Right, and the boxes I'm referring to on 2.1 have been upgraded from 2.0.x (and in some cases, 1.2.3), as well as some clean-install 2.1 VMs.

Not saying it hasn't happened, but I haven't witnessed it personally.

Sep 5 15:53:26 	racoon: ERROR: fatal parse failure (1 errors)
Sep 5 15:53:26 	racoon: ERROR: /var/etc/racoon.conf:14: "ldapcfg" racoon not configured with --with-libldap
Sep 5 15:53:26 	racoon: INFO: Reading configuration from "/var/etc/racoon.conf"
Sep 5 15:53:26 	racoon: INFO: @(#)This product linked OpenSSL 0.9.8q 2 Dec 2010 (http://www.openssl.org/)
Sep 5 15:53:26 	racoon: INFO: @(#)ipsec-tools 0.8.0 (http://ipsec-tools.sourceforge.net)

The above is during an attempted startup of IPSec service…  and here's my /var/etc/racoon.conf:

# This file is automatically generated. Do not edit
path pre_shared_key "/var/etc/psk.txt";

path certificate  "/var/etc";

listen
{
        adminsock "/var/db/racoon/racoon.sock" "root" "wheel" 0660;
        isakmp 206.248.x.x [500];
        isakmp_natt 206.248.x.x  [4500];
}

ldapcfg {
        version 3;
        host "";
        port 389;
        base "";
        subtree on;
        bind_dn "";
        bind_pw "";
        attr_user "";
}

remote 70.55.x.x
{
        ph1id 1;
        exchange_mode aggressive;
        my_identifier address 206.248.x.x;
        peers_identifier address 70.55.x.x;
        ike_frag on;
        generate_policy = off;
        initial_contact = on;
        nat_traversal = on;

        dpd_delay = 10;
        dpd_maxfail = 5;
        support_proxy on;
        proposal_check claim;

        proposal
        {
                authentication_method pre_shared_key;
                encryption_algorithm blowfish 256;
                hash_algorithm sha1;
                dh_group 2;
                lifetime time 28800 secs;
        }
}

sainfo subnet 10.0.2.0/24 any subnet 192.168.2.0/24 any
{
        remoteid 1;
        encryption_algorithm blowfish 256;
        authentication_algorithm hmac_sha1;
        pfs_group 2;
        lifetime time 86400 secs;
        compression_algorithm deflate;
}