"Failed to attach to key daemon" - Shrewsoft VPN Access Manager

Hi!

So the company where I work we use Shrewsofts VPN Access Manager if we want to work from home. It works on windows. I’ve exported the access data, imported on the Linux version but I get the error failed to attach to key daemon. I’ve got this on other distros as well.

I’ve only found this, but I really don’t know how to implement this on opensuse tumbleweed, if it can be.

Can someone help meg get this thing working?

Thank You!

I don’t use this, but based on the comments in that post, I found one in the opensuse forums that have steps to do this

You’re looking specifically at the instructions given for systemd (not init)

Do note, this post is quite old, you should probably look up creating a systemd service and follow that guide with this as input

before doing that though, check if a service already exists and just needs started / enablede

sudo systemctl start iked

and if that’s suceessful

sudo systemctl enable iked

I also made another assumption, you downloaded the source and compiled the binary for ike from their website? or how did you install it?

If you know how to create a systemd service on Ubuntu, it will be the same on Tumbleweed.

Wasn’t successfull

nagy@localhost:~> sudo systemctl start iked
[sudo] root jelszava:
Failed to start iked.service: Unit iked.service not found.

I have installed it from KDE Discover

I actually don’t. I tried it on Nobara what the Ubuntu forums said, but wasn’t successfull :frowning:

so it looks like you installed the flatpak version of the interface manager. There is a note on the page

Warning: Just a frontend for managing connections. You must run iked daemon on the background before using

I don’t see a package for ike in zypper. I think you will have to download the source and compile the package following the instructions provided in the readme file, this is all provided on their website. Once you’ve compiled the code, it’ll need to be deployed to a bin directory (assuming it doesn’t have a make install command, if it does you can probably skip this step) and then you’ll need to setup the systemd service as described above.

This sound very complicated :smiley:

I just found a package in the OBS that might work, it’s called openiked. The easiest way to install it is using the opi command (zypper install opi), and then opi openiked chosing option 1. Finally chosing option 1 again. it already has a service setup, so I would try that.

Also, I was reading on their website, it appears that strongswan client also works. I would give that a try too

Is this what I might need?

I believe so. yes it looks like those are the manual instructions for the opi command I gave above.

I’ve installed it, but still get back this:
nagy@localhost:~> sudo systemctl start iked
[sudo] root jelszava:
Failed to start iked.service: Unit iked.service not found.

It is openiked.service
So
sudo systemctl start openiked

looks like the name of the service is openiked.service

nagy@localhost:~> sudo systemctl start openiked
[sudo] root jelszava:
Job for openiked.service failed because the control process exited with error code.
See “systemctl status openiked.service” and “journalctl -xeu openiked.service” for details.

I fired this up in distrobox, you are most likely missing a configuration file that needs edited, along with your set of keys. I also had to add the user _iked to get the binary to run.

run the command sudo systemctl status openiked to see why the service failed
run the command man iked.conf to figure out how to setup the configuration file

i’m sorry but that’s about as far as I can get you.

If you still haven’t figured things out, did you ever try connecting to your vpn using the strongswan client?

I serously F…D something when fiddleing with openiked, because nothing would load after reboot, I was only seeing the cursos but thats all :confused:

I think I will let this one go :frowning: