racoon-0.6.5-4ubuntu1 fails to configure

[Uqbar]

Binary package hint: racoon

I'm running Kubuntu 6.06 Flight 6 and am using racoon as a backend for KVPNC.
The adept suggested me to upgrate racoon to version 0.6.5-4ubuntu1, as well as other packages.
During the update there has been a failure with the configuration of racoon.
I've switched to a shell and these are the issues I've found: (sorry form some Italian messages).

1. output for "dpkg --configure -a"
Configuro racoon (0.6.5-4ubuntu1) ...
Loading IPSEC/crypto modules...
insmod: error inserting '/lib/modules/2.6.15-22-686/kernel/crypto/crc32c.ko': -1 Unknown symbol in module
insmod: error inserting '/lib/modules/2.6.15-22-686/kernel/net/ipv6/ipcomp6.ko': -1 Unknown symbol in module
IPSEC/crypto modules loaded.
Starting IKE (ISAKMP/Oakley) server: racoon: failed to parse configuration file.
racoon-tool: racoon did not start.
invoke-rc.d: initscript racoon, action "start" failed.
dpkg: errore processando racoon (--configure):
 il sottoprocesso post-installation script ha restituito un codice di errore 255
Sono occorsi degli errori processando:
 racoon

2. syslog messages regarding the modules:[4294766.764000] crc32c: Unknown symbol crc32c_le
[4294766.767000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4294766.767000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4294766.767000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup
[4294817.435000] crc32c: Unknown symbol crc32c_le
[4294817.437000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4294817.437000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4294817.437000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup
[4295054.242000] crc32c: Unknown symbol crc32c_le
[4295054.246000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4295054.247000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4295054.247000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup
[4295240.871000] crc32c: Unknown symbol crc32c_le
[4295240.874000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4295240.874000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4295240.874000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup

3. Running
Linux version 2.6.15-22-686 (buildd@vernadsky) (gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5)) #1 SMP PREEMPT Sun May 7 16:37:57 UTC 2006

4. The configuration file(s) for racoon are the default one as installed by adept.

If you need any further information, please ask.

[Lionel Elie Mamane (lionel-mamane)]

Dear Ganesan,

You haven't reacted to this bug since its report; this is a rather
serious bug since it precludes using racoon-tool with a recent
kernel.

Do you want me do to an NMU to apply this patch?

--
Lionel

[Ganesan Rajagopal (rganesan-emailuser)]

Lionel Elie Mamane wrote:
> Dear Ganesan,
>
> You haven't reacted to this bug since its report; this is a rather
> serious bug since it precludes using racoon-tool with a recent
> kernel.

I am sorry, I didn't realize it's that it was a critical bug. With
manually configured racoon.conf (racoon-tool is deprecated now), there
are is no explicit module loading. All required modules are
automatically dynamically when racoon starts up. I am not sure why a
modprobe is required.

> Do you want me do to an NMU to apply this patch?

I am waiting for upstream to fix a more severe problem (#341398). When I
upload that fix, I can fix this issue too. If you need the patch more
urgently, please go ahead with an NMU.

Ganesan

[Lionel Elie Mamane (lionel-mamane)]

On Thu, Jan 19, 2006 at 09:45:32PM +0530, Ganesan Rajagopal wrote:
> Lionel Elie Mamane wrote:

>> this is a rather serious bug since it precludes using racoon-tool
>> with a recent kernel.

> With manually configured racoon.conf (racoon-tool is deprecated
> now), there are is no explicit module loading. All required modules
> are automatically dynamically when racoon starts up. I am not sure
> why a modprobe is required.

So then why does racoon tool try to explicitly load modules if it will
happen when racoon will be started anyway? What happens is that this
explicit loading fails because insmod doesn't follow dependencies, but
modprobe does.

>> Do you want me do to an NMU to apply this patch?

> I am waiting for upstream to fix a more severe problem
> (#341398). When I upload that fix, I can fix this issue too. If you
> need the patch more urgently, please go ahead with an NMU.

No, that's fine, I can patch locally. It is only that with so much
time elapsed for a rather serious bug (although misfiled at severity
normal) with a patch ready and no comment, I was fearing that maybe
you were MIA. So I sent a probe, you answered, you are not MIA, I go
back to my cave and let you handle your package. The NMU thing was
mostly for if you didn't answer.

