[Openswan Users] Can't authenticate: no preshared key found

[Bartz, Joerg]

Hi Andrew,
 
do you have a "Newline" -> pressed enter at the end of the line in the ipsec.secrets file? And I think you won't need espauthkey in the ipsec.conf
 
best wishes,
 
jörg
 
 

________________________________

Von: users-bounces at openswan.org [mailto:users-bounces at openswan.org] Im Auftrag von Andrew Johnstone
Gesendet: Dienstag, 26. Dezember 2006 17:07
An: users at openswan.org
Cc: dev at openswan.org
Betreff: [Openswan Users] Can't authenticate: no preshared key found


Hi
    Currently getting the following error when starting ipsec up.
    ipsec auto --down comstock
    [root at server1 log]# ipsec auto --up comstock
    104 "comstock" #5: STATE_MAIN_I1: initiate
    003 "comstock" #5: ignoring unknown Vendor ID payload  [4048b7d56ebce88525e7de7f00d6c2d3c0000000]
    003 "comstock" #5: Can't authenticate: no preshared key found for `122.252.4.168' and         `208.47.215.167'.  Attribute OAKLEY_AUTHENTICATION_METHOD
    003 "comstock" #5: no acceptable Oakley Transform
    214 "comstock" #5: STATE_MAIN_I1: NO_PROPOSAL_CHOSEN
    My configuration file is.
    conn comstock
            leftsubnet=122.252.4.1/32
            leftnexthop=%defaultroute
            left=122.252.4.168
            right=208.47.215.167
            rightsubnet=192.168.30.0/24
            rightnexthop=208.47.215.129
            auto=start
            authby=secret
            espauthkey=V.....^B
            esp=3des-md5-96
            auth=esp
    I also appended
    this to /etc/ipsec.secrets
    122.252.4.168 %any: PSK "Vg.....^B"
    Any idea what i'm doing wrong?
 
Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20061227/e076bca8/attachment.html