[strongSwan] charon too long to start...

[Zorgh]

Le 17/11/2010 21:56, Andreas Steffen a écrit :
> Probably XFRM is not enabled in the kernel. Have look at the list
> of kernel modules which have to be activated:
>
> http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
>
> Regards
>
> Andreas
>
> On 11/17/2010 08:51 PM, Zorgh wrote:
>> Hi,
>>
>> I got error "charon too long to start... - kill kill". Can somebody help
>> me to fix it ?
>>
>> I'm using Debian Lenny and StrongSwan 4.2.4.
>>
>> Thanks so much.
>>
>> _The log information_:
>>
>> /# ipsec start --nofork
>> Starting strongSwan 4.2.4 IPsec [starter]...
>> 01[DMN] starting charon (strongSwan Version 4.2.4)
>> 01[DMN] killing daemon: unable to bind XFRM event socket
>> charon has died -- restart scheduled (5sec)
>> charon refused to be started/
>
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Linux VPN Solution!                www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==

Nevertheless!

/# uname -r
2.6.26-2-openvz-686

# cat /boot/config-2.6.26-2-openvz-686  | grep XFRM
CONFIG_XFRM=y
CONFIG_XFRM_USER=m
# CONFIG_XFRM_SUB_POLICY is not set
# CONFIG_XFRM_MIGRATE is not set
# CONFIG_XFRM_STATISTICS is not set
CONFIG_INET_XFRM_TUNNEL=m
CONFIG_INET_XFRM_MODE_TRANSPORT=m
CONFIG_INET_XFRM_MODE_TUNNEL=m
CONFIG_INET_XFRM_MODE_BEET=m
CONFIG_INET6_XFRM_TUNNEL=m
CONFIG_INET6_XFRM_MODE_TRANSPORT=m
CONFIG_INET6_XFRM_MODE_TUNNEL=m
CONFIG_INET6_XFRM_MODE_BEET=m
CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION=m
CONFIG_XFRM_USER=m

# lsmod |grep xfrm
xfrm_user              18208  0
xfrm4_tunnel            3072  0
tunnel4                 3784  1 xfrm4_tunnel/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20101117/9441eafc/attachment.html>