Mandos on Fedora/RHEL

Nathanael D. Noblet nathanael at gnat.ca
Fri Oct 25 01:10:39 CEST 2013


On 10/24/2013 04:13 PM, Nathanael D. Noblet wrote:
> *MUCH* closer.
>
> The server log has this:
>
> 2013-10-24 16:08:19,053 root [3819]: DEBUG: Fingerprint:
> 3214C6D910D9231208CC4C665C0DF789334E2179
> 2013-10-24 16:08:19,054 root [3813]: INFO: Client not found for
> fingerprint: 3214C6D910D9231208CC4C665C0DF789334E2179, address:
> ('::ffff:192.168.56.152', 33553, 0, 0)
>
> the /etc/mandos/clients.conf
>
> [mini]
> host = 192.168.56.152
> fingerprint = 3214C6D910D9231208CC4C665C0DF789334E2179
> secret = ....
>
> Any ideas what could be going wrong there?
>

I have no idea how this could not be working... I've dug through the 
code but for whatever reason it doesn't seem to add the client. I added 
some basic logging to see such as

logger.warning(set(old_client_settings)-set(client_settings))
and
logger.warning(set(client_settings)-set(old_client_settings))
both print out [] in the debug log...

I manually did this
     clients_data['mini'] = client_settings['mini']

after the loop that does the adding and suddenly everything works, the 
checker starts and the client can connect and gets its password. I did a 
diff of /usr/sbin/mandos between 1.6.1 and 1.6.2 and there are barely 
any lines changed between. Any thoughts on why the set()-set results in 
an empty set when the clients_settings isn't empty??


-- 
Nathanael d. Noblet
t 403.875.4613


More information about the Mandos-Dev mailing list