[Openswan Users] Starting ipsec locks machine

[Paul Wouters]

On Thu, 23 Mar 2006, Rod Savard wrote:

> I was a long-time user of FreeS/WAN 2.06 on 2.4 kernels.
>
> I'm now attempting to get Openswan working in KLIPS mode on a 2.6 kernel
> on Debian Sarge.

> At this point openswan is using default config files.  If I try to start
> ipsec like this I get a hard lock:
>
> # /etc/init.d/ipsec start
>
> I have to reboot my machine at this point (and disable the ipsec script
> in single user mode because it will try to start automatically each time
> I boot).

You are likely hitting our SMP bug. Are you running this on a P4 machine?

Disable hyperthreading, or just run (and compile against) a UP kernel.

This bug is the reason 2.4.5 has not yet been released. We hope to have
this fixed ASAP.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155