[Openswan Users] Linux 2.6.17 Gentoo and KLIPS

[Paul Wouters]

On Wed, 4 Oct 2006, nospam2craig at remex.com.au wrote:

> jeffpad1 ~ # /etc/init.d/ipsec restart
>  * Starting IPSEC ... ...
> ipsec_setup: Starting Openswan IPsec U2.4.4/K2.6.17-gentoo-r8...
> ipsec_setup: /usr/lib/ipsec/_realsetup: line 102:
> /var/run/pluto/ipsec_setup.pid: No such file or directory
> ipsec_setup: ...unable to create /var/run/pluto/ipsec_setup.pid, aborting
> start!

This looks like scripts problems. Perhaps no permission to create the
directory /var/run/pluto?

> I don't think KLIPS is working, however don't know where to start looking
> for information. We really need the ipsec0 interface for the VPN traffic
> for our traffic measurement system. (or another such interface if things
> have changed names)
>
> The following kernel modules have been loaded as per the guide on the
> Gentoo documentation site;
>
> Module                  Size  Used by
> xfrm_user              16160  0
> ipcomp                  5224  0
> esp4                    5632  0
> ah4                     4576  0
> af_key                 25904  0

You have loaded netkey, not klips. Try this:

rmmod esp4 ah4 af_key xfrm_user
modprobe ipsec

This is assuming you have compiled and installed klips.

Paul