From owner-freebsd-questions@FreeBSD.ORG Wed Aug 25 16:23:24 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 306A016A4CE for ; Wed, 25 Aug 2004 16:23:24 +0000 (GMT) Received: from frontend1.messagingengine.com (frontend1.messagingengine.com [66.111.4.30]) by mx1.FreeBSD.org (Postfix) with ESMTP id D97A743D41 for ; Wed, 25 Aug 2004 16:23:23 +0000 (GMT) (envelope-from nkinkade@fastmail.fm) X-Sasl-enc: /CGjcOQHlfOql/p5XJwXCw 1093450999 Received: from gentoo-npk.bmp.ub (unknown [206.27.244.136]) by www.fastmail.fm (Postfix) with ESMTP id D240CC150DD; Wed, 25 Aug 2004 12:23:17 -0400 (EDT) Received: from nkinkade by gentoo-npk.bmp.ub with local (Exim 4.21) id 1C00X5-0003CB-6r; Wed, 25 Aug 2004 10:21:55 -0600 Date: Wed, 25 Aug 2004 10:21:55 -0600 From: Nathan Kinkade To: Cristi Tauber Message-ID: <20040825162155.GU3767@gentoo-npk.bmp.ub> Mail-Followup-To: Cristi Tauber , FreeBSD Question References: <412C2DA7.B08686EF@sbhost.ro> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="5tINJiUS2/Dn5Rhr" Content-Disposition: inline In-Reply-To: <412C2DA7.B08686EF@sbhost.ro> User-Agent: Mutt/1.5.6i Sender: cc: FreeBSD Question Subject: Re: kernel compile X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Nathan Kinkade List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Aug 2004 16:23:24 -0000 --5tINJiUS2/Dn5Rhr Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Aug 25, 2004 at 09:11:51AM +0300, Cristi Tauber wrote: > hi all, > I compile a 5.2.1 release's kernel with IPFIREWALL and IPSEC (? > IPSEC_ESP). I compiled the kernel w/o errors i rebooted and everything > works great. I mention that I do not installed any IPSEC software at > that time. I downloaded qmail ? ucspi and try to install. After ucspi I > had to reboot the server in order to start svscan. Now is my problem ... > the server is not booting with the error : >=20 > /etc/rc: WARNING : /etc/ipsec.conf not readable; ipsec start aborted >=20 > (OK ... i dont want ipsec right now) >=20 > ERROR: ABORTING BOOT (sending SIGTERM to parent)! > /bin/sh on /etc/rc terminated abnormally, going to single mode >=20 > A tried to recompile the kernel without IPSEC and even > without IPFIREWALL ... i get the same error . What's wrong ??? >=20 > thanks in advance >=20 > Cristi I really don't know anything about using IPSEC under FreeBSD, but since nobody seems to have replied just yet, I'll offer up a few suggestions that occur to me immediately ( in order of importance ): 1) in /etc/rc.conf set ipsec_enable=3D"NO" - take a look at /etc/rc.d/ipsec, you'll see that it may be this script that is causing your boot to fail under the ipsec_prestart() function. so setting this option in rc.conf may well give you the desired result. 2) try creating an empty /etc/ipsec.conf to appease ipsec 3) check into any sysctl variables that might affect ipsec in the kernel - set them in either /etc/sysctl.conf, or perhaps /boot/loader.conf. Nathan --=20 PGP Public Key: pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xD8527E49 --5tINJiUS2/Dn5Rhr Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBLLyjO0ZIEthSfkkRAi9rAKCkcMAt1X9a7USdaSAT1B7zeY6v7wCdEtyW M/QxYtMWGYdB9snjSXydRjw= =/4FO -----END PGP SIGNATURE----- --5tINJiUS2/Dn5Rhr--