Re: NM 1.4.4 and hotspot problem

2018-02-22 Thread Belisko Marek
Hi Dan,

added xt_conntrack and all iptables passed ;). I also fixed dnsmasq
problem. It looks like it conflicts with named
so by disabling named I can successfuly run hotspot. Thanks for all support.

Marek

On Thu, Feb 22, 2018 at 8:13 PM, Belisko Marek  wrote:
> Hi Dan,
>
> On Thu, Feb 22, 2018 at 6:06 PM, Dan Williams  wrote:
>> On Thu, 2018-02-22 at 08:37 +0100, Belisko Marek wrote:
>>> Hi Dan,
>>>
>>> On Wed, Feb 21, 2018 at 11:45 PM, Dan Williams 
>>> wrote:
>>> > On Wed, 2018-02-21 at 22:46 +0100, Belisko Marek wrote:
>>> > > Hi Dan,
>>> > >
>>> > > On Tue, Feb 20, 2018 at 11:53 PM, Dan Williams 
>>> > > wrote:
>>> > > > On Tue, 2018-02-20 at 22:47 +0100, Belisko Marek wrote:
>>> > > > > Hi Dan,
>>> > > > >
>>> > > > > On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams >> > > > > om>
>>> > > > > wrote:
>>> > > > > > On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
>>> > > > > > > Hi,
>>> > > > > > >
>>> > > > > > > I'm trying to configure hotspot by using this command:
>>> > > > > > > nmcli dev wifi hotspot ifname wlan0 ssid test password
>>> > > > > > > "test1234"
>>> > > > > > >
>>> > > > > > > on orangepi which is using realtek wifi (out of tree
>>> > > > > > > driver).
>>> > > > > > > When
>>> > > > > > > want to setup simple hotspot it looks like there are soe
>>> > > > > > > mtroubles
>>> > > > > > > with iptbles + dnsmasq. Any ideas what can cause this
>>> > > > > > > issue?
>>> > > > > > > Thanks
>>> > > > > >
>>> > > > > > Your analysis looks correct.  What happens when you run the
>>> > > > > > iptables
>>> > > > > > command manually?
>>> > > > > >
>>> > > > > > /usr/sbin/iptables --table nat \
>>> > > > > >--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
>>> > > > > >! --destination 10.42.0.0/255.255.255.0 --jump
>>> > > > > > MASQUERADE
>>> > > > > >
>>> > > > > > does /usr/sbin/iptables exist?
>>> > > > > >
>>> > > > > > does your kernel have the ipt_MASQUERADE, iptable_nat,
>>> > > > > > nf_conntrack,
>>> > > > > > iptable_mangle, and other modules like that available?
>>> > > > >
>>> > > > > I've nmcli c up Hotspot
>>> > > >
>>> > > > What does your 'iptables-save' output look like on this
>>> > > > machine?
>>> > >
>>> > > It looks like this:
>>> > >
>>> > >  iptables-save
>>> > > # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
>>> > > *filter
>>> > > :INPUT ACCEPT [61:11807]
>>> > > :FORWARD ACCEPT [0:0]
