Hi, I've installed and compiled a new kernel using Gerd Knorr's kernel-source-26-2.6.1-4.i586.rpm available at ftp://ftp.suse.com/pub/people/kraxel on a SuSE 9.0. So far it works fine, thanks! I'm only wondering about the new aaa_base package mentioned in the README to be required. I couldn't find it. But there are problems using the ipsec functionality in the kernel while setting up a VPN. The VPN uses setkey. During setkey calls, the kernel tries to load modules which it couldn't find: Jan 24 20:51:06 linux kernel: request_module: failed /sbin/modprobe -- cast128. error = 256 Jan 24 20:51:07 linux kernel: request_module: failed /sbin/modprobe -- digest_null. error = 256 Jan 24 20:51:08 linux kernel: request_module: failed /sbin/modprobe -- cast128. error = 256 Jan 24 20:51:09 linux kernel: request_module: failed /sbin/modprobe -- lzjh. error = 256 Jan 24 20:51:10 linux kernel: request_module: failed /sbin/modprobe -- ripemd160. error = 256 Jan 24 20:51:11 linux kernel: request_module: failed /sbin/modprobe -- lzs. error = 256 with a simple setkey example, someone can reproduce this with: echo "add 10.0.0.254 10.0.0.100 esp 200102 -E des-cbc 0x1111111111111111;" | setkey -c which gives a Jan 25 14:01:04 linux kernel: request_module: failed /sbin/modprobe -- ripemd160. error = 256 on my system. I tried with different variations: CONFIG_NET_KEY=m CONFIG_XFRM=y CONFIG_XFRM_USER=m CONFIG_CRYPTO=y CONFIG_CRYPTO_HMAC=y CONFIG_CRYPTO_NULL=y CONFIG_CRYPTO_MD4=y CONFIG_CRYPTO_MD5=y CONFIG_CRYPTO_SHA1=y CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA512=y CONFIG_CRYPTO_DES=y CONFIG_CRYPTO_BLOWFISH=y CONFIG_CRYPTO_TWOFISH=y CONFIG_CRYPTO_SERPENT=y CONFIG_CRYPTO_AES=y CONFIG_CRYPTO_CAST5=y CONFIG_CRYPTO_CAST6=y CONFIG_CRYPTO_DEFLATE=y CONFIG_CRYPTO_TEST=y as modules or fixed in the kernel, nothing helps. Strcutures for many of the failing modules are defined in: /usr/src/linux/net/xfrm/xfrm_algo.c part of xfrm, which is not available as module, so fixed in the kernel. I used different variations of the ipsec-tools-0.2.3 stuff: Gerd's rpm, selfmade using the actual kernel headers. Same results. One more regarding modules. Are there any docs about figuring out the modules/modprobe mechanics, especially the relations of numbers to names? Many thanks in advance! Christoph Jaeschke