mandos general protection error

Björn Påhlsson belorn at fukt.bsnet.se
Fri Jan 23 13:12:12 CET 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Dick Middleton wrote:

>     Still battling on ;-)

Good, don't give up :)

> Trying to connect - nothing much happens; reports error:
> 
> sendmsg() to 0:0:ff02:: failed: Operation not permitted

It seems that it fails to use Avahi to find the ZeroConf service.  Do
you have the avahi-daemon installed? Any special conditions like SELinux
which could prohibit program operation? Is IPv6 support installed? Any
additional information here would help us to reproduce the error.

You could try to use "strace" when starting mandos-client without
- --connect and send us the output; this might give us a hint of where the
problem lies.  What user are you running mandos-client as?  Not that
this should make any difference; for us it works both as root and non-root.

> Anyway if I use --connect on mandos-client then it seems to run OK until
> it gets a GPG error (see attached).

"--connect" with mandos-client bypasses Avahi/ZeroConf completely. Here
I have no idea why it doesn't work, and I haven't been able to reproduce
it.  Any manual installations of GnuTLS/libgcrypt11?

> On the server in syslog I get:
> 
> Jan 22 19:24:20 Geronimo kernel: [769771.374160] mandos[22960] general
> protection ip:b7a6b4bc sp:bfa94dd4 error:0 in
> libgcrypt.so.11.4.4[b7a49000+66000]

That sounds seriously weird.

> The server debug output just reports protocol version.

Could you please also send the complete server debug output as well as
the server configuration?


/Belorn
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEAREDAAYFAkl5tAwACgkQC+Cq+bUsy1LL8QCfe5Me0fRpYNT0cGIsX9PkA9BA
RkIAn3PrKijb9GiKLorjfBuPrwr9cip9
=M8c8
-----END PGP SIGNATURE-----


More information about the Mandos-Dev mailing list