[Openswan Users] pluto does not start with Kernel 2.6.25

Roger Schreiter roger at planinternet.de
Thu Nov 6 10:56:34 EST 2008


Hi,

I'm running on serveral machines Suse-Linux-10.2.
I've now installed OpenSwan 2.6.18.

On a machine with SuSE installed kernel 2.6.18.2-34-default
    /etc/init.d/ipsec start
starts fine.
Unfortunately this is not the machine, where I want to use ipsec.

On an embedded machine, running also SuSE-Linux-10.2, but with a
kernel compiled by myself, version 2.6.25.4, OpenSwan 2.6.18
does not start.
Ipsec support is included in the kerel.

When calling /etc/init.d/ipsec start, I get:
    ipsec_setup: Starting Openswan IPsec U2.6.18/K2.6.25.4...
    ipsec_setup: Command line is not complete. Try option "help"

In both cases, I used for this test the preinstalled sample
config files.

I already tried to figure out, where I could add the option "help",
successless.
Furthermore I do not find any log data.

/var/run/pluto contains then this:
    -rw-r--r-- 1 root root 79 Nov  6 16:47 ipsec.info
    -rw-r--r-- 1 root root 27 Nov  6 16:48 ipsec_setup.out
    -rw-r--r-- 1 root root  5 Nov  6 16:47 ipsec_setup.pid
    srwxrwxrwx 1 root root  0 Nov  6 16:47 pluto.info

Imho, the lack of pluto.ctl is a sign, that pluto did not start
properly.

Furthermore I can see, that _plutorun is started and restarted
again and again (which makes it hard to kill, since PID is constantly
increasing.)

    ps aux | grep pluto
    root      2655  0.0  0.1   2892   540 pts/0    S    16:49   0:00
      /bin/sh /usr/local/lib/ipsec/_plutorun --re --debug  --uniqueids
      yes --force_busy no --nocrsend no --strictcrlpolicy no
      --nat_traversal yes --keep_alive  --protostack netkey
      --force_keepalive  --disable_port_floating no --virtual_private
      --crlcheckinterval 0 --ocspuri  --nhelpers  --dump  --opts
      --stderrlog  --wait no --pre  --post  --log daemon.error
      --plutorestartoncrash true --pid /var/run/pluto/pluto.pid
    root      2749 11.0  0.2   2892  1348 pts/0    S    16:49   0:00
      /bin/sh /usr/local/lib/ipsec/_startnetkey --info
      /var/run/pluto/ipsec.info --debug  --omtu  --fragicmp yes --hidetos
      yes --log daemon.error %defaultroute

Any hint, what's going wrong?
How can I resolv the problem?

Regards,
Roger Schreiter.



More information about the Users mailing list