similar to: Problems with ipsec roadwarrior

Hi, we've upgraded recently from samba 3.0.23 to 3.0.25b. Since then, we've getting these error messages from winbindd: Jul 17 12:00:23 cvk027 winbindd[20772]: [2007/07/17 12:00:23, 0] lib/util_str.c:safe_strcpy_fn(659) The volume of these messages is very high, many times together with unreadable character garbage. Is there any way to correct or suppress these messages? Our

Tom, After reading your latest postings, I am correct in understanding that, even with the netfilter-ipsec and policy patches in kernel 2.6, I still would not be able to connect more that one roadwarrior at a time? Mitch

I''ve successfully tested an IPSEC Roadwarrior configuration where both the gateway and the roadwarrior are runniing 2.6 with Racoon. The Shorewall IPSEC-2.6 documentation (http://shorewall.net/IPSEC.htm) has been updated to reflect my experimentation. Note that you can get the new ''ipsecvpn'' script from CVS until I release RC1 in the next day or so. -Tom -- Tom

Dear tinc community, I am using tinc in switch mode. I have three nodes. Two nodes reside on routers, vpn-eth is bridged with internal lan, each router has several machines connected to it's internal lan. Third node is the roadwarrior - "endpoint" linux PC. When the roadwarrior is off - everything works perfectly, machines on both sides can communicate without a problem in any

Thanks for getting back to me so quickly on this. In thinking about the topology that I am trying to set up, I will probably only set up a "private" DNS on the VPN for the 10.x.x.x users. With this in mind, I have now come up with a new question relating to this. What I will like to do is to give all of the uses, including roadwarriors, a static IP address on the 10.x.x.x address

I wants to start a win Prog called "Mathe Coach" with wine. And yes I know that there are ohter and better Progs for linux, but it has to be that one....not my decision :-) The occuring problem is that wine hangs in a loop and i can't make neither head nor tail of the debug messages (the file is over 10 MB large, and i abborted wine after a few seconds to avoid larger files) here a

Mar 27 10:54:08 cvk-7 kernel: [ 361.374376] INFO: task kworker/u:1:73 blocked for more than 120 seconds. Mar 27 10:54:08 cvk-7 kernel: [ 361.374383] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Mar 27 10:54:08 cvk-7 kernel: [ 361.374389] kworker/u:1 D ffffffff81806240 0 73 2 0x00000000 Mar 27 10:54:08 cvk-7 kernel: [ 361.374395]

>From your post on Oct. 4, 2004 >As I announced earlier, I''m on vacation this week and we are spending >the week at our second home. Before I left, I simulated an IPSEC tunnel >between this house and our home in the Seattle area and I''m pleased to >announce that the real tunnel works flawlessly. > >So I believe that I have done all of the testing that I can

Hello All, I was just looking over how to set up the hosts files for Tinc and was wondering about how to handle Roadwarriors? It appears that the variable "Address=" must be set for individuals to connect to a host, right? Also, I am wondering about possibly using a private DNS+DHCP server combination that would allow the 10.x.x.x users to have their VPN ip resolved but this does

While I have concentrated on support for 2.6 native IPSEC in release 2.2.0, I am still of the opinion that unless you absolutely need IPSEC compatibility that OpenVPN is a much easier (and in the case of roadwarriors, a much better) solution. Having already generated all of the required X.509 certificates, it took me less than 1/2 hr to replace my IPSEC testbed with an OpenVPN one using the new

Buf ... Solved. Problem was that /etc/pam.d/racoon doesn't exists (I found this tip on NetBSD ipsec pages). Simply I have copied /etc/pam.d/passwd to /etc/pam.d/racoon and now all works as expected. Many thanks for your help Ross. Ross S. W. Walker wrote: > > I think it might just use another one like /etc/pam.d/remote > cause I audited the package and it wasn't there.

I had test the command virsh blockcommit, but it failed, with the libvirt version 1.1.0, and qemu version 1.6.0. Is this feature being developing? Thanks root at cvk-31:/vms/images# virsh -v 1.1.0 root at cvk-31:/vms/images# qemu-img -V qemu-img version 1.6.0, Copyright (c) 2004-2008 Fabrice Bellard usage: qemu-img command [command options] root at cvk-31:/vms/images# virsh blockcommit Vmtest

hi, I can''t get a freeswan 2.02 ipsec x509 connection at work can somebody help me? ************************************************************************************* global situation ************************************************************************************* the linux gateway (chivas) is a single machine 192.168.1.250 with a local net 192.168.1.0/24, a dyn IP via a DSL

Hi all, Somebody can explains me how can I configure ipsec-tools package to use private virtual ip address as an openswan does or some doc/howto about it?? I have seen this howto, but doesn't works for me: http://www.howtoforge.com/racoon_roadwarrior_vpn Many thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

Hello, I'm asking for a hint. Here is my problem: I have some web servers (LAMP) I want to administer from main office, home (dynamic IP) , iPad and Laptop with 3G connection (roadwarrior). I was thinking of creating a VPN between servers , in this way I could connect securely and easily to server ports (es. Mysql ) without opening the firewall. I am starting to play with Tinc because

Hello to everyone in the list, i have a IPCop firewall with vpn service running and just one roadwarrior (xp sp2 pc), everything is fine, but when the remote pc tries to connect (or just view) to the samba file server shares there is no accessible. The other clients of the lan are all visibles. Is there any way to view and share the samba file server through the ipcop vpn or i need to setup a

Hi, I have another question, when I do the blockcommit command and get the result " Top image as the active layer is currently unsupported ", is it being developed? root@cvk-31:/vms/images# virsh blockcommit Vmtest /vms/images/Vmtest1;echo $? error: internal error unable to execute QEMU command 'block-commit': Top image as the active layer is currently unsupported 1 But as I

Hello everyone, I''m not sure whether to place my question here or in the racoon mailing list or even in that of iptables. I have created an ipsec connection with racoon in tunnel mode to another gateway to connect one subnet on each side to each other. This works fine. Only the ipsec gateway itself can''t send packages to the opposite subnet. Shorewall is configured according

[dropping libvir-list - this is a usage question, not a development question] On 09/02/2013 11:29 PM, Guozhonghua wrote: > I had test the command virsh blockcommit, but it failed, with the libvirt version 1.1.0, and qemu version 1.6.0. > Is this feature being developing? Thanks The feature is supported, but you have to use it correctly. In particular, your backing chain MUST label the

Hai Peter, Chipping in here. > > > Hi Rowland, > > You are right about firewall boxes. At least Cisco ASA is a terribly > (over) complicated device. People who are not Cisco pros should be > warned. Stay away, you will just waste your time, get frustrated, and > get sleepless nights. > > I don't blame the Cisco ASA here. In my case, I hadn't much