>>> > > :OUTPUT ACCEPT [42:7785]
>>> > > COMMIT
>>> > > # Completed on Wed Feb 21 21:42:54 2018
>>> > > # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
>>> > > *nat
>>> > > :PREROUTING ACCEPT [0:0]
>>> > > :INPUT ACCEPT [0:0]
>>> > > :OUTPUT ACCEPT [0:0]
>>> > > :POSTROUTING ACCEPT [0:0]
>>> > > COMMIT
>>> > > # Completed on Wed Feb 21 21:42:54 2018
>>> > > root@orange-pi-pc-plus:~# lsmod
>>> > > Module  Size  Used by
>>> > > ipt_REJECT 16384  -2
>>> > > ipt_MASQUERADE 16384  -2
>>> > > xt_tcpudp  16384  -2
>>> > > iptable_filter 16384  -2
>>> > > iptable_nat16384  -2
>>> > > ip_tables  20480  -2
>>> > > x_tables   20480  -2
>>> > > mali  208896  -2
>>> > > 8189fs   1224704  -2
>>> > >
>>> > >
>>> > > I've added more kernel modules (according :
>>> > > https://wiki.gentoo.org/wiki/Iptables#Kernel) and output look
>>> > > much
>>> > > better (unfortunately there are still some problems):
>>> >
>>> > Ok, so the issue with iptables is solved (at least I think?), but
>>> > now
>>> > it's dnsmasq.  There was a problem in Debian a while back, where
>>> > just
>>> > installing dnsmasq set up a configuration that did this, which
>>> > meant
>>> > that NM could not run its own interface-specific dnsmasq.
>>>
>>> Issue with iptables remains (I think last one):
>>> Feb 21 21:39:28 orange-pi-pc-plus user.info NetworkManager[765]:
>>>   [1519249168.1555] Executing: /usr/sbin/iptables --table
>>> filter
>>> --insert FORWARD --destination 10.42.0.0/255.255.255.0 --out-
>>> interface
>>> wlan0 --match state --state ESTA
>>> BLISHED,RELATED --jump ACCEPT
>>> Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
>>>   [1519249168.1786] ** Command returned exit status 1.
>>
>> Ok, for the "--state" extension you need the conntrack kernel module.
> I have already those present:
> CONFIG_NF_CONNTRACK=y
> CONFIG_NF_CONNTRACK_MARK=y
> # CONFIG_NF_CONNTRACK_PROCFS is not set
> # CONFIG_NF_CONNTRACK_EVENTS is not set
> # CONFIG_NF_CONNTRACK_TIMEOUT is not set
> # CONFIG_NF_CONNTRACK_TIMESTAMP is not set
> # CONFIG_NF_CONNTRACK_AMANDA is not set
> CONFIG_NF_CONNTRACK_FTP=y
> CONFIG_NF_CONNTRACK_H323=y
> CONFIG_NF_CONNTRACK_IRC=y
> CONFIG_NF_CONNTRACK_BROADCAST=y
> CONFIG_NF_CONNTRACK_NETBIOS_NS=y
> CONFIG_NF_CONNTRACK_SNMP=y
> CONFIG_NF_CONNTRACK_PPTP=y
> # CONFIG_NF_CONNTRACK_SANE is not set
> CONFIG_NF_CONNTRACK_SIP=y
> CONFIG_NF_CONNTRACK_TFTP=y
> CONFIG_NF_CONNTRACK_IPV4=y
> CONFIG_NF_CONNTRACK_IPV6=y
>
> Thanks.
>
> Marek
>>

