Installing Mandos (Client and Server) on Ubuntu 16.04

Paul Schulz paul at mawsonlakes.org
Tue Oct 25 03:56:53 CEST 2016


Greetings,
I have installed the 16.04 default packages of 'mandos' and 'mandos-client'
(version 1.7.1) on my network, but it doesn't appear to be working
correctly.

So.. my preferences to fix this are:
(1) Install a later version via a package - 1.7.13.
Is there a preferred package source (or ppa?) for Ubuntu 14.04.

(2) fix up whatever the issue is with 1.7.1
My '1.7.1' mandos-client appears to be issuing a request, but the mandos
server logs show the following log message below, and I am prompted for a
manual password entry on my encrypted host.

Cheers,
Paul

# mandos --debug --configdir /etc/mandos --servicename Test
2016-10-25 12:07:26,167 root [1453]: ERROR: Disabling D-Bus:
Traceback (most recent call last):
  File "/usr/sbin/mandos", line 2740, in main
    do_not_queue=True)
  File "/usr/lib/python2.7/dist-packages/dbus/service.py", line 142, in
__new__
    raise NameExistsException(name)
NameExistsException: Bus name already exists: se.recompile.Mandos
2016-10-25 12:07:26,182 root [1453]: WARNING: Could not load persistent
state: No such file or directory
2016-10-25 12:07:26,185 root [1453]: DEBUG: Creating client 'walnut01'
2016-10-25 12:07:26,185 root [1453]: DEBUG:   Fingerprint:
248BC74E8A9C6F84049260FB4036DC4FB5FDD9F3
2016-10-25 12:07:26,188 root [1453]: INFO: Starting checker u'ssh-keyscan
-t ed25519 walnut01 2>/dev/null | grep --fixed-strings --line-regexp
--quiet --regexp=walnut01" ssh-ed25519
AAAAC3NzaC1lZDI1NTE5AAAAIH2D4u9mSTu8d5DfSHhhl8+ZGzoFWxBG9Ui6T8m/hq05"' for
walnut01
2016-10-25 12:07:26,189 root [1453]: INFO: Now listening on address '::',
port 49841, flowinfo 0, scope_id 0
2016-10-25 12:07:26,191 root [1453]: DEBUG: Avahi server state change: 2
2016-10-25 12:07:26,193 root [1453]: DEBUG: Adding Zeroconf service 'Test'
of type '_mandos._tcp' ...
2016-10-25 12:07:26,194 root [1453]: DEBUG: Starting main loop
2016-10-25 12:07:26,194 root [1453]: DEBUG: Avahi entry group state change:
1
2016-10-25 12:07:27,016 root [1453]: DEBUG: Avahi entry group state change:
2
2016-10-25 12:07:27,016 root [1453]: DEBUG: Zeroconf service established.
2016-10-25 12:07:31,200 root [1453]: INFO: Checker for walnut01 failed
2016-10-25 12:08:00,366 root [1479]: INFO: TCP connection from:
('fe80::16da:e9ff:fe04:b9eb%enp5s0', 40398, 0, 2)
2016-10-25 12:08:00,367 root [1479]: DEBUG: Pipe FD: 16
2016-10-25 12:08:00,367 root [1479]: DEBUG: GnuTLS: REC[0x13794b0]:
Allocating epoch #0
----------------------------------------
Exception happened during processing of request from
('fe80::16da:e9ff:fe04:b9eb%enp5s0', 40398, 0, 2)
Traceback (most recent call last):
  File "/usr/sbin/mandos", line 2087, in sub_process_main
    self.finish_request(request, address)
  File "/usr/lib/python2.7/SocketServer.py", line 331, in finish_request
    self.RequestHandlerClass(request, client_address, self)
  File "/usr/lib/python2.7/SocketServer.py", line 652, in __init__
    self.handle()
  File "/usr/sbin/mandos", line 1884, in handle
    self.request, gnutls.connection .X509Credentials())
  File "/usr/lib/python2.7/dist-packages/gnutls/connection.py", line 357,
in __init__
    Session.__init__(self, socket, context)
  File "/usr/lib/python2.7/dist-packages/gnutls/connection.py", line 222,
in __init__
    gnutls_priority_set_direct(self._c_object, context.session_parameters,
None)
AttributeError: 'X509Credentials' object has no attribute
'session_parameters'
----------------------------------------
2016-10-25 12:08:00,368 root [1479]: DEBUG: GnuTLS: REC[0x13794b0]: Start
of epoch cleanup
2016-10-25 12:08:00,369 root [1479]: DEBUG: GnuTLS: REC[0x13794b0]: End of
epoch cleanup
2016-10-25 12:08:00,369 root [1479]: DEBUG: GnuTLS: REC[0x13794b0]: Epoch
#0 freed
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.recompile.se/pipermail/mandos-dev/attachments/20161025/11a130c0/attachment.html>


More information about the Mandos-Dev mailing list