[Openswan Users] Linux 2.6.17 Gentoo and KLIPS

[Brett Curtis]

Just a note, not sure if you are using the ebuild but some einfo you  
may have not noticed.

* This ebuild will set openswan-2.4.4 to use 2.6 native IPsec (KAME).
* KLIPS will not be compiled/installed.

So I am not sure if something in the build needs to be changed.

Brett Curtis
dashnu at gmail.com
http://teh.sh.nu



On Oct 4, 2006, at 10:39 AM, Paul Wouters wrote:

> On Wed, 4 Oct 2006, nospam2craig at remex.com.au wrote:
>
>> jeffpad1 ~ # /etc/init.d/ipsec restart
>>  * Starting IPSEC ... ...
>> ipsec_setup: Starting Openswan IPsec U2.4.4/K2.6.17-gentoo-r8...
>> ipsec_setup: /usr/lib/ipsec/_realsetup: line 102:
>> /var/run/pluto/ipsec_setup.pid: No such file or directory
>> ipsec_setup: ...unable to create /var/run/pluto/ipsec_setup.pid,  
>> aborting
>> start!
>
> This looks like scripts problems. Perhaps no permission to create the
> directory /var/run/pluto?
>
>> I don't think KLIPS is working, however don't know where to start  
>> looking
>> for information. We really need the ipsec0 interface for the VPN  
>> traffic
>> for our traffic measurement system. (or another such interface if  
>> things
>> have changed names)
>>
>> The following kernel modules have been loaded as per the guide on the
>> Gentoo documentation site;
>>
>> Module                  Size  Used by
>> xfrm_user              16160  0
>> ipcomp                  5224  0
>> esp4                    5632  0
>> ah4                     4576  0
>> af_key                 25904  0
>
> You have loaded netkey, not klips. Try this:
>
> rmmod esp4 ah4 af_key xfrm_user
> modprobe ipsec
>
> This is assuming you have compiled and installed klips.
>
> Paul
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327? 
> n=283155