Bug#850620: [Pkg-utopia-maintainers] Bug#850620: Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage

2019-07-29 Thread Luca Boccassi
Control: reopen -1 !
Control: found -1 1.14.6-2

On Tue, 7 Feb 2017 23:31:06 +0100 Michael Biebl <
bi...@debian.org
> wrote:
> Version: 1.6.0-1
> 
> Am 25.01.2017 um 20:43 schrieb Maximilian Engelhardt:
> > I can confirm this is fixed by the upstream patch.
> 
> Thanks for testing!
> 
> > It would be great to get this fixed for stretch. In my test I just
had to 
> > backport the upstream fix.
> 
> This patch is part of 1.6.0, so closing accordingly.
> 
> Regards,
> Michael

Hi,

I am hitting this on my laptop running buster. It's pretty much as
reported, the mngtmpaddr gets its lifetime updated when a RA is
received, but the temporary addresses do not, so random connections
break every 10 minutes.

Is anyone else experiencing this? Is it possible that it regressed,
since it was fixed upstream long ago?

$ ip addr show dev enx0050b6b7bd60 | grep -A1 
inet6 /64 scope global dynamic mngtmpaddr noprefixroute 
   valid_lft 594sec preferred_lft 594sec
$ ip addr show dev enx0050b6b7bd60 | grep -A1 :9554:71a7:3057:5969
inet6 :9554:71a7:3057:5969/64 scope global temporary dynamic 
   valid_lft 93sec preferred_lft 93sec

As a workaround without breaking privacy, enabling RFC7217 (address
randomly generated per-LAN) works as an alternative by setting:

ipv6.ip6-privacy 0
ipv6.addr-gen-mode stable-privacy

Here's a (sanitized) debug log output when a RA arrives:

Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0703] 
ndisc-lndp[0x55cadac8e440,"enx0050b6b7bd60"]: received router advertisement at 
105126
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0704] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: scheduling next now/lifetime check: 
600 seconds
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0704] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]: neighbor discovery configuration 
changed [GARS]:
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0704] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]:   dhcp-level otherconf
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0705] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]:   gateway  pref medium exp 
599.1357
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0705] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]:   address  exp 599.1357
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0705] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]:   address  exp 7127.1357
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0706] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]:   route fd00:0:0:1::/64 via :: pref 
medium exp 7127.1357
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0706] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]:   route ::/64 via :: pref 
medium exp 599.1357
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0706] 
ndisc[0x55cadac8e440,"enx0050b6b7bd60"]:   dns_server ::1 exp 7199.1357
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0707] 
device[0x55cadac7b750] (enx0050b6b7bd60): activation-stage: schedule 
activate_stage5_ip6_config_commit,v6 (id 51370)
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0708] 
device[0x55cadac7b750] (enx0050b6b7bd60): activation-stage: invoke 
activate_stage5_ip6_config_commit,v6 (id 51370)
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0714] 
device[0x55cadac7b750] (enx0050b6b7bd60): ip6-config: update (commit=1, 
new-config=0x55cadacc88d0)
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0716] 
platform: address: adding or updating IPv6 address: /64 lft forever 
pref forever lifetime 105126-0[4294967295,4294967295] dev 4 flags 
permanent,noprefixroute src unknown
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0719] 
platform-linux: do-add-ip6-address[4: ]: success
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0719] 
platform: address: adding or updating IPv6 address: /64 lft 600sec 
pref 600sec lifetime 105126-0[600,600] dev 4 flags mngtmpaddr,noprefixroute src 
unknown
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0722] 
platform: signal: address 6 changed: /64 lft 600sec pref 600sec 
lifetime 105126-105126[600,600] dev 4 flags mngtmpaddr,noprefixroute src kernel
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0722] 
device[0x55cadac7b750] (enx0050b6b7bd60): queued IP6 config change
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0723] 
platform: signal: address 6 changed: :b5c1:cabf:cc35:4873/64 lft 600sec 
pref 600sec lifetime 105126-105126[600,600] dev 4 flags secondary src kernel
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0724] 
platform-linux: do-add-ip6-address[4: ]: success
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  [1564432267.0724] 
platform: address: adding or updating IPv6 address: /64 lft 7128sec 
pref 7128sec lifetime 105126-0[7128,7128] dev 4 flags mngtmpaddr,noprefixroute 
src unknown
Jul 29 21:31:07 bluca-lenovo NetworkManager[625]:  

Bug#850620: [Pkg-utopia-maintainers] Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage

2017-01-25 Thread Maximilian Engelhardt
On Sonntag, 8. Januar 2017 17:34:09 CET Michael Biebl wrote:
> Hi
> 
> Am 08.01.2017 um 16:48 schrieb Maximilian Engelhardt:
> > Package: network-manager
> > Version: 1.4.4-1
> > Severity: important
> > 
> > --- Please enter the report below this line. ---
> > 
> > After updating to network-manger 1.4.4-1 I noticed a lot of breakages in
> > ssh connections.  It turned out this is related to temporary ipv6
> > addresses being deprecated, deleted and newly created at a rapid rate,
> > thus after a short time the address used by my ssh connection vanishes.
> > 
> > Having a closer look with "ip addr show" explained what is going on. My
> > router advertisements have a short lifetime configured. A new router
> > advertisement does only update the lifetime of the mngtmpaddr but not the
> > temporary addresses. This causes them to time out and permanently being
> > deleted and newly created.
> > 
> > Disabling network-manager doesn't show this problem. Also downgrading
> > network- manager to version 1.4.2-3 fixes this issue for me.
> 
> This doesn't look like a downstream specific issue, so it would be great
> if you can file this upstream at
> https://bugzilla.gnome.org/enter_bug.cgi?product=NetworkManager
> 
> You might check if it has already been reported at
> https://bugzilla.gnome.org/page.cgi?id=browse.html=NetworkManager
> 
> Once you have an upstream bug number, please report back so we can mark
> this bug accordingly.
> 
> Regards,
> Michael

I can confirm this is fixed by the upstream patch.

