Description of problem: I successfully can create VPN tunnels from OS-X following the directions http://www.mindbug.org/2010/11/fedora-as-ipsecl2tp-vpn-server-for-mac.html After disconnecting from OS-X the linux kernel complains: unregister_netdevice: waiting for ppp0 to become free. Usage count = 3 It looks like pppd cannot be killed after this happens, according to strace it's stuck in close (10), and they finaly seem to die after a "service ipsec stop". Version-Release number of selected component (if applicable): openswan-2.6.31-1.fc14.i686 xl2tpd-1.2.7-1.fc14.i686 ppp-2.4.5-12.fc14.i686 kernel-2.6.35.9-64.fc14.i686 How reproducible: 100% Steps to Reproduce: 1. Configure a VPN tunnel as described 2. Make a successfull VPN connection from a OS-X 10.6.5 3. Disconnect the VPN from the OS-X side 4. Enjoy the "unregister_device" messages in the syslog 5. Find out that no more VPN connections can be established Actual results: Message in syslog: unregister_netdevice: waiting for ppp0 to become free. Usage count = 3 Impossible to establish another VPN connection Expected results: Clean disconnect of the VPN, ability to reconnect. Additional info:
The close(10) of pppd refers to /dev/ppp
This would be a bug in the ppp package, not in the openswan package. The xl2tpd has an option for pppds that are unwilling to die, but the pppd version in fedora should be new enough not to have that bug in it. But if you want to try, recompile xl2tpd and remove -DTRUST_PPPD_TO_DIE from DFLAGS and let us know if that resolves your problem
Note that an inherient problem with removing that define is that any cleanup that pppd normally does via /etc/ppp/ip-down would not be run, as xl2tpd would kill pppd before it got a chance to run those.
Created attachment 480500 [details] Patch to disable -DTRUST_PPPD_TO_DIE
Created attachment 480502 [details] SPEC file to disable -DTRUST_PPPD_TO_DIE
Ik rebuilt the xl2tpd package using the attached diff and spec file, attempting to disable -DTRUST_PPPD_TO_DIE. During build of the package the -DTRUST_PPPD_TO_DIE no longer shows up. After installing the newly built package, the problem remains.
I cannot reproduce this. I only have OSX 10.7.1 though. I was also behind NAT. Is this still an issue with "current" openswan and xl2tpd and kernel?
*** Bug 665863 has been marked as a duplicate of this bug. ***
I will get back on this one, but it requires some effort to test this again.
Rebuilt my own NAT network configuration, and tested again. Good news: things seem to work fine now!