<div dir="ltr"><div>Hi,</div><div><br></div><div>I want to run ipsec as a non root user. I followed the instructions from </div><div><a href="https://wiki.strongswan.org/projects/1/wiki/ReducedPrivileges">https://wiki.strongswan.org/projects/1/wiki/ReducedPrivileges</a><br></div><div><br></div><div>1) Ran configur as root</div><div>./configure --prefix=/usr --sysconfdir=/etc --enable-curl --enable-ldap --enable-pkcs11 --enable-md4 --enable-openssl --enable-ccm --enable-gcm --enable-farp --enable-eap-identity --enable-eap-aka --enable-eap-aka-3gpp2 --enable-eap-md5 --enable-eap-gtc --enable-eap-mschapv2 --enable-eap-dynamic --enable-eap-radius --enable-eap-tls --enable-eap-ttls --enable-eap-peap --enable-eap-tnc --enable-xauth-eap --enable-dhcp --enable-charon --enable-xauth-pam --enable-xauth-noauth  --disable-resolve --with-capabilities=libcap --with-user=vpn --with-group=vpn</div><div><br></div><div>2) Ran make as root, but with these errors:</div><div><br></div><div><div>make[4]: *** [farp_spoofer.lo] Error 1</div><div>make[4]: Leaving directory `/root/iswan/src/strongswan/strongswan-5.3.0/src/libcharon/plugins/farp'</div><div>make[3]: *** [all-recursive] Error 1</div><div>make[3]: Leaving directory `/root/iswan/src/strongswan/strongswan-5.3.0/src/libcharon'</div><div>make[2]: *** [all-recursive] Error 1</div><div>make[2]: Leaving directory `/root/iswan/src/strongswan/strongswan-5.3.0/src'</div><div>make[1]: *** [all-recursive] Error 1</div><div>make[1]: Leaving directory `/root/iswan/src/strongswan/strongswan-5.3.0'</div><div>make: *** [all] Error 2</div></div><div><br></div><div>If i disable the capabilities options make runs fine. can you please guide me on this?</div><div><br></div><div>Thanks,</div><div><br></div><div>Meenakshi</div></div>