Re: Kernel source 2.4.22 and ipvs problems

2003-10-07 Thread Herbert Xu 
Bao C. Ha <[EMAIL PROTECTED]> wrote:
> 
> If I want both the freeswan module capability and IPVS, how should
> I proceed.  

If all you need is to run freeswan, then you can unapply the IPSEC patch,
and simply use KLIPS.

If you need the new stack, then you will need to fix the conflicts.
It shouldn't be difficult as IPVS is already part of 2.6.

Cheers,
-- 
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

Re: Kernel source 2.4.22 and ipvs problems

2003-10-06 Thread Herbert Xu 
George Danchev <[EMAIL PROTECTED]> wrote:
> 
> Sorry but this is not true and your documentation is misleading ! You have 
> already known that your ipsec patch can't even be unapplied cleanly, and it 
> is documented for kernel-source-2.4.22-2 in #213987... This is not corrected 
> for kernel-source-2.4.22-3 (which is in sid now) and very likely it will not 
> be corrected in the future. I'm not sure how many users are going to trust 

If you actually bothered to understand the message, you will find that
the conflict is harmless and the resulting tree should work.
-- 
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

Re: Kernel source 2.4.22 and ipvs problems

2003-10-06 Thread George Danchev 
On Monday 06 October 2003 19:38, Bao C. Ha wrote:
> On Mon, Oct 06, 2003 at 07:12:03PM +1000, Herbert Xu wrote:
>
> Hi Herbet,
>
> If I want both the freeswan module capability and IPVS, how should
> I proceed.

You need kernel hacker skills to do that. Even if these patches both apply 
cleanly each after other, then this is still not a sign that the resulting 
kernel (compiled from these sources) will work correctly, because you might 
hit lots of logical/semantics errors inside the source tree and so on. As of 
2.4.22 still these patches are not intended to work together ... In any way a 
proper merging is needed. Go ask on LKML or wait for further kernel releases 
where these patches may be merged correctly to work together.

> > Bao C. Ha <[EMAIL PROTECTED]> wrote:
> > > I am trying to patch the kernel 2.4.22 and got into troubles.  It seems
> > > that the Debian kernel has been patched to do away the pmtu field of
> > > the struct dst_entry (include/net/dst.h).
> > >
> > > Any sugegstions on how to get it working again.  The last working
> > > Debian kernel with IPVS is 2.4.20.
> >
> > You can either use a vanilla kernel, or unapply the IPSEC patch as
> > documented in the README.Debian file.

Sorry but this is not true and your documentation is misleading ! You have 
already known that your ipsec patch can't even be unapplied cleanly, and it 
is documented for kernel-source-2.4.22-2 in #213987... This is not corrected 
for kernel-source-2.4.22-3 (which is in sid now) and very likely it will not 
be corrected in the future. I'm not sure how many users are going to trust 
such broken source trees... Then you leave these users the only option of 
downloading the kernel from kernel.org or svn'ing it from kernel.bkbits.net 
and patching it as they want.

-- 
pub  4096R/0E4BD0AB 2003-03-18 
1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB

Re: Kernel source 2.4.22 and ipvs problems

2003-10-06 Thread Graham Wilson 
On Mon, Oct 06, 2003 at 05:10:18PM +0200, Louis-David Mitterrand wrote:
> On Mon, Oct 06, 2003 at 07:12:03PM +1000, Herbert Xu wrote:
> > You can either use a vanilla kernel, or unapply the IPSEC patch as
> > documented in the README.Debian file.
> 
> Why is the ipsec patch applied by default in the debian kernel? Asking
> users to unapply a patch that shouldn't be in the stable kernel in the
> first place is unacceptable. Telling them to use the "vanilla kernel"
> makes them lose the security updates, the only ones that should be
> applied to debian's kernel-source packages.

Here we go again.

-- 
gram


signature.asc
Description: Digital signature

Re: Kernel source 2.4.22 and ipvs problems

2003-10-06 Thread Bao C. Ha 
On Mon, Oct 06, 2003 at 07:12:03PM +1000, Herbert Xu wrote:

Hi Herbet,

If I want both the freeswan module capability and IPVS, how should
I proceed.  

Thanks.
Bao

> Bao C. Ha <[EMAIL PROTECTED]> wrote:
> > 
> > I am trying to patch the kernel 2.4.22 and got into troubles.  It seems
> > that the Debian kernel has been patched to do away the pmtu field of
> > the struct dst_entry (include/net/dst.h).
> > 
> > Any sugegstions on how to get it working again.  The last working Debian 
> > kernel with IPVS is 2.4.20.
> 
> You can either use a vanilla kernel, or unapply the IPSEC patch as
> documented in the README.Debian file.

-- 
Best Regards.
Bao C. Ha
Hacom OpenBrick Distributor USA http://www.hacom.net
voice: (714) 530-8817 fax: (714) 530-8818
8D66 6672 7A9B 6879 85CD 42E0 9F6C 7908 ED95 6B38

Re: Kernel source 2.4.22 and ipvs problems

2003-10-06 Thread Louis-David Mitterrand 
On Mon, Oct 06, 2003 at 07:12:03PM +1000, Herbert Xu wrote:
> Bao C. Ha <[EMAIL PROTECTED]> wrote:
> > 
> > I am trying to patch the kernel 2.4.22 and got into troubles.  It seems
> > that the Debian kernel has been patched to do away the pmtu field of
> > the struct dst_entry (include/net/dst.h).
> > 
> > Any sugegstions on how to get it working again.  The last working Debian 
> > kernel with IPVS is 2.4.20.
> 
> You can either use a vanilla kernel, or unapply the IPSEC patch as
> documented in the README.Debian file.

Why is the ipsec patch applied by default in the debian kernel? Asking
users to unapply a patch that shouldn't be in the stable kernel in the
first place is unacceptable. Telling them to use the "vanilla kernel"
makes them lose the security updates, the only ones that should be
applied to debian's kernel-source packages.

This whole thing is a unintuitive mess that has certainly caused more
aggravation than benefited anyone. How was the old system of having a
separate ipsec patch broken?

-- 
They can have my jeans, as soon as they pry them off my dead, cold ass.
-- (Spackler on /. about corporate dress code becoming formal again)

Re: Kernel source 2.4.22 and ipvs problems

2003-10-06 Thread Herbert Xu 
Bao C. Ha <[EMAIL PROTECTED]> wrote:
> 
> I am trying to patch the kernel 2.4.22 and got into troubles.  It seems
> that the Debian kernel has been patched to do away the pmtu field of
> the struct dst_entry (include/net/dst.h).
> 
> Any sugegstions on how to get it working again.  The last working Debian 
> kernel with IPVS is 2.4.20.

You can either use a vanilla kernel, or unapply the IPSEC patch as
documented in the README.Debian file.

Cheers,
-- 
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

Kernel source 2.4.22 and ipvs problems

2003-10-05 Thread Bao C. Ha 
Hello all,

I am trying to patch the kernel 2.4.22 and got into troubles.  It seems
that the Debian kernel has been patched to do away the pmtu field of
the struct dst_entry (include/net/dst.h).

Any sugegstions on how to get it working again.  The last working Debian 
kernel with IPVS is 2.4.20.

Thanks.
Bao
-- 
Best Regards.
Bao C. Ha
Hacom OpenBrick Distributor USA http://www.hacom.net
voice: (714) 530-8817 fax: (714) 530-8818
8D66 6672 7A9B 6879 85CD 42E0 9F6C 7908 ED95 6B38