[Openswan Users] Openswan doesn't starts because pluto is down

[Avesh Agarwal]

On 12/23/2009 02:16 PM, Jorge Jimenez wrote:
> Hi Paul,
>
> Thanks for your quickly answer!
> Sorry for my English...
> I only see in my logs what I sended... How can I increase my logs? What can I do to help you to find the problem...
>
>    
Please also check your selinux settings.

Avesh

> Thanks and kind regards
>
>
> ¡Feliz Navidad y Prospero 2010!
>
> Jorge Jiménez Miguélez
> Avinguda Diagonal, 605 - 4ª Planta
> 08028 - Barcelona
> Tel.: 902 01 35 34 - Móvil: 669 83 08 76
> http://www.pross.com
>
>
> -----Mensaje original-----
> De: Paul Wouters [mailto:paul at xelerance.com]
> Enviado el: miércoles, 23 de diciembre de 2009 20:01
> Para: Jorge Jimenez
> CC: users at openswan.org
> Asunto: Re: [Openswan Users] Openswan doesn't starts because pluto is down
>
> On Wed, 23 Dec 2009, Jorge Jimenez wrote:
>
>    
>> Date: Wed, 23 Dec 2009 17:14:59 +0100
>> From: Jorge Jimenez<jorge.jimenez at pross.com>
>> Cc: Jorge Jimenez<jorge.jimenez at pross.com>
>> To: "users at openswan.org"<users at openswan.org>
>> Subject: [Openswan Users] Openswan doesn't starts because pluto is down
>>      
>    
>> I’ve installed Openswan and it doesn’t work.
>>      
> It looks like your pluto is crashing. Please check the logs for a more detailed
> message. I don't see it below.
>
> Paul
>
>    
>> My message log is:
>>
>>   
>>
>>                  Dec 23 18:14:28 pross-mon01 ipsec_setup: Stopping Openswan IPsec...
>>
>> Dec 23 18:14:28 pross-mon01 kernel: NET: Unregistered protocol family 15
>>
>> Dec 23 18:14:28 pross-mon01 ipsec_setup: ...Openswan IPsec stopped
>>
>> Dec 23 18:14:32 pross-mon01 kernel: NET: Registered protocol family 15
>>
>> Dec 23 18:14:32 pross-mon01 ipsec_setup: Starting Openswan IPsec U2.6.24rc3/K2.6.18-164.el5...
>>
>> Dec 23 18:14:33 pross-mon01 ipsec_setup: Using NETKEY(XFRM) stack
>>
>> Dec 23 18:14:33 pross-mon01 kernel: padlock: VIA PadLock not detected.
>>
>> Dec 23 18:14:33 pross-mon01 kernel: padlock: VIA PadLock not detected.
>>
>> Dec 23 18:14:33 pross-mon01 ipsec_setup: /usr/libexec/ipsec/addconn Non-fips mode set in
>> /proc/sys/crypto/fips_enabled
>>
>> Dec 23 18:14:33 pross-mon01 pluto: adjusting ipsec.d to /etc/ipsec.d
>>
>> Dec 23 18:14:33 pross-mon01 ipsec__plutorun: adjusting ipsec.d to /etc/ipsec.d
>>
>> Dec 23 18:14:33 pross-mon01 ipsec__plutorun: /usr/libexec/ipsec/addconn Non-fips mode set in
>> /proc/sys/crypto/fips_enabled
>>
>> Dec 23 18:14:33 pross-mon01 ipsec_setup: ...Openswan IPsec started
>>
>> Dec 23 18:14:33 pross-mon01 ipsec__plutorun: /usr/libexec/ipsec/addconn Non-fips mode set in
>> /proc/sys/crypto/fips_enabled
>>
>> Dec 23 18:14:33 pross-mon01 ipsec_starter[19297]: connect(pluto_ctl) failed: No such file or directory
>>
>> Dec 23 18:14:33 pross-mon01 ipsec__plutorun: /usr/libexec/ipsec/addconn Non-fips mode set in
>> /proc/sys/crypto/fips_enabled
>>
>> Dec 23 18:14:33 pross-mon01 ipsec__plutorun: connect(pluto_ctl) failed: No such file or directory
>>
>> Dec 23 18:14:33 pross-mon01 ipsec__plutorun: whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
>>
>> Dec 23 18:14:34 pross-mon01 last message repeated 2 times
>>
>> Dec 23 18:14:34 pross-mon01 ipsec__plutorun: pluto apparently already running (?!?), giving up
>>
>>   
>>
>> And my ipsec.conf file is:
>>
>>   
>>
>>                  version 2.0
>>
>>   
>>
>> config setup
>>
>>          # Debug-logging controls:
>>
>>          protostack=netkey
>>
>>          #klipsdebug=none
>>
>>          klipsdebug="all"
>>
>>          plutodebug="all"
>>
>>          #plutodebug=none
>>
>>          nat_traversal=yes
>>
>> #       interfaces = "ipsec0=eth0"
>>
>>   
>>
>> conn iberobrico
>>
>>          auto=start
>>
>>          left=%defaultroute
>>
>> #       leftprotoport=17/1701
>>
>>          #leftsubnet=10.10.100.0/24
>>
>>          right=xxx.xxx.xxx.xxx
>>
>> #       rightprotoport=17/1701
>>
>>          rightsubnet=172.254.100.0/24
>>
>>          #rightid=%any
>>
>>          keyexchange=ike
>>
>>          authby=secret
>>
>>          pfs=no
>>
>>          rekey=yes
>>
>>          keyingtries=0
>>
>> #       type=transport
>>
>>          esp=3des
>>
>>          #auth=esp
>>
>>          compress=yes
>>
>>   
>>
>> Can someone help me please.
>>
>>   
>>
>> Kind Regards
>>
>>   
>>
>> PROSS Nevado
>>
>> ¡Feliz Navidad y Prospero 2010!
>>
>>   
>>
>> Jorge Jiménez Miguélez
>>
>> Avinguda Diagonal, 605 - 4ª Planta
>> 08028 - Barcelona
>>
>> Tel.: 902 01 35 34 - Móvil: 669 83 08 76
>> http://www.pross.com
>>
>>
>>
>>
>>
>>
>>
>>      
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>