Ipsec_starter[xxx]: notifying watcher failed: Bad file descriptor
-
I noticed (4) of these errors are logged in system.log every time IPsec is started or 'forcefully reloaded'. This is new since pfsense updated to strongswan 5.2 from 5.1.3
The cause and fix are discussed in this ML message: https://lists.strongswan.org/pipermail/users/2014-July/006293.html and additional details are in the surrounding ML thread.
One fix is this:
diff --git a/src/starter/starter.c b/src/starter/starter.c index ef57808..71f33ae 100644 --- a/src/starter/starter.c +++ b/src/starter/starter.c @@ -612,7 +612,6 @@ int main (int argc, char **argv) int fnull; close_log(); - closefrom(3); fnull = open("/dev/null", O_RDWR); if (fnull >= 0)
-
I do not see any issues from that log setting.
Due you have any problems in general or just trying to clean your log? -
No problems related to that, just noise in the log. I can understand you not wanting to patch strongswan, no problem, but it could generate some questions when 2.2 goes GA.
-
Bug now opened here:
https://redmine.pfsense.org/issues/3947
-
Bug now opened here:
https://redmine.pfsense.org/issues/3947
This is fixed by today's snapshot with strongswan updated to 5.2.1. Thanks!