Bug 137589 – openswan-2.4.4 won't start /etc/init.d/ipsec - fatal error with init_netlink()

• Product: Gentoo Linux
• Status: VERIFIED REMIND

[Description Greg Watson (linuxkrn) 2006-06-22 07:22:46 UTC]

Jun 22 08:07:01 dogwood ipsec_setup: ipsec_setup: WARNING: cannot flush state/policy database -- `%defaultroute'. Install a newer version of iproute/iproute2 or install the ipsec-tools package to obtain the setkey command.
Jun 22 08:07:01 dogwood ipsec_setup: KLIPS ipsec0 on eth1 72.54.103.5/255.255.255.248 broadcast 72.54.103.7
Jun 22 08:07:01 dogwood ipsec__plutorun: Starting Pluto subsystem...
Jun 22 08:07:01 dogwood pluto[6280]: Starting Pluto (Openswan Version 2.4.4 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OEz}FFFfgr_e)
Jun 22 08:07:01 dogwood pluto[6280]: Setting NAT-Traversal port-4500 floating to off
Jun 22 08:07:01 dogwood pluto[6280]:    port floating activation criteria nat_t=0/port_fload=1
Jun 22 08:07:01 dogwood pluto[6280]:   including NAT-Traversal patch (Version 0.6c) [disabled]
Jun 22 08:07:01 dogwood pluto[6280]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Jun 22 08:07:01 dogwood pluto[6280]: starting up 3 cryptographic helpers
Jun 22 08:07:01 dogwood ipsec_setup: ...Openswan IPsec started
Jun 22 08:07:01 dogwood pluto[6280]: started helper pid=6285 (fd:6)
Jun 22 08:07:01 dogwood pluto[6280]: started helper pid=6287 (fd:7)
Jun 22 08:07:01 dogwood pluto[6280]: started helper pid=6289 (fd:8)
Jun 22 08:07:01 dogwood pluto[6280]: Using Linux 2.6 IPsec interface code on 2.6.15-gentoo-r1
Jun 22 08:07:01 dogwood pluto[6280]: FATAL ERROR: Failed to bind bcast socket in init_netlink(). Errno 2: No such file or directory
Jun 22 08:07:01 dogwood ipsec__plutorun: whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Jun 22 08:07:01 dogwood ipsec__plutorun: ...could not add conn "host-to-host"
Jun 22 08:07:01 dogwood ipsec__plutorun: whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Jun 22 08:07:01 dogwood ipsec__plutorun: !pluto failure!:  exited with error status 1
Jun 22 08:07:01 dogwood ipsec__plutorun: restarting IPsec after pause...

I have:
[I--] [  ] sys-apps/iproute2-2.6.15.20060110 (0)
[I--] [ -] net-misc/openswan-2.4.4 (0)



Portage 2.1 (default-linux/x86/2006.0, gcc-3.4.5, glibc-2.3.6-r3, 2.6.15-gentoo-r1 i686)
=================================================================
System uname: 2.6.15-gentoo-r1 i686 Intel(R) Xeon(TM) CPU 3.00GHz
Gentoo Base System version 1.6.14
dev-lang/python:     2.4.2
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     [Not Present]
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/gcc-config: 1.3.13-r2
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/terminfo"
CXXFLAGS="-O2 -march=i686 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://www.gtlib.gatech.edu/pub/gentoo http://ftp.ucsb.edu/pub/mirrors/linux/gentoo/ http://gentoo.chem.wisc.edu/gentoo/ http://cudlug.cudenver.edu/gentoo/ http://gentoo.mirrors.pair.com/ http://mirror.espri.arizona.edu/gentoo/ ftp://ftp.ndlug.nd.edu/pub/gentoo/ "
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 acl alsa apache2 apm arts avi berkdb bitmap-fonts cli crypt dri eds emboss encode esd foomaticdb fortran gdbm gif gpm gstreamer imlib isdnlog jpeg ldap libclamav libg++ libwww logrotate mad mikmod motif mp3 mpeg mysql ncurses nls nptl ogg opengl oss pam pcre pdflib perl png pppd python quicktime quotas readline reflection samba sdl session skey spell spl ssl syslog tcpd truetype truetype-fonts type1-fonts udev vorbis winbind xml xmms xorg xv zlib elibc_glibc kernel_linux userland_GNU"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

[Comment 1 Jakub Moc (RETIRED) 2006-06-23 07:43:06 UTC]

Restricting and closing per reporter request b/c of sensitive info contained in the log.

[Comment 2 Jakub Moc (RETIRED) 2006-06-23 07:45:55 UTC]

Closed.