[Openswan Users] ipsec_setup: ERROR: Module af_key is in use

gopi gopib.4180 at gmail.com
Thu Jan 16 06:24:50 EST 2014


Paul Wouters <paul <at> xelerance.com> writes:

> 
> On Tue, 20 Sep 2011, satpal parmar wrote:
> 
> > Subject: [Openswan Users] ipsec_setup: ERROR: Module af_key is in use
> 
> > I am recently installed openswan on red hat machine. Now when I am 
giving command 'service ipsec
> > stop' I am getting "ipsec_setup: ERROR: Module af_key is in use"  error. 
Please find the log
> > below. I am not able to relate anything with anything related to 
openswan. I goggled on mailing
> > lists but I didn't get any pointers. Anyone came across this issue? 
> > 
> > 192.168.4.6$ipsec --version
> > Linux Openswan U2.6.21/K2.6.18-194.el5 (netkey)
> > See `ipsec --copyright' for copyright information.
> 
> That might be an old kernel bug? Does "ip xfrm state" or "ip xfrm policy" 
show
> anything ?
> 
> Does issuing any of these help:
> 
> ip xfrm policy flush 
> ip xfrm state flush 
> ip xfrm policy deleteall 
> ip xfrm state deleteall
> 
> Can you run "ipsec setup stop" then?
> 
> Does "dmesg" tell you why you cannot rmmod af_key ?
> 
> Paul
> _______________________________________________
> Users <at> openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
> Building and Integrating Virtual Private Networks with Openswan: 
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
> 
> 


could you please some tell me wat is the issue for below problem??

[flx4008]-> service ipsec restart
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: ERROR: Module xfrm6_mode_tunnel is in use
ipsec_setup: ERROR: Module xfrm4_mode_tunnel is in use
ipsec_setup: ERROR: Module esp4 is in use
ipsec_setup: Starting Openswan IPsec U2.6.38dr2/K2.6.32-
358.6.2.el6.x86_64...
ipsec_setup: multiple ip addresses, using  10.0.34.1 on eth0
ipsec_setup: /usr/libexec/ipsec/addconn Non-fips mode set in 
/proc/sys/crypto/fips_enabled
[flx4008]-> 

thanks,
gopi




More information about the Users mailing list