(racoon 865) BOUNCE [email protected]: Non-member submission from ["sai krishna sai" <[email protected]>]
[email protected] Wed, 24 Nov 2004 16:55:16 +0900 (JST)
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
>From [email protected] Wed Nov 24 16:55:15 2004 Return-Path: <[email protected]> X-Original-To: [email protected] Delivered-To: [email protected] Received: from sardine.kame.net (sardine.kame.net [2001:200:0:8002:210:f3ff:fe03:4d0]) by orange.kame.net (Postfix) with ESMTP id B4C79356728 for <[email protected]>; Wed, 24 Nov 2004 16:55:15 +0900 (JST) Received: from rediffmail.com (unknown [203.199.83.247]) by sardine.kame.net (Postfix) with SMTP id 7C90B951 for <[email protected]>; Wed, 24 Nov 2004 16:54:01 +0900 (JST) Received: (qmail 17489 invoked by uid 510); 24 Nov 2004 06:07:53 -0000 Date: 24 Nov 2004 06:07:53 -0000 Message-ID: <[email protected]> Received: from unknown (203.197.252.77) by rediffmail.com via HTTP; 24 nov 2004 06:07:52 -0000 MIME-Version: 1.0 From: "sai krishna sai" <[email protected]> Reply-To: "sai krishna sai" <[email protected]> To: [email protected] Subject: problem-failed to open the backup file /etc/backupsa.conf. Content-type: multipart/alternative; boundary="Next_1101276472---0-203.199.83.247-17432" This is a multipart mime message --Next_1101276472---0-203.199.83.247-17432 Content-type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =0ASir,=0A=0AI have a problem ragarding the the Configuration and running= of the Racoon(IKE- KAME-IPsec-.4b toos) , could you please give the inform= ation where the problem lies and how to fix the problem?=0A=0AThe problem= =0A=0A=0Athe racoon.conf file is as bolow=0A=0A############################= ############################=0A=0Apath backupsa "/etc/backupsa.conf";=0Apat= h pre_shared_key "/etc/psk.txt";=0A = = =0Aremote 192.168.1.137 {=0A exchange_mode main;=0A = proposal {=0A encryption_algorithm 3des;=0A = hash_algorithm md5;=0A authentication_method pre_shared_key;= =0A dh_group modp1024;=0A }=0A}=0A = = =0A#sainfo address 192.168.1.138 any address= 192.168.1.137 any {=0A # pfs_group modp768;=0A # encryption_al= gorithm 3des;=0A # authentication_algorithm hmac_md5;=0A # comp= ression_algorithm deflate;=0A#}=0A=0A######################################= #######################=0A=0A=0AWhen ever i run the racoon manulally by usi= ng the command=0A=0A # racoon -BdCFL -f /etc/racoon.conf=0A=0Ait = is giving the messages like this mentioned below,=0A =0A2004-11-24 11:07:39= : ERROR: safefile.c:84:safefile(): /etc/backupsa.conf has weak file permiss= ion=0A2004-11-24 11:07:39: ERROR: backupsa.c:228:backupsa_from_file(): fail= ed to open the backup file /etc/backupsa.conf.=0Aracoon: something error ha= ppened SA recovering.=0A=0A=0Athe below messages are dumped onto the consol= e=0A=0A=0A//////###########################################################= ##=0A=0AForeground mode.