TFTP stopped working on F14

[Aaron Gray]

TFTP seems to have stopped working on my F14 machine.

It appears both server and client are not working.

I have it working on my F15 machine and have tried between the two (with
iptables rule) and F14 server and client do not work.

tftp appears to log in but, on transferring a file it just says "Transfer
timed out." after a while.

I have reinstalled both client and server. And I am using the same
'/etc/xinetd.d/tftp' file on F15 as on F14.

There do not appear to be any logs for TFTP.

AFAICS I am not doing anything wrong or differently.

Help !

Many thanks in advance,

Aaron

[Thomas Dineen]

Aaron:

1) Update to the newest version of server and client.
I have found that there are F14 and F15 bugs that are
covered in the updates!

2) Be aware of configuration requirements.

3) Be aware of SELinux, you will likely also have to enable
variables in SELinux. Update you SELinux, more bugs here.

4) Of course recheck you firewall.

Thomas Dineen

On 10/7/2011 7:07 AM, Aaron Gray wrote:
> TFTP seems to have stopped working on my F14 machine.
>
> It appears both server and client are not working.
>
> I have it working on my F15 machine and have tried between the two 
> (with iptables rule) and F14 server and client do not work.
>
> tftp appears to log in but, on transferring a file it just says 
> "Transfer timed out." after a while.
>
> I have reinstalled both client and server. And I am using the same 
> '/etc/xinetd.d/tftp' file on F15 as on F14.
>
> There do not appear to be any logs for TFTP.
>
> AFAICS I am not doing anything wrong or differently.
>
> Help !
>
> Many thanks in advance,
>
> Aaron

[Aaron Gray]

On 7 October 2011 15:26, Thomas Dineen  wrote:
> Aaron:
> Update to the newest version of server and client.
>
> I have found that there are F14 and F15 bugs that are
> covered in the updates!

I have done :-

yum reinstall tftp
    yum reinstal tftp-server
> Be aware of configuration requirements.

It used to work, I installed two servers with PXE using it.
> Be aware of SELinux, you will likely also have to enable
>
> variables in SELinux. Update you SELinux, more bugs here.

I tried disable SELinux.
> Of course recheck you firewall.

-A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT

But the firewall does not apply to local usage.
> Thomas Dineen

Still not working :(

Thanks,

Aaron
> On 10/7/2011 7:07 AM, Aaron Gray wrote:
>
> TFTP seems to have stopped working on my F14 machine.
>
> It appears both server and client are not working.
>
> I have it working on my F15 machine and have tried between the two (with
> iptables rule) and F14 server and client do not work.
>
> tftp appears to log in but, on transferring a file it just says "Transfer
> timed out." after a while.
>
> I have reinstalled both client and server. And I am using the same
> '/etc/xinetd.d/tftp' file on F15 as on F14.
>
> There do not appear to be any logs for TFTP.
>
> AFAICS I am not doing anything wrong or differently.
>
> Help !
>
> Many thanks in advance,
>
> Aaron

[Soham Chakraborty]

Is it possible for you to check the connection status by netstat when you
transfer a file? Also, once you start transferring a file, can you get the
PID and attach strace to it? I guess, it is running as a xinetd controlled
daemon, if so, is there anything else listening on the tftp port?

Soham

On Fri, Oct 7, 2011 at 8:18 PM, Aaron Gray wrote:
> On 7 October 2011 15:26, Thomas Dineen  wrote:
> > Aaron:
> > Update to the newest version of server and client.
> >
> > I have found that there are F14 and F15 bugs that are
> > covered in the updates!
>
> I have done :-
> yum reinstall tftp
> yum reinstal tftp-server
>
>
> > Be aware of configuration requirements.
>
> It used to work, I installed two servers with PXE using it.
> > Be aware of SELinux, you will likely also have to enable
> >
> > variables in SELinux. Update you SELinux, more bugs here.
>
> I tried disable SELinux.
> > Of course recheck you firewall.
>
> -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT
>
> But the firewall does not apply to local usage.
> > Thomas Dineen
>
> Still not working :(
>
> Thanks,
>
> Aaron
> > On 10/7/2011 7:07 AM, Aaron Gray wrote:
> >
> > TFTP seems to have stopped working on my F14 machine.
> >
> > It appears both server and client are not working.
> >
> > I have it working on my F15 machine and have tried between the two (with
> > iptables rule) and F14 server and client do not work.
> >
> > tftp appears to log in but, on transferring a file it just says
> > "Transfer timed out." after a while.
> >
> > I have reinstalled both client and server. And I am using the same
> > '/etc/xinetd.d/tftp' file on F15 as on F14.
> >
> > There do not appear to be any logs for TFTP.
> >
> > AFAICS I am not doing anything wrong or differently.
> >
> > Help !
> >
> > Many thanks in advance,
> >
> > Aaron
>
> --
> users mailing list
> [e-mail]
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Aaron Gray]

On 7 October 2011 18:29, Soham Chakraborty wrote:
> Is it possible for you to check the connection status by netstat when you
> transfer a file? Also, once you start transferring a file, can you get the
> PID and attach strace to it? I guess, it is running as a xinetd controlled
> daemon, if so, is there anything else listening on the tftp port?

