linuxmaniac created an issue (kamailio/kamailio#4420)
### Description
There's no indication on the documentation that the user that execute kamailio
service needs certain capabilities in order ipsec to work properly. There's no
error or warning message neither.
### Troubleshooting
#### Reproduction
execute ``kamailio`` with ``-u kamailio -g kamailio`` (as default in deb
packages ). The ipsec tunnels never get created.
Do the same thing but with ``-u root -g root`` or with systemd override config
as:
```
[Service]
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW
```
#### Debugging Data
You can use ``ip xfrm monitor`` to debug it.
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/4420
You are receiving this because you are subscribed to this thread.
Message ID: <kamailio/kamailio/issues/[email protected]>
_______________________________________________
Kamailio - Development Mailing List -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the
sender!
