>Submitter-Id:  current-users
>Originator:    Kostyuk Oleg
>Organization:  
>Confidential:  no 
>Synopsis:      /etc/rc.d/ipsec starts not in time
>Severity:      serious
>Priority:      medium
>Category:      conf
>Class:         sw-bug
>Release:       FreeBSD 5.1-CURRENT i386
>Environment:
        System: FreeBSD demani.digma 5.1-CURRENT
        FreeBSD 5.1-CURRENT #4: Sun Nov 2 13:45:34 EET 2003
        [EMAIL PROTECTED]:/var/.0/usr/obj/usr/src/sys/CUB i386


>Description:
        I use ipsec between my desktop and nfs/ntp server.
        On boot my mashine stops on "Mounting NFS file systems".

        If I press Ctrl+C, booting continue ok, but nfs mounts
        left unmounted and time not in sync.

        I try to use -b flag to mount_nfs in fstab, but this
        not help me.

        Problem is in order of starting /etc/rc.d/ipsec.
        It must start BEFORE any network interaction,
        may be even before configuring interfaces.
        But I not sure in case with diskless mashines.

>How-To-Repeat:
        Create entry in /etc/fstab for nfs mount,
        create /etc/ipsec.conf to establish secure connection
        to same server (on both sides, of course :), and reboot.

>Fix:

        (~)% grep -h '\$FreeBSD' /usr/src/etc/rc.d/ipsec /etc/rc.d/ipsec
        # $FreeBSD: src/etc/rc.d/ipsec,v 1.6 2003/07/30 18:53:59 mtm Exp $
        # $FreeBSD: src/etc/rc.d/ipsec,v 1.6 2003/07/30 18:53:59 mtm Exp $


        (~)% diff -u /usr/src/etc/rc.d/ipsec /etc/rc.d/ipsec
        --- /usr/src/etc/rc.d/ipsec     Wed Jul 30 21:53:59 2003
        +++ /etc/rc.d/ipsec     Sun Nov  2 14:43:59 2003
        @@ -5,8 +5,8 @@
         #

         # PROVIDE: ipsec
         # REQUIRE: root beforenetlkm mountcritlocal
        -# BEFORE:  DAEMON
        +# BEFORE:  NETWORK
         # KEYWORD: FreeBSD NetBSD

         #      it does not really require beforenetlkm.

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to