Okay more to go on, thanks, I will have to do that later as another session,
Soham.

Cheers,

Aaron

Soham
> On Fri, Oct 7, 2011 at 8:18 PM, Aaron Gray wrote:
> > On 7 October 2011 15:26, Thomas Dineen  wrote:
> > > Aaron:
> > > Update to the newest version of server and client.
> > >
> > > I have found that there are F14 and F15 bugs that are
> > > covered in the updates!
> >
> > I have done :-
> > yum reinstall tftp
> > yum reinstal tftp-server
> >
> >
> > > Be aware of configuration requirements.
> >
> > It used to work, I installed two servers with PXE using it.
> > > Be aware of SELinux, you will likely also have to enable
> > >
> > > variables in SELinux. Update you SELinux, more bugs here.
> >
> > I tried disable SELinux.
> > > Of course recheck you firewall.
> >
> > -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT
> >
> > But the firewall does not apply to local usage.
> > > Thomas Dineen
> >
> > Still not working :(
> >
> > Thanks,
> >
> > Aaron
> > > On 10/7/2011 7:07 AM, Aaron Gray wrote:
> > >
> > > TFTP seems to have stopped working on my F14 machine.
> > >
> > > It appears both server and client are not working.
> > >
> > > I have it working on my F15 machine and have tried between the two
> > > (with iptables rule) and F14 server and client do not work.
> > >
> > > tftp appears to log in but, on transferring a file it just says
> > > "Transfer timed out." after a while.
> > >
> > > I have reinstalled both client and server. And I am using the same
> > > '/etc/xinetd.d/tftp' file on F15 as on F14.
> > >
> > > There do not appear to be any logs for TFTP.
> > >
> > > AFAICS I am not doing anything wrong or differently.
> > >
> > > Help !
> > >
> > > Many thanks in advance,
> > >
> > > Aaron
> >
> > --
> > users mailing list
> > [e-mail]
> > To unsubscribe or change subscription options:
> > https://admin.fedoraproject.org/mailman/listinfo/users
> > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
>
> --
> users mailing list
> [e-mail]
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Franta Hanzlík]

Aaron Gray wrote:
> TFTP seems to have stopped working on my F14 machine.
>
> It appears both server and client are not working.
>
> I have it working on my F15 machine and have tried between the two (with iptables rule) and
> F14 server and client do not work.
>
> tftp appears to log in but, on transferring a file it just says "Transfer timed out." after a
> while.
>
> I have reinstalled both client and server. And I am using the same '/etc/xinetd.d/tftp' file
> on F15 as on F14.
>
> There do not appear to be any logs for TFTP.
>
> AFAICS I am not doing anything wrong or differently.
>
> Help !
>
> Many thanks in advance,
>
> Aaron

1) In adition to other recommendations - if You use libwrap files
 /etc/hosts.{allow,deny} , have You something as

in.tftpd:       192.168.202.

in /etc/hosts.allow (192.168.202.* is client network) at server side?

2) what say logs at server side (/var/log/messages)?

3) tftp connection between F14 and F15 works fine for me, no matter
which distro is client and which server (just verified). But I was
gathered with some weird TFTP clients (mainly PXE), for which was
needed some adjustment at Fedora TFTP server. Namely:

- set "/proc/sys/net/ipv4/ip_no_pmtu_disc" to 1 (e.g. with
net.ipv4.ip_no_pmtu_disc = 1
line in "/etc/sysctl.conf" or quickly with
echo 1 >/proc/sys/net/ipv4/ip_no_pmtu_disc
)

- disable some tftp extension - in "/etc/xinetd.d/tftp" supply "-r blksize":
#	server_args		= -s /var/lib/tftpboot
    server_args		= -s /var/lib/tftpboot -r blksize

4) wireshark is very good sort of things for debugging.

Franta

[Aaron Gray]

On 7 October 2011 18:38, Aaron Gray  wrote:
> On 7 October 2011 18:29, Soham Chakraborty wrote:
> > Is it possible for you to check the connection status by netstat when you
> > transfer a file? Also, once you start transferring a file, can you get the
> > PID and attach strace to it?

Just getting the following for the tftpd :-

Process 6225 attached - interrupt to quit
restart_syscall(<... resuming interrupted call ...>^C <unfinished ...>
Process 6225 detached
> I guess, it is running as a xinetd controlled daemon, if so, is there

anything else listening on the tftp port?

How do I ascertain this ?