=0A2004-11-24 11:07:37: INFO: main.c:185:main(): @(= #)ipsec-tools 0.4b1 (http://ipsec-tools.sourceforge.net)=0A2004-11-24 11:07= :37: INFO: main.c:186:main(): @(#)This product linked OpenSSL 0.9.7a Feb 19= 2003 (http://www.openssl.org/)=0A2004-11-24 11:07:37: DEBUG: pfkey.c:384:p= fkey_init(): call pfkey_send_register for AH=0A2004-11-24 11:07:37: DEBUG: = pfkey.c:384:pfkey_init(): call pfkey_send_register for ESP=0A2004-11-24 11:= 07:37: DEBUG: pfkey.c:384:pfkey_init(): call pfkey_send_register for IPCOMP= =0A2004-11-24 11:07:37: DEBUG: cftoken.l:584:yycf_set_buffer(): reading con= fig file /etc/racoon.conf=0A2004-11-24 11:07:37: INFO: remoteconf.c:396:dum= p_rmconf_single(): remote 192.168.1.137[500] {=0A2004-11-24 11:07:37: INFO:= remoteconf.c:404:dump_rmconf_single(): exchange_type main;=0A2004-11= -24 11:07:37: INFO: remoteconf.c:405:dump_rmconf_single(): doi ipsec_= doi;=0A2004-11-24 11:07:37: INFO: remoteconf.c:432:dump_rmconf_single(): = my_identifier address;=0A2004-11-24 11:07:37: INFO: remoteconf.c:438:du= mp_rmconf_single(): peers_identifier address;=0A2004-11-24 11:07:37: = INFO: remoteconf.c:441:dump_rmconf_single(): send_cert on;=0A2004-11-= 24 11:07:37: INFO: remoteconf.c:443:dump_rmconf_single(): send_cr on;= =0A2004-11-24 11:07:37: INFO: remoteconf.c:445:dump_rmconf_single(): = verify_cert on;=0A2004-11-24 11:07:37: INFO: remoteconf.c:447:dump_rmconf_s= ingle(): verify_identifier off;=0A2004-11-24 11:07:37: INFO: remoteco= nf.c:449:dump_rmconf_single(): nat_traversal off;=0A2004-11-24 11:07:= 37: INFO: remoteconf.c:452:dump_rmconf_single(): nonce_size 16;=0A200= 4-11-24 11:07:37: INFO: remoteconf.c:454:dump_rmconf_single(): passiv= e off;=0A2004-11-24 11:07:38: INFO: remoteconf.c:456:dump_rmconf_single(): = initial_contact on;=0A2004-11-24 11:07:38: INFO: remoteconf.c:458:dum= p_rmconf_single(): generate_policy off;=0A2004-11-24 11:07:38: INFO: = remoteconf.c:460:dump_rmconf_single(): support_proxy off;=0A2004-11-2= 4 11:07:38: INFO: remoteconf.c:464:dump_rmconf_single():=0A2004-11-24 11:07= :38: INFO: remoteconf.c:465:dump_rmconf_single(): /* prop_no=3D1, trn= s_no=3D1, rmconf=3D192.168.1.137[500] */2004-11-24 11:07:38: INFO: remoteco= nf.c:469:dump_rmconf_single(): proposal {=0A2004-11-24 11:07:38: INFO= : remoteconf.c:470:dump_rmconf_single(): lifetime time 28800 = sec;=0A2004-11-24 11:07:38: INFO: remoteconf.c:472:dump_rmconf_single(): = lifetime bytes 0;=0A2004-11-24 11:07:38: DEBUG: algorithm.c:644= :alg_oakley_dhdef(): hmac(modp1024)=0A2004-11-24 11:07:38: INFO: remoteconf= .c:474:dump_rmconf_single(): dh_group modp1024;=0A2004-11-24 = 11:07:38: DEBUG: algorithm.c:403:alg_oakley_encdef(): encryption(3des)=0A20= 04-11-24 11:07:38: INFO: remoteconf.c:476:dump_rmconf_single(): = encryption_algorithm 3des;=0A2004-11-24 11:07:38: DEBUG: algorithm.c:260= :alg_oakley_hashdef(): hash(md5)=0A2004-11-24 11:07:38: INFO: remoteconf.c:= 478:dump_rmconf_single(): hash_algorithm md5;=0A2004-11-24 11= :07:38: INFO: remoteconf.c:480:dump_rmconf_single(): authenti= cation_method pre_shared_key;=0A2004-11-24 11:07:39: INFO: remoteconf.c:482= :dump_rmconf_single(): }=0A2004-11-24 11:07:39: INFO: remoteconf.c:48= 5:dump_rmconf_single(): }=0A2004-11-24 11:07:39: INFO: remoteconf.c:486:dum= p_rmconf_single():=0A2004-11-24 11:07:39: ERROR: safefile.c:84:safefile(): = /etc/backupsa.conf has weak file permission=0A2004-11-24 11:07:39: ERROR: b= ackupsa.c:228:backupsa_from_file(): failed to open the backup file /etc/bac= kupsa.conf.=0Aracoon: something error happened SA recovering.=0A=0A########= ############################################## /////////////=0A=0Aso please= give the solution to fix the error ragarding BACKUPSA=0A=0Awhich ype of fi= le is the "backupsa" ?