[Openswan Users] Openswan fails to start.

[Jim Barber]

Yep my fault.

I missed the following kernel option:

	Networking -> Network Options -> IPSec user configuration interface

Once this was compiled in, the Openswan daemon started okay.

Thanks all.

----------
Jim Barber
DDI Health


Paul Wouters wrote:
> On Tue, 3 Oct 2006, Andy Gay wrote:
> 
>> On Tue, 2006-10-03 at 09:03 +0800, Jim Barber wrote:
>>
>>> Oct  3 10:43:09 firewall pluto[8431]: Using Linux 2.6 IPsec interface code on 2.6.18
>>> Oct  3 10:43:09 firewall pluto[8431]: FATAL ERROR: Failed to bind bcast socket in init_netlink(). Errno 2: No such file or directory
>> Is this a Debian distributed kernel, or did you make it yourself?
>>
>> I wonder if whatever part of the kernel that provides the netlink
>> interface is missing. The code that's complaining is in
>> pluto/kernel_netlink.c, it's calling socket() and bind() with various
>> XFRM options, so I suspect that the kernel interface is in XFRM_USER in
>> this case, or maybe NET_KEY.
> 
> Indeed. It seems this kernel was lacking CONFIG_XFRM_USER. Unfortunately,
> I know of no way to detect this in userland :(
> 
> I have changed the error to give a hint to CONFIG_XFRM_USER, but I would
> prefer to be able to avoid starting pluto altogether in this case.
> 
> Paul