Thanks,

Aaron
> Okay more to go on, thanks, I will have to do that later as another
> session, Soham.
>
> Cheers,
>
> Aaron
>
> Soham
> > On Fri, Oct 7, 2011 at 8:18 PM, Aaron Gray wrote:
> > > On 7 October 2011 15:26, Thomas Dineen  wrote:
> > > > Aaron:
> > > > Update to the newest version of server and client.
> > > >
> > > > I have found that there are F14 and F15 bugs that are
> > > > covered in the updates!
> > >
> > > I have done :-
> > > yum reinstall tftp
> > > yum reinstal tftp-server
> > >
> > >
> > > > Be aware of configuration requirements.
> > >
> > > It used to work, I installed two servers with PXE using it.
> > > > Be aware of SELinux, you will likely also have to enable
> > > >
> > > > variables in SELinux. Update you SELinux, more bugs here.
> > >
> > > I tried disable SELinux.
> > > > Of course recheck you firewall.
> > >
> > > -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT
> > >
> > > But the firewall does not apply to local usage.
> > > > Thomas Dineen
> > >
> > > Still not working :(
> > >
> > > Thanks,
> > >
> > > Aaron
> > > > On 10/7/2011 7:07 AM, Aaron Gray wrote:
> > > >
> > > > TFTP seems to have stopped working on my F14 machine.
> > > >
> > > > It appears both server and client are not working.
> > > >
> > > > I have it working on my F15 machine and have tried between the two
> > > > (with iptables rule) and F14 server and client do not work.
> > > >
> > > > tftp appears to log in but, on transferring a file it just says
> > > > "Transfer timed out." after a while.
> > > >
> > > > I have reinstalled both client and server. And I am using the same
> > > > '/etc/xinetd.d/tftp' file on F15 as on F14.
> > > >
> > > > There do not appear to be any logs for TFTP.
> > > >
> > > > AFAICS I am not doing anything wrong or differently.
> > > >
> > > > Help !
> > > >
> > > > Many thanks in advance,
> > > >
> > > > Aaron
> > >
> > > --
> > > users mailing list
> > > [e-mail]
> > > To unsubscribe or change subscription options:
> > > https://admin.fedoraproject.org/mailman/listinfo/users
> > > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> >
> > --
> > users mailing list
> > [e-mail]
> > To unsubscribe or change subscription options:
> > https://admin.fedoraproject.org/mailman/listinfo/users
> > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Franta Hanzlík]

Aaron Gray wrote:
..
> > I guess, it is running as a xinetd controlled daemon, if so, is there anything else
>
> listening on the tftp port?
>
> How do I ascertain this ?

- "netstat" utility should be display xinetd daemon listening at udp
port 69 :

# netstat -a -n -p --ip|grep 69
udp        0      0 0.0.0.0:69                  0.0.0.0:*
1595/xinetd

- and You "/etc/xinetd.d/tftp" should be as (note "disable = no"):

service tftp
{
    disable	= no
    socket_type		= dgram
    protocol		= udp
    wait			= yes
    user			= root
    server			= /usr/sbin/in.tftpd
    server_args		= -s /var/lib/tftpboot
    per_source		= 11
    cps			= 100 2
    flags			= IPv4
}

- and xinetd daemon must be running; on F14 you can use command:
service xinetd status
and on F15 command:
systemctl status xinetd.service

[Soham Chakraborty]

Go to the directory /etc/xinetd.d
There all the services controlled by xinted reside. If tftp is being
controlled by xinetd, then you will find a configuration file specific to
it. As Frantisek said, disable=NO should be there if it is xinetd
controlled. If not, then disable=YES

In other words, try to check netstat while you put xinetd or tftp on the
side of grep. In my experience, I have seen that due to another service
listening on the same port, the legit ftp service is not running.

Since we are not getting the logs, it is kinda hard to guess. From the
strace, it can't be guessed what is going on. But if the line you mentioned
is the only line in strace, then probably something is going very awry. That
line is the first line of output that always comes if you attach strace to a
running process. Was the right hand value of the line a zero or something
else?

Also, I am guessing this problem only appears during transfer of file. If
you do a service check on tftp, what appears? Can you toggle the status of
the service and try? Also, toggle the tftp status keeping xinetd on and off
and find whether that makes any difference?

- Soham

On Sat, Oct 8, 2011 at 3:53 PM, Frantisek Hanzlik wrote:
> Aaron Gray wrote:
> ..
> > > I guess, it is running as a xinetd controlled daemon, if so, is there
>
> anything else
> > listening on the tftp port?
> >
> > How do I ascertain this ?
> "netstat" utility should be display xinetd daemon listening at udp
>
> port 69 :
>
> # netstat -a -n -p --ip|grep 69
> udp        0      0 0.0.0.0:69                  0.0.0.0:*
> 1595/xinetd
> and You "/etc/xinetd.d/tftp" should be as (note "disable = no"):
>
> service tftp
> {
>        disable = no
>        socket_type             = dgram
>        protocol                = udp
>        wait                    = yes
>        user                    = root
>        server                  = /usr/sbin/in.tftpd
>        server_args             = -s /var/lib/tftpboot
>        per_source              = 11
>        cps                     = 100 2
>        flags                   = IPv4
> }
> and xinetd daemon must be running; on F14 you can use command:
>
> service xinetd status
> and on F15 command:
> systemctl status xinetd.service
> --
> users mailing list
> [e-mail]
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines