Hi,<br><br>I've now compiled and installed 2.1.4. All seemed to go smoothly. I can create a new profile and enter a Fully Qualified Domain Name. When I save it and then attempt to connect to it wont do so and the message in the responder's log is:<br>
<br>16:22:03 - [MiniEee] responding to Main Mode from unknown peer 58.8.189.183<br>Fri, 2009-05-15 16:22:03 - [MiniEee] no suitable connection for peer '192.168.1.5'<br>Fri, 2009-05-15 16:22:03 - [MiniEee] sending encrypted notification INVALID_ID_INFORMATION to <invalid>:0<br>
<br>When I go back to edit the profile the Fully Qualified Domain name field has disappeared and only the IP address field remains.<br><br>This time I am confident that I have 2.1.4 properly installed. Could this still be a bug with the Shrew VPN client?<br>
<br>I fail to understand how it can accept the input when I create the profile and yet not actually store it, which is what appears to be happening.<br><br>Any thoughts?<br><br>Thanks,<br>Steve<br><br><br><br><div class="gmail_quote">
2009/5/14 <a href="mailto:vpn-help-request@lists.shrew.net">vpn-help-request@lists.shrew.net</a> <span dir="ltr"></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Send vpn-help mailing list submissions to<br>
<a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.shrew.net/mailman/listinfo/vpn-help" target="_blank">http://lists.shrew.net/mailman/listinfo/vpn-help</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:vpn-help-request@lists.shrew.net">vpn-help-request@lists.shrew.net</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:vpn-help-owner@lists.shrew.net">vpn-help-owner@lists.shrew.net</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of vpn-help digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Building on Fedora 10? (Don Seiler)<br>
2. Supporting RSA SecurID tokens? (Don Seiler)<br>
3. Re: Compiled Shrew 2.1.5 beta for Ubuntu 8.10 and Netgear<br>
DG834G (Matthew Grooms)<br>
4. Re: VPN CLI (Matthew Grooms)<br>
5. Re: Supporting RSA SecurID tokens? (Matthew Grooms)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Tue, 12 May 2009 14:25:55 -0500<br>
From: Don Seiler <<a href="mailto:don@seiler.us">don@seiler.us</a>><br>
Subject: [Vpn-help] Building on Fedora 10?<br>
To: <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
Message-ID:<br>
<<a href="mailto:94e86aed0905121225j1837f8b0m6db141e3d5ee85f1@mail.gmail.com">94e86aed0905121225j1837f8b0m6db141e3d5ee85f1@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=ISO-8859-1<br>
<br>
Is there a quick HOWTO for buliding on Fedora 10? I have qt3-devel<br>
(and qt3) installed. I don't see a -mt package like libqt3-mt-dev on<br>
Ubuntu.<br>
<br>
When I try to run the cmake command (cmake -DCMAKE_INSTALL_PREFIX=/usr<br>
-DQTGUI=YES -ETCDIR=/etc -DNATT=YES -Wno-dev), I get the error "Unable<br>
to locate required package : QT"<br>
<br>
Also: is cpp not suitable for g++? If not, which package provides it?<br>
yum seach wasn' t too helpful.<br>
<br>
--<br>
Don Seiler<br>
<a href="http://seilerwerks.wordpress.com" target="_blank">http://seilerwerks.wordpress.com</a><br>
ultimate: <a href="http://www.mufc.us" target="_blank">http://www.mufc.us</a><br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Tue, 12 May 2009 14:35:48 -0500<br>
From: Don Seiler <<a href="mailto:don@seiler.us">don@seiler.us</a>><br>
Subject: [Vpn-help] Supporting RSA SecurID tokens?<br>
To: <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
Message-ID:<br>
<<a href="mailto:94e86aed0905121235g1629f185va404820a74b553ba@mail.gmail.com">94e86aed0905121235g1629f185va404820a74b553ba@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=ISO-8859-1<br>
<br>
My employer is changing the VPN setup to use RSA SecurID tokens with a<br>
changing passcode. This has motivated me to finally look into using<br>
Shrew again instead of VPNC. However I need to know a few answers:<br>
<br>
1. Does Shrew/IKE support the SecurID changing tokens?<br>
2. Does Shrew/IKE support the "new PIN" setup process? Apparently<br>
VPNC doesn't, but the official Cisco client does. However the<br>
official Cisco client is a pain in the ass to set up.<br>
3. Like #2, does Shrew/IKE support "next tokencode" process when too<br>
many failures have occurred. Again, VPNC doesn't, official client<br>
does.<br>
<br>
--<br>
Don Seiler<br>
<a href="http://seilerwerks.wordpress.com" target="_blank">http://seilerwerks.wordpress.com</a><br>
ultimate: <a href="http://www.mufc.us" target="_blank">http://www.mufc.us</a><br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Wed, 13 May 2009 00:51:54 -0500<br>
From: Matthew Grooms <<a href="mailto:mgrooms@shrew.net">mgrooms@shrew.net</a>><br>
Subject: Re: [Vpn-help] Compiled Shrew 2.1.5 beta for Ubuntu 8.10 and<br>
Netgear DG834G<br>
To: <a href="mailto:shrew.nelipot@spamgourmet.com">shrew.nelipot@spamgourmet.com</a><br>
Cc: <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
Message-ID: <<a href="mailto:4A0A5FFA.60506@shrew.net">4A0A5FFA.60506@shrew.net</a>><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
