[support] dynamic keying (error on racoon2)

[Sebastien Decugis]

Hi,

Nice catch, thank you :)
I have fixed the typo in the document. The updated version is available at:
http://www.nautilus6.org/doc/dk-howto/Howto_dynamic_keying.html
(version 1.1)

Best regards,
Sebastien.
(resending from authorized address, sorry for duplicate)

Romain KUNTZ a écrit :
> Hi,
>
> There is actually a typo in the following documents :
> -
> http://www.nautilus6.org/doc/dk-howto/Howto_dynamic_keying.html#Configuring_racoon2_on_the_Home_Agent
> -
> http://www.nautilus6.org/~sdecugis/dynamic_keying/Howto_dynamic_keying.html#Configuring_racoon2_on_the_Home_Agent
> <http://www.nautilus6.org/%7Esdecugis/dynamic_keying/Howto_dynamic_keying.html#Configuring_racoon2_on_the_Home_Agent>
>
> A quote is missing at the end of the following line:
>       spmd { unix "/var/run/racoon2/spmif; };
> It should be:
>       spmd { unix "/var/run/racoon2/spmif”; };
>
> Sebastien, can you fix  the documents?
>
> Thanks,
> romain
>
>
> On 2009/05/21, at 18:25, Brama Subhifajar wrote:
>
>> dear forum,
>>
>> I have try tutorial
>> from http://www.nautilus6.org/~sdecugis/dynamic_keying/Howto_dynamic_keying-v0.1.html
>> <http://www.nautilus6.org/%7Esdecugis/dynamic_keying/Howto_dynamic_keying-v0.1.html> 
>> but i found something strange when start the daemon on HA
>> /usr/sbin/spmd -Fddd
>>
>> reading config file /etc/racoon2/racoon2.conf
>> /etc/racoon2/racoon2.conf:1:1[interface] len=9
>> /etc/racoon2/racoon2.conf:1:1[{] len=1
>> /etc/racoon2/racoon2.conf:2:1[ike] len=3
>> /etc/racoon2/racoon2.conf:2:1[{] len=1
>> /etc/racoon2/racoon2.conf:2:1[MY_IP] len=5
>> /etc/racoon2/racoon2.conf:2:1[;] len=1
>> /etc/racoon2/racoon2.conf:2:1[}] len=1
>> /etc/racoon2/racoon2.conf:2:1[;] len=1
>> /etc/racoon2/racoon2.conf:3:1[spmd]
>>  len=4
>> /etc/racoon2/racoon2.conf:3:1[{] len=1
>> /etc/racoon2/racoon2.conf:3:1[unix] len=4
>> /etc/racoon2/racoon2.conf:3:1["/var/run/racoon2/spmif; };
>>         spmd_password "] len=44
>> /etc/racoon2/racoon2.conf:3:1[/etc/racoon2/spmd.pwd] len=21
>> ERROR: /etc/racoon2/racoon2.conf:3: syntax error [spmd { unix "/var/run/racoon2/spmif; };
>>         spmd_password "/etc/racoon2/spmd.pwd]
>> 2009-05-22 00:04:27 [INTERNAL_ERR]: main.c:163: Failed to parse configuration file:/etc/racoon2/racoon2.conf
>>
>> /usr/sbin/iked -Fddd
>>
>> reading config file /etc/racoon2/racoon2.conf
>> /etc/racoon2/racoon2.conf:1:1[interface] len=9
>> /etc/racoon2/racoon2.conf:1:1[{] len=1
>> /etc/racoon2/racoon2.conf:2:1[ike] len=3
>> /etc/racoon2/racoon2.conf:2:1[{] len=1
>> /etc/racoon2/racoon2.conf:2:1[MY_IP] len=5
>> /etc/racoon2/racoon2.conf:2:1[;] len=1
>> /etc/racoon2/racoon2.conf:2:1[}]
>>  len=1
>> /etc/racoon2/racoon2.conf:2:1[;] len=1
>> /etc/racoon2/racoon2.conf:3:1[spmd] len=4
>> /etc/racoon2/racoon2.conf:3:1[{] len=1
>> /etc/racoon2/racoon2.conf:3:1[unix] len=4
>> /etc/racoon2/racoon2.conf:3:1["/var/run/racoon2/spmif; };
>>         spmd_password "] len=44
>> /etc/racoon2/racoon2.conf:3:1[/etc/racoon2/spmd.pwd] len=21
>> ERROR: /etc/racoon2/racoon2.conf:3: syntax error [spmd { unix "/var/run/racoon2/spmif; };
>>         spmd_password "/etc/racoon2/spmd.pwd]
>>
>> file /var/run/racoon2/spmif is not found
>>
>> I am using homeguy, racoon2-20070720a, six patch from http://www.nautilus6.org/~sdecugis/dynamic_keying/racoon2/ <http://www.nautilus6.org/%7Esdecugis/dynamic_keying/racoon2/> 
>> (when I am using racoon2 higher version and apply the patch, I have error when installing: make, make install. so i am using racoon2-20070720a). 
>> I have done this syntax:
>>
>> extract racoon2-20070720a.tar
>> go to folder racoon2-20070720a
>> copy/download six patch from http://www.nautilus6.org/~sdecugis/dynamic_keying/racoon2/ <http://www.nautilus6.org/%7Esdecugis/dynamic_keying/racoon2/>
>> apply patch : #cat *.patch | patch -p1
>> install with root mode:
>> #./configure --enable-updateifaddr --prefix=/usr --sysconfdir=/etc/racoon2 
>> (/bin/sh -> /bin/bash and on /usr/src/ I made soft link linux -> linux-headers-2.6-mip6).
>> #make
>> #make install
>> it is done well with
>>  no error
>>
>> but file /var/run/racoon2/spmif is not found and folder certs is not found (so I make manually certs folder on MN for mn.mydomain.com.cert, mn.mydomain.com.key.pem, cacert.pem) 
>>
>> have I miss when installing racoon2 ? or somebody have an idea?
>>
>> thanks before,...
>>     
>>
>> ------------------------------------------------------------------------
>> Akses email lebih cepat. 
>> <http://us.lrd.yahoo.com/_ylc=X3oDMTFndmQxc2JlBHRtX2RtZWNoA1RleHQgTGluawR0bV9sbmsDVTExMDM0NjkEdG1fbmV0A1lhaG9vIQ--/SIG=11kadq57p/**http%3A//downloads.yahoo.com/id/internetexplorer/>
>> Yahoo! menyarankan Anda meng-upgrade browser ke Internet Explorer 8
>> baru yang dioptimalkan untuk Yahoo! Dapatkan di sini! (Gratis)
>> <http://us.lrd.yahoo.com/_ylc=X3oDMTFndmQxc2JlBHRtX2RtZWNoA1RleHQgTGluawR0bV9sbmsDVTExMDM0NjkEdG1fbmV0A1lhaG9vIQ--/SIG=11kadq57p/**http%3A//downloads.yahoo.com/id/internetexplorer/>_______________________________________________
>> Support mailing list
>> Support at ml.nautilus6.org <mailto:Support at ml.nautilus6.org>
>> http://ml.nautilus6.org/mailman/listinfo/support
>

-- 
Sebastien Decugis
Research fellow
Network Architecture Group
NICT (nict.go.jp)