<div dir="ltr">I don't use systemd. I use openrc.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Oct 25, 2020 at 10:45 AM Paul Wouters <<a href="mailto:paul@nohats.ca">paul@nohats.ca</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Sun, 25 Oct 2020, Brian McKee wrote:<br>
<br>
Maybe explicitely build with INITSYSTEM=systemd and see if that fixes<br>
things?<br>
<br>
Paul<br>
<br>
> Date: Sun, 25 Oct 2020 12:20:53<br>
> From: Brian McKee <<a href="mailto:raydude@gmail.com" target="_blank">raydude@gmail.com</a>><br>
> Cc: "<a href="mailto:Swan@lists.libreswan.org" target="_blank">Swan@lists.libreswan.org</a>" <<a href="mailto:Swan@lists.libreswan.org" target="_blank">Swan@lists.libreswan.org</a>><br>
> To: Douglas Kosovic <<a href="mailto:doug@uq.edu.au" target="_blank">doug@uq.edu.au</a>><br>
> Subject: Re: [Swan] Issue with networkmanager and l2tp<br>
> <br>
> I found another beginner mistake in the ebuild and reinstalled libreswan.<br>
> The messages I'm getting now are:<br>
> <br>
> Oct 25 09:17:49 threads NetworkManager[6124]: <info> [1603642669.8190] audit: op="statistics"<br>
> arg="refresh-rate-ms" pid=10301 uid=1000 result="success"<br>
> Oct 25 09:17:58 threads NetworkManager[6124]: <info> [1603642678.4519] audit: op="connection-activate"<br>
> uuid="9a088450-2a7b-4012-befe-facf564c77e0" name="wtec-SJ" pid=10301 uid=1000 result="success"<br>
> Oct 25 09:17:58 threads NetworkManager[6124]: <info> [1603642678.4627]<br>
> vpn-connection[0x562e3e1ca100,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: Started the VPN service, PID<br>
> 12655<br>
> Oct 25 09:17:58 threads NetworkManager[6124]: <info> [1603642678.4691]<br>
> vpn-connection[0x562e3e1ca100,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: Saw the service appear;<br>
> activating connection<br>
> Oct 25 09:17:59 threads NetworkManager[6124]: <info> [1603642679.1184] audit: op="statistics"<br>
> arg="refresh-rate-ms" pid=10301 uid=1000 result="success"<br>
> Oct 25 09:18:05 threads kernel: Initializing XFRM netlink socket<br>
> Oct 25 09:18:05 threads kernel: IPv4 over IPsec tunneling driver<br>
> Oct 25 09:18:05 threads NetworkManager[6124]: <info> [1603642685.7716] manager: (ip_vti0): new Generic device<br>
> (/org/freedesktop/NetworkManager/Devices/6)<br>
> Oct 25 09:18:05 threads kernel: IPsec XFRM device driver<br>
> Oct 25 09:18:15 threads NetworkManager[6124]: <info> [1603642695.8344]<br>
> vpn-connection[0x562e3e1ca100,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN plugin: state changed:<br>
> stopped (6)<br>
> Oct 25 09:18:15 threads NetworkManager[6124]: <info> [1603642695.8375]<br>
> vpn-connection[0x562e3e1ca100,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN service disappeared<br>
> Oct 25 09:18:15 threads NetworkManager[6124]: <warn> [1603642695.8385]<br>
> vpn-connection[0x562e3e1ca100,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN connection: failed to<br>
> connect: 'Message recipient disconnected from message bus without replying'<br>
> <br>
> On Sun, Oct 25, 2020 at 9:03 AM Brian McKee <<a href="mailto:raydude@gmail.com" target="_blank">raydude@gmail.com</a>> wrote:<br>
> Hi Doug,<br>
> <br>
> I'm back again...<br>
> I found an ipsec init script produced by libreswan's compile in ${IPSEC_CONFDIR}/../ipsec<br>
> I modified the ebuild to move that script in /etc/init.d/ and it works.<br>
> But I still can't connect to work. Here is the output in /var/log/messages:<br>
> <br>