<a href="mailto:shrew.nelipot@spamgourmet.com">shrew.nelipot@spamgourmet.com</a> wrote:<br>
> Hi Matthew,<br>
><br>
> I thought I'd give installation another shot after first uninstalling<br>
> Shrew 2.10 in Synaptic. Installation seemed to go just fine. After<br>
> installation of my custom built DEB file I got some odd behaviour.<br>
> Firstly, there is no menu item for the Shrew VPN client, but that's<br>
> minor. So I started iked, after reading the README file, although I<br>
> wasn't really sure that I needed to do that, in a terminal window and<br>
> that seemed to go okay. Then I started ikea in the same window, which<br>
> opened the familiar Shrew Soft VPN Client. I created a new profile,<br>
> which seemed to work well as there were many more configurable items.<br>
> Under the Authentication tab for local host I found many different<br>
> Identification types that weren't there on the older version, such as<br>
> Fully Qualified Domain Name, Key Identifier and User Fully Qualified<br>
> Domain Name. The same was true for Remote Identity which has ASN. 1<br>
> Distinguished Name in addition.<br>
><br>
> I entered all the necessary data and saved it. Then I double clicked<br>
> the profile I wanted to use (the new one I just created) to connect and<br>
> it opened up ikec, I believe it is called. When I hit the Connect<br>
> button I got the message 'failed to attach to key daemon....' and<br>
> nothing more happens. There is no log entried recorded in the VPN<br>
> server log either. If I try to go back in and change settings of the<br>
> new profile the new Identification types previously available all seem<br>
> to have disappeared and I am left with just the old IP address field<br>
> under the previous version of Shrew that I had installed. It's almost<br>
> as if I have a mixture of the two versions running. Sort of like when<br>
> the human and the fly get mixed up in the time machine!<br>
><br>
> Seems to me that something went wrong with the install process. Any<br>
> suggestions?<br>
><br>
<br>
The iked process needs to be running in the background. The client gui<br>
apps connect to iked.<br>
<br>
-Matthew<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Wed, 13 May 2009 00:53:14 -0500<br>
From: Matthew Grooms <<a href="mailto:mgrooms@shrew.net">mgrooms@shrew.net</a>><br>
Subject: Re: [Vpn-help] VPN CLI<br>
To: "Barker Ben (ST)" <<a href="mailto:Ben.Barker@tfl.gov.uk">Ben.Barker@tfl.gov.uk</a>><br>
Cc: "'<a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a>'" <<a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a>><br>
Message-ID: <<a href="mailto:4A0A604A.4060608@shrew.net">4A0A604A.4060608@shrew.net</a>><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
Barker Ben (ST) wrote:<br>
> Afternoon.<br>
><br>
> Is there any way to initiate a VPN using the Shrewsoft client for<br>
> windows using the command line rather than going through the graphical<br>
> access manager? I found a mention of CLI in the release notes, but<br>
> wasn?t clear if this was just for the Linux version.<br>
><br>
> Apologies if this is already documented somewhere...<br>
><br>
<br>
The 2.2.x versions have a cli interface but its *nix only. The windows<br>
version does not have such a front end.<br>
<br>
-Matthew<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Wed, 13 May 2009 01:04:24 -0500<br>
From: Matthew Grooms <<a href="mailto:mgrooms@shrew.net">mgrooms@shrew.net</a>><br>
Subject: Re: [Vpn-help] Supporting RSA SecurID tokens?<br>
To: Don Seiler <<a href="mailto:don@seiler.us">don@seiler.us</a>><br>
Cc: <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
Message-ID: <<a href="mailto:4A0A62E8.5040204@shrew.net">4A0A62E8.5040204@shrew.net</a>><br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br>
<br>
Don Seiler wrote:<br>
> My employer is changing the VPN setup to use RSA SecurID tokens with a<br>
> changing passcode. This has motivated me to finally look into using<br>
> Shrew again instead of VPNC. However I need to know a few answers:<br>
><br>
> 1. Does Shrew/IKE support the SecurID changing tokens?<br>
> 2. Does Shrew/IKE support the "new PIN" setup process? Apparently<br>
> VPNC doesn't, but the official Cisco client does. However the<br>
> official Cisco client is a pain in the ass to set up.<br>
> 3. Like #2, does Shrew/IKE support "next tokencode" process when too<br>
> many failures have occurred. Again, VPNC doesn't, official client<br>
> does.<br>
><br>
<br>
Hi Don,<br>
<br>
The client does not support this at present. There is a ticket for it<br>
which I hope to knock out before the 2.2.0 release.<br>
<br>
<a href="http://www.shrew.net/support/ticket/12" target="_blank">http://www.shrew.net/support/ticket/12</a><br>
<br>
-Matthew<br>
<br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
vpn-help mailing list<br>
<a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<a href="http://lists.shrew.net/mailman/listinfo/vpn-help" target="_blank">http://lists.shrew.net/mailman/listinfo/vpn-help</a><br>
<br>
<br>
End of vpn-help Digest, Vol 32, Issue 8<br>
***************************************<br>
</blockquote></div><br>