Hi Lorenz,

On Sun, Aug 10, 2014 at 02:43:32PM +0200, Lorenz Wenner wrote:
> Package: tftpd-hpa
> Version: 5.2+20140608-3
> Severity: normal
> 
> Hello there,
> 
> dont know much detail, but here is my problem:
> 
> i am running tftpd-hpa to hand out ltsp images to thinclients and boot and
> them via PXE. That worked right until before i updated to this version of
> tftp-hpa. i am writing this on the one client that has and booted before
> update. Now when i boot a client it says

Given what you show here, I can only conclude that you'd previously
done something 'tricky' with how you had started tftpd and that
whatever it was, it wasn't preserved during the update.

There's nothing in the new code that would effect this, the only
changes there are related to IPv4/IPv6 remapping.

And this error:

> forbidden directory
> TFTP Error - Access Violation

Is impossible to get if you're actually running with --secure.

> my /etc/default/tftpd-hpa:
> 
> TFTP_USERNAME="tftp"
> TFTP_DIRECTORY="/srv/tftp"
> TFTP_ADDRESS="0.0.0.0:69"
> TFTP_OPTIONS="--secure"
> TFTP_OPTIONS="--verbosity 5"

Which means the above *isn't* the configuration you're using.

And from the code which triggers that error, it can only mean
that you haven't passed it the directory that your system is
requesting at boot, so access to that directory is not allowed.

> permissions are imho correct:
> 
> namei -l /var/lib/tftpboot/ltsp/i386/pxelinux.0
> /srv/tftp/ltsp/i386/pxelinux.0
> f: /var/lib/tftpboot/ltsp/i386/pxelinux.0
> drwxr-xr-x root root /
> drwxr-xr-x root root var
> drwxr-xr-x root root lib
> drwxr-xr-x root root tftpboot
> drwxr-xr-x root root ltsp
> drwxr-xr-x root root i386
> -rw-r--r-- root root pxelinux.0
> f: /srv/tftp/ltsp/i386/pxelinux.0
> drwxr-xr-x root root    /
> drwxr-xr-x root root    srv
> drwxr-xr-x root nogroup tftp
> drwxr-xr-x root root    ltsp
> drwxr-xr-x root root    i386
> -rw-r--r-- root root    pxelinux.0
> 
> wondering why there must be two locations in the Filesystem ...

There is absolutely no reason for there to be unless you have
configured things in a way that you want there to be :)

I think you need to go back to the top here and start from
scratch again.  Either figuring out how you configured it
last time, why you configured it that way, and why that
wasn't preserved when you updated the package -- or just
reverting to the default --secure configuration with the
pxelinux.0 in /srv/tftp and not passing a path.

I can't really guess much more about how you had configured
this previously, but it's clear something about that is the
source of your troubles here now.

  Cheers,
  Ron


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to