Re: NM 1.4.4 and hotspot problem

2018-02-22 Thread Belisko Marek
Hi Dan,

On Thu, Feb 22, 2018 at 6:06 PM, Dan Williams  wrote:
> On Thu, 2018-02-22 at 08:37 +0100, Belisko Marek wrote:
>> Hi Dan,
>>
>> On Wed, Feb 21, 2018 at 11:45 PM, Dan Williams 
>> wrote:
>> > On Wed, 2018-02-21 at 22:46 +0100, Belisko Marek wrote:
>> > > Hi Dan,
>> > >
>> > > On Tue, Feb 20, 2018 at 11:53 PM, Dan Williams 
>> > > wrote:
>> > > > On Tue, 2018-02-20 at 22:47 +0100, Belisko Marek wrote:
>> > > > > Hi Dan,
>> > > > >
>> > > > > On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams > > > > > om>
>> > > > > wrote:
>> > > > > > On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
>> > > > > > > Hi,
>> > > > > > >
>> > > > > > > I'm trying to configure hotspot by using this command:
>> > > > > > > nmcli dev wifi hotspot ifname wlan0 ssid test password
>> > > > > > > "test1234"
>> > > > > > >
>> > > > > > > on orangepi which is using realtek wifi (out of tree
>> > > > > > > driver).
>> > > > > > > When
>> > > > > > > want to setup simple hotspot it looks like there are soe
>> > > > > > > mtroubles
>> > > > > > > with iptbles + dnsmasq. Any ideas what can cause this
>> > > > > > > issue?
>> > > > > > > Thanks
>> > > > > >
>> > > > > > Your analysis looks correct.  What happens when you run the
>> > > > > > iptables
>> > > > > > command manually?
>> > > > > >
>> > > > > > /usr/sbin/iptables --table nat \
>> > > > > >--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
>> > > > > >! --destination 10.42.0.0/255.255.255.0 --jump
>> > > > > > MASQUERADE
>> > > > > >
>> > > > > > does /usr/sbin/iptables exist?
>> > > > > >
>> > > > > > does your kernel have the ipt_MASQUERADE, iptable_nat,
>> > > > > > nf_conntrack,
>> > > > > > iptable_mangle, and other modules like that available?
>> > > > >
>> > > > > I've nmcli c up Hotspot
>> > > >
>> > > > What does your 'iptables-save' output look like on this
>> > > > machine?
>> > >
>> > > It looks like this:
>> > >
>> > >  iptables-save
>> > > # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
>> > > *filter
>> > > :INPUT ACCEPT [61:11807]
>> > > :FORWARD ACCEPT [0:0]
>> > > :OUTPUT ACCEPT [42:7785]
>> > > COMMIT
>> > > # Completed on Wed Feb 21 21:42:54 2018
>> > > # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
>> > > *nat
>> > > :PREROUTING ACCEPT [0:0]
>> > > :INPUT ACCEPT [0:0]
>> > > :OUTPUT ACCEPT [0:0]
>> > > :POSTROUTING ACCEPT [0:0]
>> > > COMMIT
>> > > # Completed on Wed Feb 21 21:42:54 2018
>> > > root@orange-pi-pc-plus:~# lsmod
>> > > Module  Size  Used by
>> > > ipt_REJECT 16384  -2
>> > > ipt_MASQUERADE 16384  -2
>> > > xt_tcpudp  16384  -2
>> > > iptable_filter 16384  -2
>> > > iptable_nat16384  -2
>> > > ip_tables  20480  -2
>> > > x_tables   20480  -2
>> > > mali  208896  -2
>> > > 8189fs   1224704  -2
>> > >
>> > >
>> > > I've added more kernel modules (according :
>> > > https://wiki.gentoo.org/wiki/Iptables#Kernel) and output look
>> > > much
>> > > better (unfortunately there are still some problems):
>> >
>> > Ok, so the issue with iptables is solved (at least I think?), but
>> > now
>> > it's dnsmasq.  There was a problem in Debian a while back, where
>> > just
>> > installing dnsmasq set up a configuration that did this, which
>> > meant
>> > that NM could not run its own interface-specific dnsmasq.
>>
>> Issue with iptables remains (I think last one):
>> Feb 21 21:39:28 orange-pi-pc-plus user.info NetworkManager[765]:
>>   [1519249168.1555] Executing: /usr/sbin/iptables --table
>> filter
>> --insert FORWARD --destination 10.42.0.0/255.255.255.0 --out-
>> interface
>> wlan0 --match state --state ESTA
>> BLISHED,RELATED --jump ACCEPT
>> Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
>>   [1519249168.1786] ** Command returned exit status 1.
>
> Ok, for the "--state" extension you need the conntrack kernel module.
I have already those present:
CONFIG_NF_CONNTRACK=y
CONFIG_NF_CONNTRACK_MARK=y
# CONFIG_NF_CONNTRACK_PROCFS is not set
# CONFIG_NF_CONNTRACK_EVENTS is not set
# CONFIG_NF_CONNTRACK_TIMEOUT is not set
# CONFIG_NF_CONNTRACK_TIMESTAMP is not set
# CONFIG_NF_CONNTRACK_AMANDA is not set
CONFIG_NF_CONNTRACK_FTP=y
CONFIG_NF_CONNTRACK_H323=y
CONFIG_NF_CONNTRACK_IRC=y
CONFIG_NF_CONNTRACK_BROADCAST=y
CONFIG_NF_CONNTRACK_NETBIOS_NS=y
CONFIG_NF_CONNTRACK_SNMP=y
CONFIG_NF_CONNTRACK_PPTP=y
# CONFIG_NF_CONNTRACK_SANE is not set
CONFIG_NF_CONNTRACK_SIP=y
CONFIG_NF_CONNTRACK_TFTP=y
CONFIG_NF_CONNTRACK_IPV4=y
CONFIG_NF_CONNTRACK_IPV6=y

Thanks.