--
Lionel

[Ganesan Rajagopal (rganesan-emailuser)]

Lionel Elie Mamane wrote:
> On Thu, Jan 19, 2006 at 09:45:32PM +0530, Ganesan Rajagopal wrote:
>>With manually configured racoon.conf (racoon-tool is deprecated
>>now), there are is no explicit module loading. All required modules
>>are automatically dynamically when racoon starts up. I am not sure
>>why a modprobe is required.
>
> So then why does racoon tool try to explicitly load modules if it will
> happen when racoon will be started anyway? What happens is that this
> explicit loading fails because insmod doesn't follow dependencies, but
> modprobe does.

I have no idea why it does explicit loading. May be some older kernels
had problems automatically loading dependent modules when racoon was
started. The tool was written by the previous maintainer to ease moving
from freeswan to racoon. However, I don't have the time to maintain it
up-to-date with upstream changes to racoon.conf. Frankly, I find
racoon.conf syntax easier to parse.

> No, that's fine, I can patch locally. It is only that with so much
> time elapsed for a rather serious bug (although misfiled at severity
> normal) with a patch ready and no comment, I was fearing that maybe
> you were MIA.

Are you sure it's serious bug? In other words, do you actually face a
problem with IPSec because of this rather severe looking error message.
Like I said, using /etc/racoon/racoon.conf, no explicit module loading
takes place and racoon starts up fine.

> So I sent a probe, you answered, you are not MIA, I go
> back to my cave and let you handle your package. The NMU thing was
> mostly for if you didn't answer.

Thanks :-).

Ganesan

[Lionel Elie Mamane (lionel-mamane)]

On Thu, Jan 19, 2006 at 10:24:12PM +0530, Ganesan Rajagopal wrote:

> Are you sure it's serious bug? In other words, do you actually face
> a problem with IPSec because of this rather severe looking error
> message.

I haven't managed to create a working racoon-tool.conf yet, so I can't
be sure.

--
Lionel

[Ganesan Rajagopal (rganesan)]

Source: ipsec-tools
Source-Version: 1:0.6.4-1

We believe that the bug you reported is fixed in the latest version of
ipsec-tools, which is due to be installed in the Debian FTP archive:

ipsec-tools_0.6.4-1.diff.gz
  to pool/main/i/ipsec-tools/ipsec-tools_0.6.4-1.diff.gz
ipsec-tools_0.6.4-1.dsc
  to pool/main/i/ipsec-tools/ipsec-tools_0.6.4-1.dsc
ipsec-tools_0.6.4-1_i386.deb
  to pool/main/i/ipsec-tools/ipsec-tools_0.6.4-1_i386.deb
ipsec-tools_0.6.4.orig.tar.gz
  to pool/main/i/ipsec-tools/ipsec-tools_0.6.4.orig.tar.gz
racoon_0.6.4-1_i386.deb
  to pool/main/i/ipsec-tools/racoon_0.6.4-1_i386.deb

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to <email address hidden>,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ganesan Rajagopal <email address hidden> (supplier of updated ipsec-tools package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing <email address hidden>)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Tue, 24 Jan 2006 10:20:11 +0530
Source: ipsec-tools
Binary: racoon ipsec-tools
Architecture: source i386
Version: 1:0.6.4-1
Distribution: unstable
Urgency: low
Maintainer: Ganesan Rajagopal <email address hidden>
Changed-By: Ganesan Rajagopal <email address hidden>
Description:
 ipsec-tools - IPsec tools for Linux
 racoon - IPsec IKE keying daemon
Closes: 320087
Changes:
 ipsec-tools (1:0.6.4-1) unstable; urgency=low
 .
   * New upstream release.
   * Apply racoon-tool patch to use modprobe instead of insmod
     (closes: #320087).
   * Rerun bootstrap because upstream libtool appears to be broken (configure
     breaks if g++ is not installed).
Files:
 1bcd787a7a60139fd4636f71ad9a1fd0 674 net extra ipsec-tools_0.6.4-1.dsc
 cc0173be0004eaae372a7853e68a909f 928108 net extra ipsec-tools_0.6.4.orig.tar.gz
 8ca1beda177e056426272fad3afd8ae9 169510 net extra ipsec-tools_0.6.4-1.diff.gz
 8164b1024c14a90234688756c7d073d8 84542 net extra ipsec-tools_0.6.4-1_i386.deb
 5b0c5fbb50477a706dea49e46cba1d94 320712 net extra racoon_0.6.4-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFD1bJ0FeACul2MEuoRAjP4AKCH1eiq8lq4r3v7pEelZhE60d0vXQCffXMs
4fCH6CojAh6e+LjDorJMzHY=
=uaVJ
-----END PGP SIGNATURE-----

[Uqbar (uqbar)]

Binary package hint: racoon

I'm running Kubuntu 6.06 Flight 6 and am using racoon as a backend for KVPNC.
The adept suggested me to upgrate racoon to version 0.6.5-4ubuntu1, as well as other packages.
During the update there has been a failure with the configuration of racoon.
I've switched to a shell and these are the issues I've found: (sorry form some Italian messages).

