Server listening only on tcp6

[wodel youchi]

Hi,

I am using a new installation on Cento 7 updated.
I am using these packages for 389DS
389-adminutil-1.1.21-2.el7.x86_64
389-ds-base-1.3.8.4-15.el7.x86_64
389-admin-console-doc-1.1.12-1.el7.noarch
389-ds-base-libs-1.3.8.4-15.el7.x86_64
389-console-1.1.19-4.el7.noarch
389-admin-1.1.46-1.el7.x86_64
389-admin-console-1.1.12-1.el7.noarch
389-ds-console-doc-1.2.16-1.el7.noarch
389-ds-1.2.2-6.el7.noarch
389-ds-console-1.2.16-1.el7.noarch
389-dsgw-1.1.11-5.el7.x86_64

The netstat on both ports 389 and 636 show that the daemon is listening on
tcp6 only.

as a workaround i modified nsslapd-listenhost and nsslapd-securelistenhost
to 0.0.0.0

it's the first time I ma getting this behavior.

Regards.

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&...
Virus-free.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&...
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

[Gordon Messmer]

On 6/12/19 5:55 AM, wodel youchi wrote:
>  The netstat on both ports 389 and 636 show that the daemon is 
>  listening on tcp6 only. 

Mine, too:

# netstat -tlnp
tcp6       0      0 :::389 :::*                    LISTEN      
6922/ns-slapd

Yet:

$ telnet 10.1.10.11 389
Trying 10.1.10.11...
Connected to 10.1.10.11.

tcp6 sockets can accept IPv4 connections.  (Just not the other way 
around.)  Listening on tcp6 only is normal.

[William Brown]

>  On 12 Jun 2019, at 14:55, wodel youchi <wodel.youchi(a)gmail.com&gt;
> wrote:
>  
>  Hi,
>  
>  I am using a new installation on Cento 7 updated.
>  I am using these packages for 389DS
>  389-adminutil-1.1.21-2.el7.x86_64
>  389-ds-base-1.3.8.4-15.el7.x86_64
>  389-admin-console-doc-1.1.12-1.el7.noarch
>  389-ds-base-libs-1.3.8.4-15.el7.x86_64
>  389-console-1.1.19-4.el7.noarch
>  389-admin-1.1.46-1.el7.x86_64
>  389-admin-console-1.1.12-1.el7.noarch
>  389-ds-console-doc-1.2.16-1.el7.noarch
>  389-ds-1.2.2-6.el7.noarch
>  389-ds-console-1.2.16-1.el7.noarch
>  389-dsgw-1.1.11-5.el7.x86_64
>  
>  The netstat on both ports 389 and 636 show that the daemon is listening on tcp6 only.
>  
>  as a workaround i modified nsslapd-listenhost and nsslapd-securelistenhost to 0.0.0.0
>  
>  it's the first time I ma getting this behavior. 
I think that in this case, it will only listen on ipv6 but it accepts connections from
both. This is because there is a way to open a socket via v6 that accepts on both which I
think NSPR uses. 

So unless there is no way to connect on v4, this is no issue. 


>  
>  Regards.
>  
>  	Virus-free. www.avast.com
>  _______________________________________________
>  389-users mailing list -- 389-users(a)lists.fedoraproject.org
>  To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]... 
—
Sincerely,

William Brown

Senior Software Engineer, 389 Directory Server
SUSE Labs