(racoon2 18) Re: Problems with IKEv2 in racoon2

Martin Eriksson wrote:
> I'm mailing you because I can't seem to find a mailinglist for racoon2. I would really appreciate a response. 
> 
> I'm testing racoon2 and I have a problem. According to the logfile from the initiator: "message lacks IDr payload". I've tried several different setups in the config fil but I can't seem to get it to work. Am I doing something wrong? I've tried to print the id_r value to the logfile using "IDr value: %10c", id_r) but i only get an empty space and some escape/control character at the end. Do you have any other suggestions on how to view the IDr value?
> 


Responder is aborting the exchange due to authentication error, as
evident in the responder's log message.  You have to check whether the
content of pre-shared key files are identical, and the file permission
is correct.  Since the initiator is not receiving IDr, there's no
point of printing it.  You may want to try turning the debug messages
on by iked command line option "-D 3".

Initiator is telling "message lacks IDr payload" because the responder
is replying with error notification (HDR, SK {N}) when the initiator
is expecting IKE_SA_AUTH message (HDR, SK {IDr, AUTH, SAr2, TSi,
TSr}).  I understand this error log is cryptic and it will be
corrected in future version.


Regards,


					FUKUMOTO Atsushi
					[email protected]