Ralf Spenneberg [Tue, Aug 26, 2003 at 01:43:07PM +0200]: > Am Die, 2003-08-26 um 13.16 schrieb Nico Schottelius: > > Are there still known problems with ipsec/2.6.0test4 ? > > I am trying it with isakmpd with the following result: > > > > bruehe:/etc/cron.d# isakmpd -d > > 131816.802082 Default check_policy: negotiated SA failed policy check > > 131816.802744 Default message_negotiate_sa: no compatible proposal found > > 131816.803208 Default dropped message from 213.69.232.59 port 500 due to notification type NO_PROPOSAL_CHOSEN > > 131816.803910 Default responder_recv_HASH_SA_NONCE: KEY_EXCH payload without a group desc. attribute > > 131816.804268 Default dropped message from 213.69.232.59 port 500 due to notification type NO_PROPOSAL_CHOSEN > > 131816.804797 Default group_get: group ID (0) out of range > Could you post your configuration? it is on http://schotteli.us/~nico/isakmpd/wdt-home/ > Did you compile the isakmpd referencing the test4 kernel? no, it's prebuilt-debian. > There have been some changes in the ABI and I have not tested the newest > kernel using isakmpd myself, so it might not work. btw, what do I use to show the SAs? Nico -- quote: there are two time a day you should do nothing: before 12 and after 12 (Nico Schottelius after writin' a very senseless email) cmd: echo God bless America | sed 's/.*\(A.*\)$/Why \1?/' pgp: new id: 0x8D0E27A4 | ftp.schottelius.org/pub/familiy/nico/pgp-key.new url: http://nerd-hosting.net - domains for nerds (from a nerd)
Attachment:
pgp00087.pgp
Description: PGP signature
