[Openswan Users] road warrior question

[Paul Wouters]

On Wed, 18 Jan 2006, Andreas Lüdtke wrote:

> I changed the setting to an e-mail address (FQDN) on both sides. Now I get:
>
> kern.warn pluto[23915]: "ROADWARRIOR"[1] 12.34.56.78 #1: Aggressive mode peer ID is
> ID_USER_FQDN: 'name at domain.com'
> kern.warn pluto[23915]: "ROADWARRIOR"[1] 12.34.56.78 #1: responding to Aggressive Mode,
> state #1, connection 'ROADWARRIOR' from 12.34.56.78
> kern.warn pluto[23915]: "ROADWARRIOR"[1] 12.34.56.78 #1: can't authenticate: no preshared
> key found for '87.65.43.21' and '%any'. Attribute OAKLEY_AUTHENTICATION_METHOD
> kern.warn pluto[23915]: "ROADWARRIOR"[1] 12.34.56.78 #1: no acceptable Oakley Transform
>
> Does this mean the preshared key is not correct or are the proposals wrong? I checked the
> proposals and I think they're correct. As I said, my ipsec.secrets is like:
>
> domain.dyndns.org 0.0.0.0 : PSK "secret"

try %any instead of 0.0.0.0