[vpn-help] The VPN client fails to load profile (!! : failed to load 'config.vpn')

Sasha Yavorski syavorski at lendingclub.com
Fri Aug 16 16:03:27 CDT 2013


*System:*

Unix OS Version = Linux version 2.6.32-5-xen-amd64 (Debian 2.6.32-46) (gcc
version 4.3.5 (Debian 4.3.5-4) )

VPN Client Version  = 2.2.1



*Problem:*

The VPN client fails to load profile.



To Reproduce:

*root at ip-10-0-0-123:/opt/ike# Iked*

                    ii : created ike socket 0.0.0.0:500

                    ii : created natt socket 0.0.0.0:4500

                    ## : IKE Daemon, ver 2.2.1

                    ## : Copyright 2013 Shrew Soft Inc.

                    ## : This product linked OpenSSL 0.9.8o 01 Jun 2010

                    ii : opened '/var/log/iked.log'

                    ii : opened '/var/log/ike-decrypt.pcap'

*root at ip-10-0-0-123:/opt/ike# ikec -r config.vpn -u myusername -p
mypassword -a*

                    ii : ## : VPN Connect, ver 2.2.1

                    ## : Copyright 2013 Shrew Soft Inc.

                    ## : press the <h> key for help

                    !! : failed to load 'config.vpn'



*Debug info:*

var/log/dump-ike-decrypt.cap is empty

/var/log/iked.log:

13/08/16 20:21:32 ## : IKE Daemon, ver 2.2.1

13/08/16 20:21:32 ## : Copyright 2013 Shrew Soft Inc.

13/08/16 20:21:32 ## : This product linked OpenSSL 0.9.8o 01 Jun 2010

13/08/16 20:21:32 ii : opened '/var/log/iked.log'

13/08/16 20:21:32 ii : opened '/var/log/ike-decrypt.pcap'

13/08/16 20:21:32 ii : ipc server process thread begin ...

13/08/16 20:21:32 ii : pfkey process thread begin ...

13/08/16 20:21:32 ii : network process thread begin ...

13/08/16 20:21:33 K< : recv pfkey REGISTER AH message

13/08/16 20:21:33 K< : recv pfkey REGISTER ESP message

13/08/16 20:21:33 K< : recv pfkey REGISTER IPCOMP message

13/08/16 20:21:33 K! : recv X_SPDDUMP message failure ( errno = 2 )



Please note that initially I was getting “ikec: double free or corruption”,
see stack below. Work around used to resolve that:

*export MALLOC_CHECK_=0*



*root at ip-10-0-0-123:/opt/ike# ikec -r config.vpn -u myusername -p
mypassword -a*

ii : ## : VPN Connect, ver 2.2.1

## : Copyright 2013 Shrew Soft Inc.

## : press the <h> key for help

*** glibc detected *** ikec: double free or corruption (out):
0x00000000022c68b0 ***

======= Backtrace: =========

/lib/libc.so.6(+0x71e16)[0x7f91af7f5e16]

/lib/libc.so.6(cfree+0x6c)[0x7f91af7fab8c]

/usr/lib/libss_idb.so.2.2.1(_ZN6_BDATA4growEm+0xa3)[0x7f91b108957b]

/usr/lib/libss_idb.so.2.2.1(_ZN6_BDATA3insEPvmm+0x5e)[0x7f91b1089e58]

/usr/lib/libss_idb.so.2.2.1(_ZN6_BDATA3insEPcmm+0x34)[0x7f91b1089f38]

/usr/lib/libss_ike.so.2.2.1(_ZN15_CONFIG_MANAGER13file_vpn_loadER7_CONFIG+0xdf)[0x7f91b1299ef5]

/usr/lib/libss_ike.so.2.2.1(_ZN7_CLIENT11config_loadEv+0xc3)[0x7f91b12973d5]

ikec(main+0xbe)[0x401952]

/lib/libc.so.6(__libc_start_main+0xfd)[0x7f91af7a2c8d]

ikec[0x4017d9]

