) setting in "/etc/ipsec.conf".
> >
> > When "ipsec setup --start",
> > test1 and test2 succeeded(IPsec SA is establised),
> > but test3 failed(IPsec SA isn't establised).
> >
> > message with test3 in "/var/log/secure" below.
> > "test3" #16: can not start crypto helper: failed to find any available worker
> >
> > Thid problem is evaded with "plutowait=yes".
> >
> > But When reaky timing is same time test1=tes2=test3, Main Mode failed at test3.
> >
> > 	keylife=2560s, rekeymargin=640s, rekeyfuzz=0%
> >
> > message with test3 in /var/log/secure too.
> > "test3" #XX: can not start crypto helper: failed to find any available worker
> >
> > I want to solve this bug "412".
> > Thanks for help.
> >
> > ============================================================
> > /etc/ipsec.conf
> > version 2.0
> >
> > config setup
> > 	interfaces="ipsec0=eth0"
> >
> > conn %default
> > 	authby=secret
> > 	ikelifetime=28800s
> >
> > conn test1
> > 	leftsubnet=200.200.0.1/32
> > 	rightsubnet=200.200.10.1/32
> > 	leftprotoport=132
> > 	rightprotoport=132
> > 	type=tunnel
> > 	left=192.168.0.1
> > 	right=192.168.0.101
> > 	esp=3des-md5-96
> > 	keylife=2560s
> > 	rekeymargin=640s
> > 	rekeyfuzz=0%
> > 	auto=start
> >
> > conn test2
> > 	leftsubnet=200.200.0.1/32
> > 	rightsubnet=200.200.10.2/32
> > 	type=tunnel
> > 	left=192.168.0.1
> > 	right=192.168.0.101
> > 	esp=3des-md5-96
> > 	keylife=2560s
> > 	rekeymargin=640s
> > 	rekeyfuzz=0%
> > 	auto=start
> >
> > conn test3
> > 	leftsubnet=200.200.0.1/32
> > 	rightsubnet=200.200.10.0/24
> > 	leftprotoport=1
> > 	rightprotoport=1
> > 	type=tunnel
> > 	left=192.168.0.1
> > 	right=192.168.0.101
> > 	esp=3des-md5-96
> > 	keylife=2560s
> > 	rekeymargin=640s
> > 	rekeyfuzz=0%
> > 	auto=start
> > ============================================================
> >
> > Best regards,
> > Tetusya
> >
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at openswan.org
> > http://lists.openswan.org/mailman/listinfo/users
> >
> 
> -- 
> 
> "Happiness is never grand"
> 
> 	--- Mustapha Mond, World Controller (Brave New World)