Problems with vpn after mavericks update.

Question

PepVila Author

Level 1

0 points

Problems with vpn after mavericks update.

26/10/13 16:25:40,549 configd[54]: IPSec connecting to server 195.55.176.213

26/10/13 16:25:40,553 configd[54]: network changed.

26/10/13 16:25:40,554 configd[54]: IPSec Phase1 starting.

26/10/13 16:25:40,554 configd[54]: SCNC: start, triggered by (170) SystemUIServer, type IPSec, status 0, trafficClass 0

26/10/13 16:25:40,570 racoon[1413]: __SCPreferencesAccess CFPropertyListCreateWithData(): The operation couldn’t be completed. (Cocoa error 3840.)

26/10/13 16:25:40,597 racoon[1413]: accepted connection on vpn control socket.

26/10/13 16:25:40,597 racoon[1413]: IPSec connecting to server 195.55.176.213

26/10/13 16:25:40,597 racoon[1413]: Connecting.

26/10/13 16:25:40,598 racoon[1413]: IPSec Phase 1 started (Initiated by me).

26/10/13 16:25:40,598 racoon[1413]: IKE Packet: transmit success. (Initiator, Main-Mode message 1).

26/10/13 16:25:40,598 racoon[1413]: >>>>> phase change status = Phase 1 started by us

26/10/13 16:25:40,603 configd[54]: network changed.

26/10/13 16:25:40,672 racoon[1413]: >>>>> phase change status = Phase 1 started by peer

26/10/13 16:25:40,672 racoon[1413]: IKE Packet: receive success. (Initiator, Main-Mode message 2).

26/10/13 16:25:40,683 racoon[1413]: IKE Packet: transmit success. (Initiator, Main-Mode message 3).

26/10/13 16:25:40,687 configd[54]: network changed.

26/10/13 16:25:40,784 racoon[1413]: IKE Packet: receive success. (Initiator, Main-Mode message 4).

26/10/13 16:25:40,821 com.apple.SecurityServer[15]: Problem opening rules file "/etc/authorization": No such file or directory

26/10/13 16:25:40,822 racoon[1413]: error -25308 errSecInteractionNotAllowed.

26/10/13 16:25:40,822 racoon[1413]: failed to sign.

26/10/13 16:25:40,822 racoon[1413]: failed to get sign

26/10/13 16:25:40,822 racoon[1413]: failed to allocate send buffer

26/10/13 16:25:40,822 racoon[1413]: IKE Packet: transmit failed. (Initiator, Main-Mode Message 5).

26/10/13 16:25:40,822 racoon[1413]: failed to process packet.

26/10/13 16:25:40,822 racoon[1413]: Phase 1 negotiation failed.

26/10/13 16:25:40,824 configd[54]: IPSec Controller: IKE FAILED. phase 3, assert 0

26/10/13 16:25:40,824 configd[54]: IPSec disconnecting from server 195.55.176.213

26/10/13 16:25:40,824 racoon[1413]: IPSec disconnecting from server 195.55.176.213

26/10/13 16:25:40,824 racoon[1413]: failed to send vpn_control message: Broken pipe

26/10/13 16:25:40,825 racoon[1413]: IPSec disconnecting from server 195.55.176.213

26/10/13 16:25:40,825 racoon[1413]: glob found no matches for path "/var/run/racoon/*.conf"

26/10/13 16:25:40,831 configd[54]: network changed.

26/10/13 16:25:40,838 configd[54]: network changed.

26/10/13 16:25:41,292 racoon[1413]: Connecting.

iMac, OS X Mavericks (10.9)

Posted on Oct 26, 2013 7:31 AM

Reply

Answer 1

PepVila Author

Level 1

0 points

Oct 26, 2013 8:12 AM in response to PepVila

Hello,

I upgraded to version Mavericks and then stopped working with the IPsec VPN Authentication RSA.
Someone can help me?

See the log:

26/10/13 16:25:40,821 com.apple.SecurityServer[15]: Problem opening rules file "/etc/authorization": No such file or directory

26/10/13 16:25:40,822 racoon[1413]: error -25308 errSecInteractionNotAllowed.

thanks

Reply

Answer 2

gfif

Level 1

0 points

Oct 30, 2013 11:57 AM in response to PepVila

I have this issue after upgrade too

Reply

Answer 3

ArnieX

Level 1

4 points

Oct 31, 2013 7:41 AM in response to PepVila

This exact same issue here... any idea what to do? I just know /etc/authorization was deprecated but no word on what is happening with VPN.

Reply

Answer 4

ohrstedt

Level 1

0 points

Nov 2, 2013 5:48 PM in response to PepVila

Exactly the same issue...

Reply

Answer 5

srggsf

Level 1

0 points

Nov 8, 2013 1:48 AM in response to PepVila

Hi All, I had this issue too.

I granted client certificate's private key access to all applications and set always trust certificate in the Keychain Access.

After that racoon successfully connected to vpn server. (there were about 5 lines of errors in a log, but vpn worked)

Next, I returned certificate's trust policy to system defaults. (private key access reverted automatically).

Now it works without errors.

I hope that will help.

Reply

Answer 6

olgs

Level 1

4 points

Nov 15, 2013 7:44 AM in response to srggsf

Same here.

Similar to @srggsf, I used Keychain Access to modify the private key's trust policy. However, instead of setting it to all application, I just gave access to /usr/sbin/racoon.

Unlike srggsf, reverting the private key's policy afterwards does not work. Have to keep racoon on the list.

Reply

Answer 7

Jun 23, 2014 9:38 AM in response to PepVila

I am having a similar issue, but looks like the 'raccoon/*.conf' is not found

6/23/14 12:32:01.987 PM pppd[2114]: pppd 2.4.2 (Apple version 727.90.1) started by cmiller, uid 502

6/23/14 12:32:02.078 PM UserNotificationCenter[2117]: *** WARNING: Method userSpaceScaleFactor in class NSWindow is deprecated on 10.7 and later. It should not be used in new applications. Use convertRectToBacking: instead.

6/23/14 12:32:11.004 PM pppd[2114]: L2TP connecting to server 'office.besentient.com' (XXXXXX)...

6/23/14 12:32:11.006 PM pppd[2114]: IPSec connection started

6/23/14 12:32:11.025 PM racoon[2118]: accepted connection on vpn control socket.

6/23/14 12:32:11.026 PM racoon[2118]: Connecting.

6/23/14 12:32:11.026 PM racoon[2118]: IPSec Phase 1 started (Initiated by me).

6/23/14 12:32:11.027 PM racoon[2118]: IKE Packet: transmit success. (Initiator, Main-Mode message 1).

6/23/14 12:32:11.027 PM racoon[2118]: >>>>> phase change status = Phase 1 started by us

6/23/14 12:32:14.027 PM racoon[2118]: IKE Packet: transmit success. (Phase 1 Retransmit).

6/23/14 12:32:17.281 PM racoon[2118]: IKE Packet: transmit success. (Phase 1 Retransmit).

6/23/14 12:32:20.574 PM racoon[2118]: IKE Packet: transmit success. (Phase 1 Retransmit).

6/23/14 12:32:21.026 PM pppd[2114]: IPSec connection failed

6/23/14 12:32:21.027 PM racoon[2118]: IPSec disconnecting from server XXXXXXXX

6/23/14 12:32:21.028 PM racoon[2118]: glob found no matches for path "/var/run/racoon/*.conf"

any ideas on how to solve this??

Reply