conf/58832: /etc/rc.d/ipsec starts not in time

[Kostyuk Oleg]

>Number:         58832
>Category:       conf
>Synopsis:       /etc/rc.d/ipsec starts not in time
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Nov 02 06:00:34 PST 2003
>Closed-Date:
>Last-Modified:
>Originator:     Kostyuk Oleg
>Release:        FreeBSD 5.1-CURRENT i386
>Organization:
>Environment:
	System: FreeBSD demani.digma 5.1-CURRENT
	FreeBSD 5.1-CURRENT #4: Sun Nov 2 13:45:34 EET 2003
	root at demani.digma:/var/.0/usr/obj/usr/src/sys/CUB i386


>Description:
	I use ipsec between my desktop and nfs/ntp server.
	On boot my mashine stops on "Mounting NFS file systems".

	If I press Ctrl+C, booting continue ok, but nfs mounts
	left unmounted and time not in sync.

	I try to use -b flag to mount_nfs in fstab, but this
	not help me.

	Problem is in order of starting /etc/rc.d/ipsec.
	It must start BEFORE any network interaction,
	may be even before configuring interfaces.
	But I not sure in case with diskless mashines.

>How-To-Repeat:
	Create entry in /etc/fstab for nfs mount,
	create /etc/ipsec.conf to establish secure connection
	to same server (on both sides, of course :), and reboot.

>Fix:

	(~)% grep -h '\$FreeBSD' /usr/src/etc/rc.d/ipsec /etc/rc.d/ipsec
	# $FreeBSD: src/etc/rc.d/ipsec,v 1.6 2003/07/30 18:53:59 mtm Exp $
	# $FreeBSD: src/etc/rc.d/ipsec,v 1.6 2003/07/30 18:53:59 mtm Exp $


	(~)% diff -u /usr/src/etc/rc.d/ipsec /etc/rc.d/ipsec
	--- /usr/src/etc/rc.d/ipsec     Wed Jul 30 21:53:59 2003
	+++ /etc/rc.d/ipsec     Sun Nov  2 14:43:59 2003
	@@ -5,8 +5,8 @@
	 #

	 # PROVIDE: ipsec
	 # REQUIRE: root beforenetlkm mountcritlocal
	-# BEFORE:  DAEMON
	+# BEFORE:  NETWORK
	 # KEYWORD: FreeBSD NetBSD

	 #      it does not really require beforenetlkm.

>Release-Note:
>Audit-Trail:
>Unformatted: