[strongSwan] charon too long to start...

[Andreas Steffen]

Assuming from your /# prompt you are starting charon as root.
So this cannot be the reason that charon can't bind to the XFRM socket.

Andreas

On 11/17/2010 10:11 PM, Zorgh wrote:
> Le 17/11/2010 21:56, Andreas Steffen a écrit :
>> Probably XFRM is not enabled in the kernel. Have look at the list
>> of kernel modules which have to be activated:
>>
>> http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
>>
>> Regards
>>
>> Andreas
>>
>> On 11/17/2010 08:51 PM, Zorgh wrote:
>>> Hi,
>>>
>>> I got error "charon too long to start... - kill kill". Can somebody help
>>> me to fix it ?
>>>
>>> I'm using Debian Lenny and StrongSwan 4.2.4.
>>>
>>> Thanks so much.
>>>
>>> _The log information_:
>>>
>>> /# ipsec start --nofork
>>> Starting strongSwan 4.2.4 IPsec [starter]...
>>> 01[DMN] starting charon (strongSwan Version 4.2.4)
>>> 01[DMN] killing daemon: unable to bind XFRM event socket
>>> charon has died -- restart scheduled (5sec)
>>> charon refused to be started/
>>
>> ======================================================================
>> Andreas Steffen andreas.steffen at strongswan.org
>> strongSwan - the Linux VPN Solution! www.strongswan.org
>> Institute for Internet Technologies and Applications
>> University of Applied Sciences Rapperswil
>> CH-8640 Rapperswil (Switzerland)
>> ===========================================================[ITA-HSR]==
>
> Nevertheless!
>
> /# uname -r
> 2.6.26-2-openvz-686
>
> # cat /boot/config-2.6.26-2-openvz-686  | grep XFRM
> CONFIG_XFRM=y
> CONFIG_XFRM_USER=m
> # CONFIG_XFRM_SUB_POLICY is not set
> # CONFIG_XFRM_MIGRATE is not set
> # CONFIG_XFRM_STATISTICS is not set
> CONFIG_INET_XFRM_TUNNEL=m
> CONFIG_INET_XFRM_MODE_TRANSPORT=m
> CONFIG_INET_XFRM_MODE_TUNNEL=m
> CONFIG_INET_XFRM_MODE_BEET=m
> CONFIG_INET6_XFRM_TUNNEL=m
> CONFIG_INET6_XFRM_MODE_TRANSPORT=m
> CONFIG_INET6_XFRM_MODE_TUNNEL=m
> CONFIG_INET6_XFRM_MODE_BEET=m
> CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION=m
> CONFIG_XFRM_USER=m
>
> # lsmod |grep xfrm
> xfrm_user              18208  0
> xfrm4_tunnel            3072  0
> tunnel4                 3784  1 xfrm4_tunnel/

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==