> Oct 25 08:57:15 threads NetworkManager[6097]: <info> [1603641435.8662] audit: op="statistics"<br>
> arg="refresh-rate-ms" pid=10312 uid=1000 result="success"<br>
> Oct 25 08:57:18 threads NetworkManager[6097]: <info> [1603641438.4577] audit: op="connection-activate"<br>
> uuid="9a088450-2a7b-4012-befe-facf564c77e0" name="wtec-SJ" pid=10312 uid=1000 resul<br>
> t="success"<br>
> Oct 25 08:57:18 threads NetworkManager[6097]: <info> [1603641438.4623]<br>
> vpn-connection[0x55bd019c0590,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: Started the VPN service,<br>
> PID 24090<br>
> Oct 25 08:57:18 threads NetworkManager[6097]: <info> [1603641438.4669]<br>
> vpn-connection[0x55bd019c0590,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: Saw the service appear;<br>
> activating<br>
> connection<br>
> Oct 25 08:57:19 threads NetworkManager[6097]: <info> [1603641439.0556] audit: op="statistics"<br>
> arg="refresh-rate-ms" pid=10312 uid=1000 result="success"<br>
> Oct 25 08:57:33 threads NetworkManager[6097]: <info> [1603641453.8567]<br>
> vpn-connection[0x55bd019c0590,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN plugin: state<br>
> changed: stopped<br>
> (6)<br>
> Oct 25 08:57:33 threads NetworkManager[6097]: <info> [1603641453.8597]<br>
> vpn-connection[0x55bd019c0590,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN service disappeared<br>
> Oct 25 08:57:33 threads NetworkManager[6097]: <warn> [1603641453.8607]<br>
> vpn-connection[0x55bd019c0590,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN connection: failed<br>
> to connect:<br>
> 'Message recipient disconnected from message bus without replying'<br>
> <br>
> /usr/sbin/ipsec start works now:<br>
> threads /etc/init.d # /usr/sbin/ipsec start<br>
> Redirecting to: rc-service ipsec start<br>
> * WARNING: ipsec has already been started<br>
> <br>
> Thanks for your patience and help.<br>
> <br>
> On Sun, Oct 25, 2020 at 8:13 AM Brian McKee <<a href="mailto:raydude@gmail.com" target="_blank">raydude@gmail.com</a>> wrote:<br>
> You are right. ipsec won't start because there is no service:/usr/sbin/ipsec start<br>
> Redirecting to: rc-service ipsec start<br>
> * rc-service: service `ipsec' does not exist<br>
> I have to figure out how to create a service script for it.<br>
> Perhaps I can get some help from the libreswan ebuild maintainer.<br>
> I'll post in the bug report I created.<br>
> <br>
> Thanks for your help.<br>
> <br>
> <br>
> On Sun, Oct 25, 2020 at 5:49 AM Douglas Kosovic <<a href="mailto:doug@uq.edu.au" target="_blank">doug@uq.edu.au</a>> wrote:<br>
> Hi Brian,<br>
> <br>
> <br>
> So the following doesn't work<br>
> <br>
> sudo /sbin/ipsec restart<br>
> <br>
> and I suspect:<br>
> <br>
> sudo /sbin/ipsec start<br>
> <br>
> the gentoo libreswan ebuild has both openrc and systemd, sorry I have no idea how the gentoo<br>
> ebuild works with init script.<br>
> <br>
> If you are using systemd, running the following might give a hint as to what needs to be done<br>
> or is missing.<br>
> <br>
> sudo systemctl restart ipsec.service<br>
> <br>
> <br>
> With systemd, I think it needs the following file to exist, but not sure with gentoo:<br>
> /lib/systemd/system/ipsec.service<br>
> <br>
> <br>
> Sorry I'm not familiar with openrc or if gentoo is using some openrc/systemd hybrid setup,<br>
> but your rcscript suspicion seems plausible.<br>
> <br>
> <br>
> <br>
> Cheers,<br>
> Doug<br>
> <br>
> _______________________________________________________________________________________________________________<br>