======= Memory map: ========

00400000-00403000 r-xp 00000000 ca:01 27545
/usr/bin/ikec

00603000-00604000 rw-p 00003000 ca:01 27545
/usr/bin/ikec

022b5000-022d6000 rw-p 00000000 00:00 0
[heap]

7f91a8000000-7f91a8021000 rw-p 00000000 00:00 0

7f91a8021000-7f91ac000000 ---p 00000000 00:00 0

7f91ae6e1000-7f91ae6ed000 r-xp 00000000 ca:01 24591
/lib/libnss_files-2.11.3.so

7f91ae6ed000-7f91ae8ec000 ---p 0000c000 ca:01 24591
            /lib/libnss_files-2.11.3.so

7f91ae8ec000-7f91ae8ed000 r--p 0000b000 ca:01 24591
/lib/libnss_files-2.11.3.so

7f91ae8ed000-7f91ae8ee000 rw-p 0000c000 ca:01 24591
/lib/libnss_files-2.11.3.so

7f91ae8ee000-7f91ae8f8000 r-xp 00000000 ca:01 24801
/lib/libnss_nis-2.11.3.so

7f91ae8f8000-7f91aeaf7000 ---p 0000a000 ca:01 24801
/lib/libnss_nis-2.11.3.so

7f91aeaf7000-7f91aeaf8000 r--p 00009000 ca:01 24801
 /lib/libnss_nis-2.11.3.so

7f91aeaf8000-7f91aeaf9000 rw-p 0000a000 ca:01 24801
/lib/libnss_nis-2.11.3.so

7f91aeaf9000-7f91aeb0e000 r-xp 00000000 ca:01 24622
/lib/libnsl-2.11.3.so

7f91aeb0e000-7f91aed0d000 ---p 00015000 ca:01 24622
/lib/libnsl-2.11.3.so

7f91aed0d000-7f91aed0e000 r--p 00014000 ca:01 24622
/lib/libnsl-2.11.3.so

7f91aed0e000-7f91aed0f000 rw-p 00015000 ca:01 24622
/lib/libnsl-2.11.3.so

7f91aed0f000-7f91aed11000 rw-p 00000000 00:00 0

7f91aed11000-7f91aed18000 r-xp 00000000 ca:01 24613
/lib/libnss_compat-2.11.3.so

7f91aed18000-7f91aef17000 ---p 00007000 ca:01 24613
/lib/libnss_compat-2.11.3.so

7f91aef17000-7f91aef18000 r--p 00006000 ca:01 24613
/lib/libnss_compat-2.11.3.so

7f91aef18000-7f91aef19000 rw-p 00007000 ca:01 24613
/lib/libnss_compat-2.11.3.so

7f91aef19000-7f91aef5b000 r-xp 00000000 ca:01 24627
           /lib/libncurses.so.5.7