It would be great to get this fixed for stretch. In my test I just had to 
backport the upstream fix.

Thanks,
Maxi

signature.asc
Description: This is a digitally signed message part.


Bug#850620: [Pkg-utopia-maintainers] Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage

2017-01-08 Thread Michael Biebl
Hi


Am 08.01.2017 um 16:48 schrieb Maximilian Engelhardt:
> Package: network-manager
> Version: 1.4.4-1
> Severity: important
> 
> --- Please enter the report below this line. ---
> 
> After updating to network-manger 1.4.4-1 I noticed a lot of breakages in ssh 
> connections.  It turned out this is related to temporary ipv6 addresses being 
> deprecated, deleted and newly created at a rapid rate, thus after a short 
> time 
> the address used by my ssh connection vanishes.
> 
> Having a closer look with "ip addr show" explained what is going on. My 
> router 
> advertisements have a short lifetime configured. A new router advertisement 
> does only update the lifetime of the mngtmpaddr but not the temporary 
> addresses. This causes them to time out and permanently being deleted and 
> newly created.
> 
> Disabling network-manager doesn't show this problem. Also downgrading network-
> manager to version 1.4.2-3 fixes this issue for me.

This doesn't look like a downstream specific issue, so it would be great
if you can file this upstream at
https://bugzilla.gnome.org/enter_bug.cgi?product=NetworkManager

You might check if it has already been reported at
https://bugzilla.gnome.org/page.cgi?id=browse.html=NetworkManager

Once you have an upstream bug number, please report back so we can mark
this bug accordingly.

Regards,
Michael
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Bug#850620: [network-manager] does not update lifetime of temporary ipv6 addresses anymore, resulting in connection breakage

2017-01-08 Thread Maximilian Engelhardt
Package: network-manager
Version: 1.4.4-1
Severity: important

--- Please enter the report below this line. ---

After updating to network-manger 1.4.4-1 I noticed a lot of breakages in ssh 
connections.  It turned out this is related to temporary ipv6 addresses being 
deprecated, deleted and newly created at a rapid rate, thus after a short time 
the address used by my ssh connection vanishes.

Having a closer look with "ip addr show" explained what is going on. My router 
advertisements have a short lifetime configured. A new router advertisement 
does only update the lifetime of the mngtmpaddr but not the temporary 
addresses. This causes them to time out and permanently being deleted and 
newly created.

Disabling network-manager doesn't show this problem. Also downgrading network-
manager to version 1.4.2-3 fixes this issue for me.

This bugs breaks all ipv6 network connections that are active longer than a 
few minutes for me.

Thanks,
Maxi

--- System information. ---
Architecture: 
Kernel:   Linux 4.8.0-2-amd64

Debian Release: stretch/sid
  500 testing httpredir.debian.org 
  500 stable  security.debian.org 

--- Package information. ---
Depends  (Version) | Installed
==-+-=
libaudit1 (>= 1:2.2.1) | 1:2.6.7-1
libbluetooth3(>= 4.91) | 5.43-1
libc6(>= 2.17) | 
libglib2.0-0   (>= 2.43.2) | 
libgnutls30 (>= 3.5.0) | 
libgudev-1.0-0(>= 165) | 
libmm-glib0 (>= 1.0.0) | 
libndp0   (>= 1.2) | 
libnewt0.52| 
libnl-3-200(>= 3.2.21) | 
libnm0  (>= 1.4.0) | 
libpolkit-agent-1-0  (>= 0.99) | 
libpolkit-gobject-1-0   (>= 0.104) | 
libreadline7  (>= 6.0) | 
libselinux1  (>= 1.32) | 
libsoup2.4-1 (>= 2.40) | 
libsystemd0   (>= 209) | 
libteamdctl0  (>= 1.9) | 
libuuid1 (>= 2.16) | 
init-system-helpers (>= 1.18~) | 
lsb-base   (>= 3.2-14) | 
wpasupplicant (>= 0.7.3-1) | 
dbus(>= 1.1.2) | 
udev   | 
adduser| 
libpam-systemd | 
policykit-1| 


Recommends(Version) | Installed
===-+-
ppp | 2.4.7-1+4
dnsmasq-base| 2.76-5
iptables| 1.6.0+snapshot20161117-4
modemmanager| 
crda| 3.13-1+b2
isc-dhcp-client (>= 4.1.1-P1-4) | 4.3.5-1
iputils-arping  | 3:20161105-1


Suggests   (Version) | Installed
-+-===
libteam-utils| 






signature.asc
Description: This is a digitally signed message part.