1. output for "dpkg --configure -a"
Configuro racoon (0.6.5-4ubuntu1) ...
Loading IPSEC/crypto modules...
insmod: error inserting '/lib/modules/2.6.15-22-686/kernel/crypto/crc32c.ko': -1 Unknown symbol in module
insmod: error inserting '/lib/modules/2.6.15-22-686/kernel/net/ipv6/ipcomp6.ko': -1 Unknown symbol in module
IPSEC/crypto modules loaded.
Starting IKE (ISAKMP/Oakley) server: racoon: failed to parse configuration file.
racoon-tool: racoon did not start.
invoke-rc.d: initscript racoon, action "start" failed.
dpkg: errore processando racoon (--configure):
 il sottoprocesso post-installation script ha restituito un codice di errore 255
Sono occorsi degli errori processando:
 racoon

2. syslog messages regarding the modules:[4294766.764000] crc32c: Unknown symbol crc32c_le
[4294766.767000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4294766.767000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4294766.767000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup
[4294817.435000] crc32c: Unknown symbol crc32c_le
[4294817.437000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4294817.437000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4294817.437000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup
[4295054.242000] crc32c: Unknown symbol crc32c_le
[4295054.246000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4295054.247000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4295054.247000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup
[4295240.871000] crc32c: Unknown symbol crc32c_le
[4295240.874000] ipcomp6: Unknown symbol xfrm6_tunnel_free_spi
[4295240.874000] ipcomp6: Unknown symbol xfrm6_tunnel_alloc_spi
[4295240.874000] ipcomp6: Unknown symbol xfrm6_tunnel_spi_lookup

3. Running
Linux version 2.6.15-22-686 (buildd@vernadsky) (gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5)) #1 SMP PREEMPT Sun May 7 16:37:57 UTC 2006

4. The configuration file(s) for racoon are the default one as installed by adept.

If you need any further information, please ask.

[William Hood (william-a-hood)]

This bug is also affecting me using the Power PC version of Ubuntu Dapper.

[William Hood (william-a-hood)]

Log of the error as it affects me (all English. :) )

Preconfiguring packages ...
Selecting previously deselected package racoon.
(Reading database ... 86821 files and directories currently installed.)
Unpacking racoon (from .../racoon_1%3a0.6.5-4ubuntu1_powerpc.deb) ...
Setting up racoon (0.6.5-4ubuntu1) ...
Loading IPSEC/crypto modules...
insmod: error inserting '/lib/modules/2.6.15-22-powerpc/kernel/crypto/crc32c.ko': -1 Unknown symbol in module
insmod: error inserting '/lib/modules/2.6.15-22-powerpc/kernel/net/ipv6/ipcomp6.ko': -1 Unknown symbol in module
IPSEC/crypto modules loaded.
Starting IKE (ISAKMP/Oakley) server: racoon: failed to parse configuration file.
racoon-tool: racoon did not start.
invoke-rc.d: initscript racoon, action "start" failed.
dpkg: error processing racoon (--configure):
 subprocess post-installation script returned error exit status 255
Errors were encountered while processing:
 racoon
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install. Trying to recover:
Setting up racoon (0.6.5-4ubuntu1) ...
Loading IPSEC/crypto modules...
insmod: error inserting '/lib/modules/2.6.15-22-powerpc/kernel/crypto/crc32c.ko': -1 Unknown symbol in module
insmod: error inserting '/lib/modules/2.6.15-22-powerpc/kernel/net/ipv6/ipcomp6.ko': -1 Unknown symbol in module
IPSEC/crypto modules loaded.
Starting IKE (ISAKMP/Oakley) server: racoon: failed to parse configuration file.
racoon-tool: racoon did not start.
invoke-rc.d: initscript racoon, action "start" failed.
dpkg: error processing racoon (--configure):
 subprocess post-installation script returned error exit status 255
Errors were encountered while processing:
 racoon

[Simon Law (sfllaw)]

Hello,

Please provide the output you get when you run:
$ uname -a
$ modprobe crc32c
$ modprobe ipcomp6

Thanks.

[William Hood (william-a-hood)]

Here is the output for me running the commands above as root...

bill@Big-Mac:~$ sudo -s -H
Password:
root@Big-Mac:/home/bill# uname -a
Linux Big-Mac 2.6.15-22-powerpc #1 Sun May 7 15:47:39 UTC 2006 ppc GNU/Linux
root@Big-Mac:/home/bill# modprobe crc32c
root@Big-Mac:/home/bill# modprobe ipcomp6
root@Big-Mac:/home/bill#

[Simon Law (sfllaw)]

On a fresh reboot, could you please run:
$ sudo modprobe crc32c
$ sudo modprobe ipcomp6
$ lsmod | tee /tmp/lsmod.log
$ dmesg | tee /tmp/dmesg.log

And attach /tmp/lsmod.log and /tmp/dmesg.log to this bug report:
https://launchpad.net/distros/ubuntu/+bug/44246/+addattachment

Thanks.

[Ben Collins (ben-collins)]

This is definitely a bug in the racoon package build. It should not be using insmod, but modprobe, so that all module depencies are resolved.

Rejecting.

[William Hood (william-a-hood)]

(Requested by Simon Law)

[William Hood (william-a-hood)]

(Requested by Simon Law)

[Fragment (ws-informatik)]

Same problem here running K7 kernel, german standard dapper drake release, upgraded from previous version.

After modprobing crc32c and xfrm6_tunnel manually as per a google hit, the installation via synaptic -still fails- with an error message which looks to me like it couldn't find the configuration file when trying to start racoon.

I'm unable to copy something out of the synaptic console, if you want the exact error message tell me how and I'll post it :)

dmesg was different after modprobing, there were no further error messages in the log.

I would conclude that there is an addional problem besides the already mentioned problem of using modprobe instead of insmod.

Best regards.

[mmezo (mmezo)]

Same for me both on i386 and AMD64.

I've even tried purging the package, but the problem persists.

[William Hood (william-a-hood)]

Work-around:

Immediately after racoon fails to install, open a terminal and enter the following:

sudo modprobe crc32c
sudo modprobe ipcomp6

Then reinstall racoon, or install/uninstall anything else (letting synaptic clean up the unconfigured racoon package).

[Georg Bauhaus (bauhaus)]

Lionel points to the use of insmod where modprobe
should be used in racoon's setup.

Ganesan reports their belief in a fix of this in
ipsec-tools 1:0.6.4-1

However, /usr/sbin/racoon-tool, which is the origin of thi
bug, is not listed as part of ipsec-tools, AFAICS.
Indeed, racoon-tools still calls "/sbin/insmod" explicitly
(near line 2400). So how does ipsec-tools fix a bug in a
different package (racoon)? Or am I missing something?

-- Georg

[Ganesan Rajagopal (rganesan-fastmail)]

Georg Bauhaus wrote:
> Lionel points to the use of insmod where modprobe
> should be used in racoon's setup.
>
> Ganesan reports their belief in a fix of this in
> ipsec-tools 1:0.6.4-1
>
> However, /usr/sbin/racoon-tool, which is the origin of thi
> bug, is not listed as part of ipsec-tools, AFAICS.
> Indeed, racoon-tools still calls "/sbin/insmod" explicitly
> (near line 2400). So how does ipsec-tools fix a bug in a
> different package (racoon)? Or am I missing something?

ipsec-tools is the source package. racoon and ipsec-tools are binary
packages from the same source. What version of racoon-tools do you have
installed? My version (0.6.6-3) does not have the insmod statement.

Ganesan

[Georg Bauhaus (bauhaus)]

On Wed, 2006-12-06 at 19:21 +0530, Ganesan Rajagopal wrote:
> Georg Bauhaus wrote:
> > ...
> > Indeed, racoon-tools still calls "/sbin/insmod" explicitly
> > (near line 2400). So how does ipsec-tools fix a bug in a
> > different package (racoon)? Or am I missing something?
>
> ipsec-tools is the source package. racoon and ipsec-tools are binary
> packages from the same source. What version of racoon-tools do you have
> installed? My version (0.6.6-3) does not have the insmod statement.

Wrong version here, I should have made sure that I am looking
at a Debian window :-/. Sorry. (If anyone is interested, at the
time of this email Ubuntu 6.06 has it wrong, Debian has it
right.)

Georg