[Openswan Users] Testing xauth-pluto-11

Rajitha Reddy RReddy at mocana.com
Thu Jul 17 18:45:29 EDT 2008


In order to the see the working of openswan xauth server and client, I am testing the scripts in the folder testing/pluto/xauth-pluto-11.

Can you please let me know the following:

1.       Even with the following in ipsec.conf, I don't see more debug on the output.



Am I missing something?

2.       I have configured east.conf and road.conf with the relevant ip addresses and retained the rest of the information as it is. And, started the test as follows:

On the server,



On the client,



The server does nothing except for :

[root at rreddy-fc5 xauth-pluto-11]# ./eastinit.sh

ipsec_setup: Openswan IPsec apparently already active, start aborted


The client gives the following:


ipsec_setup: Starting Openswan IPsec 2.6.14...

ipsec_setup: No KLIPS support found

ipsec_setup: NETKEY support found. Use protostack=netkey in /etc/ipsec.conf to avoid attempts to use KLIPS. Attempting to continue with NETKEY



000 "xauth-road--eastnet":<>[@road.testing.xelerance.com,+XC+S=C]...<>[@east,+XS+S=C]; unrouted; eroute owner: #0

000 "xauth-road--eastnet":     myip=unset; hisip=unset;

000 "xauth-road--eastnet":     xauth info: myxauthuser=use1;

000 "xauth-road--eastnet":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3

000 "xauth-road--eastnet":   policy: RSASIG+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW; prio: 32,32; interface: eth0;

000 "xauth-road--eastnet":   newest ISAKMP SA: #0; newest IPsec SA: #0;


[root at aragon openswan-2.6.14_xauth]#


                I am not able to make out what exactly happened here? Can you please tell me if the xauth took place successfully or has it failed? How can I print more debug information here?

3.       Also, what types of extended authentication does  openswan xauth server support? Like username, password, passcode, message etc? and where can these be configured on the server? Any help is greatly appreciated.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20080717/813210c5/attachment.html 

More information about the Users mailing list