Your message dated Mon, 01 Mar 2010 12:44:59 +0100
with message-id <[email protected]>
and subject line closed
has caused the Debian Bug report #507701,
regarding ipsec-tools: policy priorities are not supported while there is 
kernel support - compilation configuration problem
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
507701: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507701
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ipsec-tools
Version: 1:0.7.1-1.2
Severity: important

setkey complains: "Policy priority not compiled in" while there is kernel 
support.

A closer look at the compilation process reveals that ./configure does not find 
the sadb_x_policy.sadb_x_policy_priority field of the structure.

Debian rules ask for --with-kernel-headers=/usr/include . When this is set 
explicitly to /lib/modules/.../build/include, .configure does find the 
sadb_x_policy.sadb_x_policy_priority field, and setkey accepts the priority 
definition. More clues are readily available in config.log:

------------
In file included from conftest.c:23:
/usr/include/linux/pfkeyv2.h:15: error: expected specifier-qualifier-list 
before ‘uint8_t’
....
------------

The problem seems to be not the absence of the field, but the lack of 'uint8_t' 
definition.
The compiler's <asm/posix_types.h> takes precedence over 
/usr/include/asm/posix_types.h when -I/usr/include is used (but not in the 
other case). This does not seem to be the 'right thing'.
Setting CFLAGS += "-isystem /usr/include" seems to solve this problem.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-etchnhalf.1-686 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ipsec-tools depends on:
ii  libc6                 2.7-16             GNU C Library: Shared libraries
ii  libcomerr2            1.41.3-1           common error description library
ii  libkrb53              1.6.dfsg.4~beta1-4 MIT Kerberos runtime libraries
ii  libpam0g              1.0.1-4            Pluggable Authentication Modules l
ii  libssl0.9.8           0.9.8g-14          SSL shared libraries

ipsec-tools recommends no packages.

ipsec-tools suggests no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---
As this bug can not reproduced with recent versions and seems to be
fixed - i close this bug hereby.

stefan
-- 
Stefan Bauer -----------------------------------------
PGP: E80A 50D5 2D46 341C A887 F05D 5C81 5858 DCEF 8C34
-------- plzk.de - Linux - because it works ----------


--- End Message ---

Reply via email to