> From: Brian McKee <<a href="mailto:raydude@gmail.com" target="_blank">raydude@gmail.com</a>><br>
> Sent: Sunday, 25 October 2020 6:04 AM<br>
> To: Paul Wouters <<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>><br>
> Cc: Douglas Kosovic <<a href="mailto:doug@uq.edu.au" target="_blank">doug@uq.edu.au</a>>; <a href="mailto:Swan@lists.libreswan.org" target="_blank">Swan@lists.libreswan.org</a> <<a href="mailto:Swan@lists.libreswan.org" target="_blank">Swan@lists.libreswan.org</a>><br>
> Subject: Re: [Swan] Issue with networkmanager and l2tp <br>
> I have /sbin/ipsec.<br>
> I rebooted to get networkmanager to restart with the latest version of libreswan.<br>
> <br>
> I'm still getting an error message:<br>
> <br>
> Oct 24 12:58:23 threads NetworkManager[6097]: <info> [1603569503.8941] audit:<br>
> op="statistics" arg="refresh-rate-ms" pid=10312 uid=1000 result="success"<br>
> Oct 24 12:58:27 threads NetworkManager[6097]: <info> [1603569507.6586] audit:<br>
> op="connection-activate" uuid="9a088450-2a7b-4012-befe-facf564c77e0" name="wtec-SJ" pid=10312<br>
> uid=1000 resul<br>
> t="success"<br>
> Oct 24 12:58:27 threads NetworkManager[6097]: <info> [1603569507.6708]<br>
> vpn-connection[0x55bd019c0170,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: Started the<br>
> VPN service, PID 11786<br>
> Oct 24 12:58:27 threads NetworkManager[6097]: <info> [1603569507.6779]<br>
> vpn-connection[0x55bd019c0170,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: Saw the<br>
> service appear; activating<br>
> connection<br>
> Oct 24 12:58:28 threads NetworkManager[6097]: <info> [1603569508.6593] audit:<br>
> op="statistics" arg="refresh-rate-ms" pid=10312 uid=1000 result="success"<br>
> Oct 24 12:58:32 threads /etc/init.d/NetworkManager[11800]: rc-service: service `ipsec' does<br>
> not exist<br>
> Oct 24 12:58:32 threads NetworkManager[6097]: <warn> [1603569512.8038]<br>
> vpn-connection[0x55bd019c0170,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN<br>
> connection: failed to connect:<br>
> 'Could not restart the ipsec service.'<br>
> Oct 24 12:58:32 threads NetworkManager[6097]: <info> [1603569512.8063]<br>
> vpn-connection[0x55bd019c0170,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN plugin:<br>
> state changed: stopped<br>
> (6)<br>
> Oct 24 12:58:32 threads NetworkManager[6097]: <info> [1603569512.8081]<br>
> vpn-connection[0x55bd019c0170,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]: VPN service<br>
> disappeared<br>
> <br>
> It's still looking for ipsec. I think it's looking for /etc/init.d/ipsecd or something like<br>
> that based on the error message. Is an rcscript meant to be added by libreswan? So that<br>
> something else is missing from the ebuild?<br>
> <br>
> Again, I really appreciate your patience with me. Thanks so much.<br>
> <br>
> On Sat, Oct 24, 2020 at 7:08 AM Paul Wouters <<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>> wrote:<br>
> pluto[17294]: ignoring message from whack with bad magic 1869114160; should<br>
> be 1869114159; Mismatched versions of userland tools. <br>
> Sent<br>
> <br>
> It looks like either you have two installs (one in /usr and one in /usr/local or your<br>
> pluto<br>
> did not restart after installing a newer version ?<br>
> <br>
> Paul<br>
> <br>
> <br>
><br>
> On Oct 23, 2020, at 23:26, Brian McKee <<a href="mailto:raydude@gmail.com" target="_blank">raydude@gmail.com</a>> wrote:<br>
><br>
> Hi Paul and Doug,<br>
> <br>
