OpenSolaris

Printable Version Enter a New Search
Bug ID 6561665
Synopsis ipseckey -f does not understand "flush" keyword anymore
State 10-Fix Delivered (Fix available in build)
Category:Subcategory network:ipsec
Keywords ipsec | smf
Responsible Engineer Mark Fenwick
Reported Against snv_65
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_66
Fixed In snv_66
Release Fixed solaris_nevada(snv_66) , solaris_10u7(s10u7_02) (Bug ID:2168172)
Related Bugs
Submit Date 24-May-2007
Last Update Date 7-June-2007
Description 
After upgrading to build 65 the new ipsec/manual-key service fails:

maintenance    11:57:00 svc:/network/ipsec/manual-key:default

The reason given is:

[ May 24 11:56:47 Disabled. ]
[ May 24 11:56:47 Rereading configuration. ]
[ May 24 11:57:00 Enabled. ]
[ May 24 11:57:00 Executing start method ("/usr/sbin/ipseckey -f  /etc/inet/secr
et/ipseckeys") ]
Flushing existing SA's before adding new SA's
ipseckey: The configuration file contained 1 errors.
Manually check the configuration with:
ipseckey -c /etc/inet/secret/ipseckeys
Use svcadm(1M) to clear maintenance condition when errors are resolved.

ipseckey: Bad configuration of service svc:/network/ipsec/manual-key:default.
[ May 24 11:57:00 Method "start" exited with status 95 ]
Work Around 
Check config file (/etc/inet/secret/ipseckeys) and remove any lines that start with:

flush
dump
monitor
Comments 
N/A