Re: linux-ipsec: PLUTO

| Questions of a beginner ????

Thanks for trying Pluto!

| I have a message " I don't like something about | OAKLEY_AUTHENTICATION_METHOD...." Pluto is full of poor diagnostics. Sorry.

>From the fact that you got this message, I infer that you compiled
with -DDEBUG (debugging code enabled).

| /etc/isakmp-secrets

When Pluto is compiled with DEBUG, it looks for the isakmp-secrets file in the current directory (i.e. the current directory when you started Pluto). I would guess that:

• You should see, just before the message you reported, a message: "get a preshared key with %s first!" %s is replaced by the IP address of the peer.
• The current directory had an isakmp-secrets (otherwise pluto would have exited with the message "fopen() failed in get_preshared_key()".
• The current directory did NOT have the isakmp-secrets you expected (it is in /etc).
• Perhaps the isakmp-secrets file in the current directory is the one from the distribution. Fix obvious.
• If your isakmp-secrets was used, the peer's IP address was not found in the isakmp-secrets. Perhaps the peer's message came in on a different interface. Find out the actual IP address from the message described in the first point. Make sure that there is an isakmp-secrets entry for this IP address.

Hope this helps,

Hugh Redelmeier
hugh@mimosa.com voice: +1 416 482-8253 Received on Tue Jun 9 17:04:21 1998

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek