Troubleshooting Mount Helper

Use these troubleshooting tips to resolve common issues with Mount Helper installation and file share mounting. Check logs, verify IPsec connections, and restart services as needed.

Checking installation logs

If the IPsec installation fails, check the mount-helper installation script logs that are displayed on the standard output.

Checking IPsec service logs

If the IPsec is installed properly but failed to start the IPsec service, check the charon logs. The charon logs can be found in one of the following log files based on OS image: /var/log/syslog or /var/log/messages.

Monitoring IPsec connection negotiation

You can run the following swanctl command on another terminal to check the IPsec connection negotiation logs before you attempt the mount command.

swanctl -T

Starting or disconnecting IPsec connections manually

To manually start or disconnect the IPsec connection, use one of the following commands.

ipsec up <connection-name>
ipsec down <connection-name>

If IPsec command is not available, use the following swanctl command.

swanctl -i --ike <connection-name>
swanctl -i --child <connection-name>
swanctl -t --ike <connection-name>

Listing active IPsec connections

To list active connections with IPsec encryption, use one of the following commands.

ipsec status

Or

swanctl -l

Restarting the strongSwan service

Command to restart the strongSwan service.

systemctl restart strongswan

Checking Mount Helper logs

Location of the mount helper log.

/opt/ibm/mount-ibmshare/mount-ibmshare.log

Checking stunnel logs

Location of the stunnel logs:

/var/log/stunnel/ibmshare_[MOUNT_PATH].log

Next steps

If you continue to experience issues after trying these troubleshooting steps: