ipsecadm group returns write: Invalid argument

[Andrew Atrens]

Hi Folks,

I'm running 3.7-stable and am trying to 'group' a compression
association with an esp association like so -

Not sure what these 'errno 209's are about either :('

# ipsecadm show
sadb_dump: satype ipcomp vers 2 len 14 seq 0 pid 0
        errno 209: Unknown error: 209
        sa: cpi 0x00001004 comp deflate
                state larval replay 0 flags 0
        lifetime_cur: alloc 0 bytes 0 add 1129216072 first 0
        address_src: 47.128.22.159
        address_dst: 47.128.22.193
sadb_dump: satype ipcomp vers 2 len 14 seq 0 pid 0
        errno 209: Unknown error: 209
        sa: cpi 0x00001005 comp deflate
                state larval replay 0 flags 0
        lifetime_cur: alloc 0 bytes 0 add 1129216072 first 0
        address_src: 47.128.22.193
        address_dst: 47.128.22.159
sadb_dump: satype esp vers 2 len 22 seq 0 pid 0
        errno 209: Unknown error: 209
        sa: spi 0x00001000 auth hmac-sha1 enc 3des-cbc
                state larval replay 0 flags 4
        lifetime_cur: alloc 0 bytes 0 add 1129216072 first 0
        address_src: 47.128.22.159
        address_dst: 47.128.22.193
        key_auth: bits 160: e14c30ace1478dfcba0b3ffcd217ddf8fd1fedf9
        key_encrypt: bits 192: d82fd5d82fd5d82fd5d82fd5d82fd5d82fd5d82fd5d82fd5
sadb_dump: satype esp vers 2 len 22 seq 0 pid 0
        errno 209: Unknown error: 209
        sa: spi 0x00001001 auth hmac-sha1 enc 3des-cbc
                state larval replay 0 flags 4
        lifetime_cur: alloc 0 bytes 0 add 1129216072 first 0
        address_src: 47.128.22.193
        address_dst: 47.128.22.159
        key_auth: bits 160: e14c30ace1478dfcba0b3ffcd217ddf8fd1fedf9
        key_encrypt: bits 192: d82fd5d82fd5d82fd5d82fd5d82fd5d82fd5d82fd5d82fd5
sadb_dump: satype ah vers 2 len 18 seq 0 pid 0
        errno 209: Unknown error: 209
        sa: spi 0x00001002 auth hmac-sha1 enc none
                state larval replay 0 flags 0
        lifetime_cur: alloc 0 bytes 0 add 1129216072 first 0
        address_src: 47.128.22.159
        address_dst: 47.128.22.193
        key_auth: bits 160: e14c30ace1478dfcba0b3ffcd217ddf8fd1fedf9
sadb_dump: satype ah vers 2 len 18 seq 0 pid 0
        errno 209: Unknown error: 209
        sa: spi 0x00001003 auth hmac-sha1 enc none
                state larval replay 0 flags 0
        lifetime_cur: alloc 0 bytes 0 add 1129216072 first 0
        address_src: 47.128.22.193
        address_dst: 47.128.22.159
        key_auth: bits 160: e14c30ace1478dfcba0b3ffcd217ddf8fd1fedf9


# ipsecadm group -cpi 1004 -spi 1004 -proto ipcomp -spi2 1000 -proto2 esp -dst 
47.128.22.193 -dst2 47.128.22.193

ipsecadm: write: Invalid argument

I've tried with and without the -cpi parameter .. Is this an ipsecadm bug or
(once again :)) am I doing something obviously wrong?


Incidentally, this doesn't work either -

# ipsecadm group -dst 47.128.22.193 -spi 1000 -proto esp -dst2 47.128.22.193 
-spi2 1002 -proto2 ah

ipsecadm: write: Invalid argument


Cheers,

Andrew.