Home / Browse / IPsec Tools / Mail / Archive

IPsec Tools

Email Archive: ipsec-tools-users (read-only)

2005:	_Jan	_Feb	_Mar	_Apr	_May (16)	_Jun (25)	_Jul (22)	_Aug (15)	_Sep (21)	_Oct (24)	_Nov (24)	_Dec (41)
2006:	_Jan (23)	_Feb (39)	_Mar (22)	_Apr (11)	_May (23)	_Jun (17)	_Jul (12)	_Aug (11)	_Sep (27)	_Oct (30)	_Nov (17)	_Dec (16)
2007:	_Jan (10)	_Feb (38)	_Mar (15)	_Apr (32)	_May (29)	_Jun (15)	_Jul (21)	_Aug (32)	_Sep (17)	_Oct (21)	_Nov (12)	_Dec (10)
2008:	_Jan (7)	_Feb (22)	_Mar (40)	_Apr (26)	_May (18)	_Jun (25)	_Jul (35)	_Aug (21)	_Sep (25)	_Oct (66)	_Nov (40)	_Dec (77)
2009:	_Jan (52)	_Feb (29)	_Mar (71)	_Apr (77)	_May (146)	_Jun (94)	_Jul (65)	_Aug (37)	_Sep (29)	_Oct (38)	_Nov (21)	_Dec (21)
2010:	_Jan (9)	_Feb (14)	_Mar (30)	_Apr (55)	_May (68)	_Jun (67)	_Jul (54)	_Aug (50)	_Sep (28)	_Oct (5)	_Nov	_Dec (5)
2011:	_Jan (5)	_Feb (4)	_Mar (8)	_Apr (3)	_May (10)	_Jun (5)	_Jul (6)	_Aug (17)	_Sep (12)	_Oct (9)	_Nov (4)	_Dec (12)
2012:	_Jan (22)	_Feb (20)	_Mar (16)	_Apr (17)	_May (1)	_Jun (7)	_Jul (10)	_Aug (10)	_Sep	_Oct (5)	_Nov (5)	_Dec (4)
2013:	_Jan (3)	_Feb (1)	_Mar (21)	_Apr (5)	_May (5)	_Jun	_Jul	_Aug	_Sep	_Oct	_Nov	_Dec

[Ipsec-tools-users] More info about error: "VENDOR ID:RFC 3706 Detecting dead IKE peers"

From: sandy s <sandypossible@gm...> - 2005-12-03 16:49

Attachments: Message as HTML

Hi,

The linux version I am using is Fedora Core 4, ( kernel 2.6.11 ) on both
systems. I have succesfully done the pre shared key based ipsec connection.
I am facing issue with kerberos based authentication.

I am able to work with kerberos in standalone mode. I have
executed gss api examples successfully.

I have key tab entries of the form "ike/fqdn" for both the machines.I am
getting the TGT for the principal "ike/fqdn" on the  initiator. I am not
sure what is going wrong.

Can anybody please let me know when this error:
VENDOR ID:RFC 3706 Detecting dead IKE peers error can occur ??

- Sandy

On 12/3/05, sandy s <sandypossible@...> wrote:
>
> Hi,
>
> I am seeing the error :
>
> VENDOR ID:RFC  3706 Detecting dead IKE peers.
> My racoon.conf is :
>
> remote 192.168.1.122 {
>     exchange_mode main;
>     proposal {
>         encryption_algorithm des;
>         hash_algorithm md5;
>         authentication_method gssapi_krb;
>         gssapi_id "ike/kdc.kerb.com";
>         dh_group 2;
>     }
> }
> sainfo anonymous
> {
>     pfs_group 2;
>     lifetime time 1 hour;
>     encryption_algorithm des;
>     authentication_algorithm hmac_sha1, hmac_md5 ;
>     compression_algorithm deflate ;
> }
>
> I am unable to  communicate with the other peer and trace is saying VENDO=
R
> ID:RFC  3706 Detecting dead IKE peers
>
> Can anybody please tell me what could be the error. I am really strugglin=
g
> to indentify the cause :(
>
> I am having keytab entries for both host machines. and also entry of type
> ike/fqdn. I am getting the initial ticket for ike/fqdn  ( my machines fqd=
n )
> by using "kinit -k -t /etc/krb5.keytab -A " , I am getting the tickets. D=
o I
> need to add pass rules for KDC port 88 ?
>
> I am unable to figure out the dead peer error.
>
> Thanks,
> Sandy
>
>

Re: [Ipsec-tools-users] More info about error: "VENDOR ID:RFC 3706 Detecting dead IKE peers"

From: sandy s <sandypossible@gm...> - 2005-12-05 14:23

Attachments: Message as HTML

Hi,

I didnt know how to findout. But I googled and found how to find the versio=
n
of RPM installed :)

I am using ipsec-tools-0.5-4

Thanks,
Sandy.

On 12/5/05, Matthias Scheler <tron@...> wrote:
>
> On Sat, Dec 03, 2005 at 10:19:27PM +0530, sandy s wrote:
> > The linux version I am using is Fedora Core 4, ( kernel 2.6.11 ) on bot=
h
> > systems.
>
> Which is complete irrelevant. He was asking for the version of
> ipsec-tools that you are running.
>
>         Kind regards
>
> --
> Matthias Scheler
> http://scheler.de/~matthias/
>

Re: [Ipsec-tools-users] More info about error: "VENDOR ID:RFC 3706 Detecting dead IKE peers"

From: Matthias Scheler <tron@zh...> - 2005-12-05 14:26

On Mon, Dec 05, 2005 at 07:52:49PM +0530, sandy s wrote:
> I didnt know how to findout. But I googled and found how to find the version
> of RPM installed :)
> 
> I am using ipsec-tools-0.5-4

That's somewhat acient. Could you please install version 0.6.3?

	Kind regards

-- 
Matthias Scheler                                  http://scheler.de/~matthias/

Re: [Ipsec-tools-users] More info about error: "VENDOR ID:RFC 3706 Detecting dead IKE peers"

From: sandy s <sandypossible@gm...> - 2005-12-05 14:43

Attachments: Message as HTML

Hi,

Could  you please let me know if I can still do a successful gss api
kerberos based IPSec connection with ipsec-tools0.5-4. This vesrion comes
with the Fedora core 4 CDs  which I have.

Thanks,
Sandy.

On 12/5/05, sandy s <sandypossible@...> wrote:
>
> Hi,
>
> I am sorry, the prvious mail went blank. Could  you please let me know if
> I can still do a successful gss api kerberos based IPSec connection with
> ipsec-tools0.5-4. This vesrion comes with the Fedora core 4 CDs  which I
> have.
>
> Thanks
> Sandy.
>
> On 12/5/05, sandy s < sandypossible@...> wrote:
> >
> >
> >
> > On 12/5/05, Matthias Scheler < tron@...> wrote:
> > >
> > > On Mon, Dec 05, 2005 at 07:52:49PM +0530, sandy s wrote:
> > > > I didnt know how to findout. But I googled and found how to find th=
e
> > > version
> > > > of RPM installed :)
> > > >
> > > > I am using ipsec-tools-0.5-4
> > >
> > > That's somewhat acient. Could you please install version 0.6.3?
> > >
> > >         Kind regards
> > >
> > > --
> > > Matthias Scheler
> > > http://scheler.de/~matthias/ <http://scheler.de/%7Ematthias/>
> > >
> >
> >
>