=0Ai mean backupsa.txt or backupsa.conf=0A =0A=0A= please give the solution as soon as possible sir,=0A=0Athanking you,=0A=0AR= egards,=0ASaikrishna G --Next_1101276472---0-203.199.83.247-17432 Content-type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline <P>=0A <BR>=0ASir,<BR>=0A<BR>=0AI have a problem ragarding the the Co= nfiguration and running of the Racoon(IKE- KAME-IPsec-.4b toos) , could you= please give the information where the problem lies and how to fix the prob= lem?<BR>=0A<BR>=0AThe problem<BR>=0A<BR>=0A<BR>=0Athe racoon.conf file is a= s bolow<BR>=0A<BR>=0A######################################################= ##<BR>=0A<BR>=0Apath backupsa "/etc/backupsa.conf";<BR>=0Apath pr= e_shared_key "/etc/psk.txt";<BR>=0A &n= bsp; =  = ; &nb= sp; &= nbsp; = <BR>=0Aremote 192.168.1.137 {<BR>=0A &n= bsp; exchange_mode main;<BR>=0A pr= oposal {<BR>=0A encr= yption_algorithm 3des;<BR>=0A &nbs= p; hash_algorithm md5;<BR>=0A &nbs= p; authentication_method pre_shared_key;<BR>=0A = dh_group modp1024;<BR>=0A &= nbsp; }<BR>=0A}<BR>=0A &nbs= p; &n= bsp; =  = ; &nb= sp; &= nbsp; <BR>=0A#sainfo address 192.168.1.138 any address 192.1= 68.1.137 any {<BR>=0A # pfs_group modp768;<BR>=0A = ; # encryption_algorithm 3des;<BR>=0A # &n= bsp; authentication_algorithm hmac_md5;<BR>=0A # = compression_algorithm deflate;<BR>=0A#}<BR>=0A<BR>=0A#####################= ########################################<BR>=0A<BR>=0A<BR>=0AWhen ever i ru= n the racoon manulally by using the command<BR>=0A<BR>=0A &nbs= p; # racoon -BdCFL -f /etc/racoon.conf<BR>=0A<BR>=0Ait is gi= ving the messages like this mentioned below,<BR>=0A <BR>=0A2004-11-24 11:07= :39: ERROR: safefile.c:84:safefile(): /etc/backupsa.conf has weak file perm= ission<BR>=0A2004-11-24 11:07:39: ERROR: backupsa.c:228:backupsa_from_file(= ): failed to open the backup file /etc/backupsa.conf.<BR>=0Aracoon: somethi= ng error happened SA recovering.<BR>=0A<BR>=0A<BR>=0Athe below messages are= dumped onto the console<BR>=0A<BR>=0A<BR>=0A//////########################= #####################################<BR>=0A<BR>=0AForeground mode.<BR>=0A2= 004-11-24 11:07:37: INFO: main.c:185:main(): @(#)ipsec-tools 0.4b1 (http://= ipsec-tools.sourceforge.net)<BR>=0A2004-11-24 11:07:37: INFO: main.c:186:ma= in(): @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openss= l.org/)<BR>=0A2004-11-24 11:07:37: DEBUG: pfkey.c:384:pfkey_init(): call pf= key_send_register for AH<BR>=0A2004-11-24 11:07:37: DEBUG: pfkey.c:384:pfke= y_init(): call pfkey_send_register for ESP<BR>=0A2004-11-24 11:07:37: DEBUG= : pfkey.c:384:pfkey_init(): call pfkey_send_register for IPCOMP<BR>=0A2004-= 11-24 11:07:37: DEBUG: cftoken.l:584:yycf_set_buffer(): reading config file= /etc/racoon.conf<BR>=0A2004-11-24 11:07:37: INFO: remoteconf.c:396:dump_rm= conf_single(): remote 192.168.1.137[500] {<BR>=0A2004-11-24 11:07:37: INFO:= remoteconf.c:404:dump_rmconf_single(): exchange_type = main;<BR>=0A2004-11-24 11:07:37: INFO: remoteconf.c:405:dump_rmconf_single(= ): doi ipsec_doi;<BR>=0A2004-11-24 11:07:37: INFO: rem= oteconf.c:432:dump_rmconf_single(): my_identifier addr= ess;<BR>=0A2004-11-24 11:07:37: INFO: remoteconf.c:438:dump_rmconf_single()= : peers_identifier address;<BR>=0A2004-11-24 