On Fri, 21 May 2004, Felipe Alfaro Solana wrote:
However, I must say there are some problems with automatic keying
and
2.6 kernels regarding the use of ISAKMP/IKE. The problem is that
settings an SPD between both tunnel end-points causes the first packet
between any of them to start negotiating the Security Association. But
the kernel, instead of queueing the packet that triggered the ISAKMP/IKE
exchange (in order to set up the SA), discards it and returns -EGAIN
error to the userspace caller which, in turn, translates into "Resource
temporarily unavailable" for user space programs.
This is a known issue which needs to be fixed in the upstream kernel.
- James
--
James Morris
<jmorris(a)redhat.com>