7f91aef5b000-7f91af15a000 ---p 00042000 ca:01 24627
/lib/libncurses.so.5.7

7f91af15a000-7f91af15f000 rw-p 00041000 ca:01 24627
/lib/libncurses.so.5.7

7f91af15f000-7f91af168000 r-xp 00000000 ca:01 27442
/lib/libbsd.so.0.2.0

7f91af168000-7f91af368000 ---p 00009000 ca:01 27442
/lib/libbsd.so.0.2.0

7f91af368000-7f91af369000 rw-p 00009000 ca:01 27442
     /lib/libbsd.so.0.2.0

7f91af369000-7f91af380000 r-xp 00000000 ca:01 76441
/usr/lib/libz.so.1.2.3.4

7f91af380000-7f91af57f000 ---p 00017000 ca:01 76441
/usr/lib/libz.so.1.2.3.4

7f91af57f000-7f91af580000 rw-p 00016000 ca:01 76441
/usr/lib/libz.so.1.2.3.4

7f91af580000-7f91af582000 r-xp 00000000 ca:01 24793
/lib/libdl-2.11.3.so

7f91af582000-7f91af782000 ---p 00002000 ca:01 24793
/lib/libdl-2.11.3.so

7f91af782000-7f91af783000 r--p 00002000 ca:01 24793
/lib/libdl-2.11.3.so

7f91af783000-7f91af784000 rw-p 00003000 ca:01 24793
/lib/libdl-2.11.3.so

7f91af784000-7f91af8dd000 r-xp 00000000 ca:01 24614
 /lib/libc-2.11.3.so

7f91af8dd000-7f91afadc000 ---p 00159000 ca:01 24614
/lib/libc-2.11.3.so

7f91afadc000-7f91afae0000 r--p 00158000 ca:01 24614
/lib/libc-2.11.3.so

7f91afae0000-7f91afae1000 rw-p 0015c000 ca:01 24614
/lib/libc-2.11.3.so

7f91afae1000-7f91afae6000 rw-p 00000000 00:00 0

7f91afae6000-7f91afafc000 r-xp 00000000 ca:01 24617
/lib/libgcc_s.so.1

7f91afafc000-7f91afcfb000 ---p 00016000 ca:01 24617
 /lib/libgcc_s.so.1

7f91afcfb000-7f91afcfc000 rw-p 00015000 ca:01 24617
/lib/libgcc_s.so.1

7f91afcfc000-7f91afd7c000 r-xp 00000000 ca:01 24797
/lib/libm-2.11.3.so

7f91afd7c000-7f91aff7c000 ---p 00080000 ca:01 24797
/lib/libm-2.11.3.so

7f91aff7c000-7f91aff7d000 r--p 00080000 ca:01 24797
/lib/libm-2.11.3.so

7f91aff7d000-7f91aff7e000 rw-p 00081000 ca:01 24797
/lib/libm-2.11.3.so

7f91aff7e000-7f91b0074000 r-xp 00000000 ca:01 74698
/usr/lib/libstdc++.so.6.0.13

7f91b0074000-7f91b0274000 ---p 000f6000 ca:01 74698
/usr/lib/libstdc++.so.6.0.13

7f91b0274000-7f91b027b000 r--p 000f6000 ca:01 74698
/usr/lib/libstdc++.so.6.0.13

7f91b027b000-7f91b027d000 rw-p 000fd000 ca:01 74698
/usr/lib/libstdc++.so.6.0.13

7f91b027d000-7f91b0292000 rw-p 00000000 00:00 0

7f91b0292000-7f91b0299000 r-xp 00000000 ca:01 24609
/lib/librt-2.11.3.so

7f91b0299000-7f91b0498000 ---p 00007000 ca:01 24609
/lib/librt-2.11.3.so

7f91b0498000-7f91b0499000 r--p 00006000 ca:01 24609
/lib/librt-2.11.3.so

7f91b0499000-7f91b049a000 rw-p 00007000 ca:01 24609
/lib/librt-2.11.3.so

7f91b049a000-7f91b04bb000 r-xp 00000000 ca:01 78232
/usr/lib/libedit.so.2.11

7f91b04bb000-7f91b06bb000 ---p 00021000 ca:01 78232
         /usr/lib/libedit.so.2.11

7f91b06bb000-7f91b06bd000 rw-p 00021000 ca:01 78232
/usr/lib/libedit.so.2.11

7f91b06bd000-7f91b06c1000 rw-p 00000000 00:00 0

7f91b06c1000-7f91b06d8000 r-xp 00000000 ca:01 24602
/lib/libpthread-2.11.3.so

7f91b06d8000-7f91b08d7000 ---p 00017000 ca:01 24602
/lib/libpthread-2.11.3.soAborted



Thank you

-Sasha

<pre><br><font size="2" color="gray" face="times new roman"> DISCLAIMER:  The information transmitted is intended only for the person or entity to <br>which it is addressed and may contain confidential and/or privileged material.  Any <br>review, retransmission, dissemination or other use of, or taking of any action in reliance <br>upon this information by persons or entities other than the intended recipient is <br>prohibited. If you received this in error, please contact the sender and destroy any copies of <br>this document and any attachments. </font></pre>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20130816/a3405bad/attachment-0001.html>


More information about the vpn-help mailing list