11:07:37:= INFO: remoteconf.c:441:dump_rmconf_single(): send_cer= t on;<BR>=0A2004-11-24 11:07:37: INFO: remoteconf.c:443:dump_rmconf_single(= ): send_cr on;<BR>=0A2004-11-24 11:07:37: INFO: remote= conf.c:445:dump_rmconf_single(): verify_cert on;<BR>= =0A2004-11-24 11:07:37: INFO: remoteconf.c:447:dump_rmconf_single(): = verify_identifier off;<BR>=0A2004-11-24 11:07:37: INFO: remo= teconf.c:449:dump_rmconf_single(): nat_traversal off;<= BR>=0A2004-11-24 11:07:37: INFO: remoteconf.c:452:dump_rmconf_single():&nbs= p; nonce_size 16;<BR>=0A2004-11-24 11:07:37: INFO: remotecon= f.c:454:dump_rmconf_single(): passive off;<BR>=0A2004-= 11-24 11:07:38: INFO: remoteconf.c:456:dump_rmconf_single(): &= nbsp; initial_contact on;<BR>=0A2004-11-24 11:07:38: INFO: remoteconf.c:45= 8:dump_rmconf_single(): generate_policy off;<BR>=0A200= 4-11-24 11:07:38: INFO: remoteconf.c:460:dump_rmconf_single(): = support_proxy off;<BR>=0A2004-11-24 11:07:38: INFO: remoteconf.c:4= 64:dump_rmconf_single():<BR>=0A2004-11-24 11:07:38: INFO: remoteconf.c:465:= dump_rmconf_single(): /* prop_no=3D1, trns_no=3D1, rmc= onf=3D192.168.1.137[500] */2004-11-24 11:07:38: INFO: remoteconf.c:469:dump= _rmconf_single(): proposal {<BR>=0A2004-11-24 11:07:38= : INFO: remoteconf.c:470:dump_rmconf_single(): &= nbsp; lifetime time 28800 sec;<BR>=0A2004-11-24 11:07:38: IN= FO: remoteconf.c:472:dump_rmconf_single():  = ; lifetime bytes 0;<BR>=0A2004-11-24 11:07:38: DEBUG: algori= thm.c:644:alg_oakley_dhdef(): hmac(modp1024)<BR>=0A2004-11-24 11:07:38: INF= O: remoteconf.c:474:dump_rmconf_single(): = dh_group modp1024;<BR>=0A2004-11-24 11:07:38: DEBUG: algori= thm.c:403:alg_oakley_encdef(): encryption(3des)<BR>=0A2004-11-24 11:07:38: = INFO: remoteconf.c:476:dump_rmconf_single(): &nb= sp; encryption_algorithm 3des;<BR>=0A2004-11-24 11:07:38: DE= BUG: algorithm.c:260:alg_oakley_hashdef(): hash(md5)<BR>=0A2004-11-24 11:07= :38: INFO: remoteconf.c:478:dump_rmconf_single():  = ; hash_algorithm md5;<BR>=0A2004-11-24 11:07:38: INFO= : remoteconf.c:480:dump_rmconf_single(): = authentication_method pre_shared_key;<BR>=0A2004-11-24 11:07= :39: INFO: remoteconf.c:482:dump_rmconf_single(): }<BR= >=0A2004-11-24 11:07:39: INFO: remoteconf.c:485:dump_rmconf_single(): }<BR>= =0A2004-11-24 11:07:39: INFO: remoteconf.c:486:dump_rmconf_single():<BR>=0A= 2004-11-24 11:07:39: ERROR: safefile.c:84:safefile(): /etc/backupsa.conf ha= s weak file permission<BR>=0A2004-11-24 11:07:39: ERROR: backupsa.c:228:bac= kupsa_from_file(): failed to open the backup file /etc/backupsa.conf.<BR>= =0Aracoon: something error happened SA recovering.<BR>=0A<BR>=0A###########= ########################################### /////////////<BR>=0A<BR>=0Aso p= lease give the solution to fix the error ragarding BACKUPSA<BR>=0A<BR>=0Awh= ich ype of file is the "backupsa" ?<BR>=0Ai mean backupsa.= txt or backupsa.conf<BR>=0A <BR>=0A<BR>=0Aplease give the solut= ion as soon as possible sir,<BR>=0A<BR>=0Athanking you,<BR>=0A<BR>=0ARegard= s,<BR>=0ASaikrishna G=0A</P>=0A<br><br>=0A<A target=3D"_blank" HREF=3D"http= ://clients.rediff.com/signature/track_sig.asp"><IMG SRC=3D"http://ads.redif= f.com/RealMedia/ads/adstream_nx.cgi/www.rediffmail.com/inbox.htm@Bottom" BO= RDER=3D0 VSPACE=3D0 HSPACE=3D0></a>=0A --Next_1101276472---0-203.199.83.247-17432--