> So I got libreswan 4.1 to install with the new folder by modifying the ebuild,<br>
> but I'm still having problems. Here is the output of networkmanager:<br>
> Oct 23 20:19:40 threads NetworkManager[4579]: <info> [1603509580.7688] audit:<br>
> op="statistics" arg="refresh-rate-ms" pid=5647 uid=1000 result="success"<br>
> Oct 23 20:19:42 threads NetworkManager[4579]: <info> [1603509582.5025] audit:<br>
> op="connection-activate" uuid="9a088450-2a7b-4012-befe-facf564c77e0"<br>
> name="wtec-SJ" pid=5647 uid=1000 result<br>
> ="success"<br>
> Oct 23 20:19:42 threads NetworkManager[4579]: <info> [1603509582.5068]<br>
> vpn-connection[0x56488972c0a0,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]:<br>
> Started the VPN service, PID 28727<br>
> Oct 23 20:19:42 threads NetworkManager[4579]: <info> [1603509582.5115]<br>
> vpn-connection[0x56488972c0a0,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]:<br>
> Saw the service appear; activating<br>
> connection<br>
> Oct 23 20:19:43 threads NetworkManager[4579]: <info> [1603509583.2001] audit:<br>
> op="statistics" arg="refresh-rate-ms" pid=5647 uid=1000 result="success"<br>
> Oct 23 20:19:51 threads pluto[17294]: ignoring message from whack with bad magic<br>
> 1869114160; should be 1869114159; Mismatched versions of userland tools.<br>
> Oct 23 20:19:51 threads /etc/init.d/NetworkManager[28748]: rc-service: No such<br>
> file or directory<br>
> Oct 23 20:19:51 threads NetworkManager[4579]: <warn> [1603509591.5840]<br>
> vpn-connection[0x56488972c0a0,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]:<br>
> VPN connection: failed to connect:<br>
> 'Could not restart the ipsec service.'<br>
> Oct 23 20:19:51 threads NetworkManager[4579]: <info> [1603509591.5851]<br>
> vpn-connection[0x56488972c0a0,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]:<br>
> VPN plugin: state changed: stopped<br>
> (6)<br>
> Oct 23 20:19:51 threads NetworkManager[4579]: <info> [1603509591.5875]<br>
> vpn-connection[0x56488972c0a0,9a088450-2a7b-4012-befe-facf564c77e0,"wtec-SJ",0]:<br>
> VPN service disappeared<br>
> <br>
> I'm guessing I'm having ipsec issues...<br>
> <br>
> Can you give me a shove in the right direction?<br>
> <br>
> On Fri, Oct 23, 2020 at 10:47 AM Paul Wouters <<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>> wrote:<br>
> On Fri, 23 Oct 2020, Brian McKee wrote:<br>
><br>
> > Thanks Doug!I'll open a ticket with the gentoo devs!<br>
><br>
> They can compile with FINALNSSDIR=/etc/ipsec.d to keep the nss files<br>
> at the same<br>
> location if they prefer that.<br>
><br>
> Note that libreswan-4.x also no longer builds support for DH2, and<br>
> some<br>
> NM-libreswan plugins tried to use dh2+dh5 for IKEv1. So you might<br>
> also<br>
> be running into that. That required a fix to NM-libreswan in fedora<br>
> at<br>
> least.<br>
><br>
> Pau<br>
> <br>
> _______________________________________________<br>
> Swan mailing list<br>
> <a href="mailto:Swan@lists.libreswan.org" target="_blank">Swan@lists.libreswan.org</a><br>
> <a href="https://lists.libreswan.org/mailman/listinfo/swan" rel="noreferrer" target="_blank">https://lists.libreswan.org/mailman/listinfo/swan</a><br>
> <br>
> <br>
> <br>
> --<br>
> -- Consciousness moves everything.<br>
> <br>
> <br>
> <br>
> --<br>
> -- Consciousness moves everything.<br>
> <br>
> <br>
> <br>
> --<br>
> -- Consciousness moves everything.<br>
> <br>
><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">-- Consciousness moves everything.</div>