Marek
>
>
>> > This line:
>> >
>> > Feb 21 21:39:28 orange-pi-pc-plus daemon.info NetworkManager[765]:
>> >  dnsmasq: failed to create listening socket for 10.42.0.1: Address
>> >  already in use
>> >  Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
>> >[1519249168.4498] dnsmasq-manager: dnsmasq exited with
>> > error:
>> >  Network access problem (address in use, permissions) (2)
>> >
>> > is likely the cu

Re: NM 1.4.4 and hotspot problem

2018-02-22 Thread Dan Williams
On Thu, 2018-02-22 at 08:37 +0100, Belisko Marek wrote:
> Hi Dan,
> 
> On Wed, Feb 21, 2018 at 11:45 PM, Dan Williams 
> wrote:
> > On Wed, 2018-02-21 at 22:46 +0100, Belisko Marek wrote:
> > > Hi Dan,
> > > 
> > > On Tue, Feb 20, 2018 at 11:53 PM, Dan Williams 
> > > wrote:
> > > > On Tue, 2018-02-20 at 22:47 +0100, Belisko Marek wrote:
> > > > > Hi Dan,
> > > > > 
> > > > > On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams  > > > > om>
> > > > > wrote:
> > > > > > On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
> > > > > > > Hi,
> > > > > > > 
> > > > > > > I'm trying to configure hotspot by using this command:
> > > > > > > nmcli dev wifi hotspot ifname wlan0 ssid test password
> > > > > > > "test1234"
> > > > > > > 
> > > > > > > on orangepi which is using realtek wifi (out of tree
> > > > > > > driver).
> > > > > > > When
> > > > > > > want to setup simple hotspot it looks like there are soe
> > > > > > > mtroubles
> > > > > > > with iptbles + dnsmasq. Any ideas what can cause this
> > > > > > > issue?
> > > > > > > Thanks
> > > > > > 
> > > > > > Your analysis looks correct.  What happens when you run the
> > > > > > iptables
> > > > > > command manually?
> > > > > > 
> > > > > > /usr/sbin/iptables --table nat \
> > > > > >--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
> > > > > >! --destination 10.42.0.0/255.255.255.0 --jump
> > > > > > MASQUERADE
> > > > > > 
> > > > > > does /usr/sbin/iptables exist?
> > > > > > 
> > > > > > does your kernel have the ipt_MASQUERADE, iptable_nat,
> > > > > > nf_conntrack,
> > > > > > iptable_mangle, and other modules like that available?
> > > > > 
> > > > > I've nmcli c up Hotspot
> > > > 
> > > > What does your 'iptables-save' output look like on this
> > > > machine?
> > > 
> > > It looks like this:
> > > 
> > >  iptables-save
> > > # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
> > > *filter
> > > :INPUT ACCEPT [61:11807]
> > > :FORWARD ACCEPT [0:0]
> > > :OUTPUT ACCEPT [42:7785]
> > > COMMIT
> > > # Completed on Wed Feb 21 21:42:54 2018
> > > # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
> > > *nat
> > > :PREROUTING ACCEPT [0:0]
> > > :INPUT ACCEPT [0:0]
> > > :OUTPUT ACCEPT [0:0]
> > > :POSTROUTING ACCEPT [0:0]
> > > COMMIT
> > > # Completed on Wed Feb 21 21:42:54 2018
> > > root@orange-pi-pc-plus:~# lsmod
> > > Module  Size  Used by
> > > ipt_REJECT 16384  -2
> > > ipt_MASQUERADE 16384  -2
> > > xt_tcpudp  16384  -2
> > > iptable_filter 16384  -2
> > > iptable_nat16384  -2
> > > ip_tables  20480  -2
> > > x_tables   20480  -2
> > > mali  208896  -2
> > > 8189fs   1224704  -2
> > > 
> > > 
> > > I've added more kernel modules (according :
> > > https://wiki.gentoo.org/wiki/Iptables#Kernel) and output look
> > > much
> > > better (unfortunately there are still some problems):
> > 
> > Ok, so the issue with iptables is solved (at least I think?), but
> > now
> > it's dnsmasq.  There was a problem in Debian a while back, where
> > just
> > installing dnsmasq set up a configuration that did this, which
> > meant
> > that NM could not run its own interface-specific dnsmasq.
> 
> Issue with iptables remains (I think last one):
> Feb 21 21:39:28 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249168.1555] Executing: /usr/sbin/iptables --table
> filter
> --insert FORWARD --destination 10.42.0.0/255.255.255.0 --out-
> interface
> wlan0 --match state --state ESTA
> BLISHED,RELATED --jump ACCEPT
> Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
>   [1519249168.1786] ** Command returned exit status 1.

Ok, for the "--state" extension you need the conntrack kernel module.


> > This line:
> > 
> > Feb 21 21:39:28 orange-pi-pc-plus daemon.info NetworkManager[765]:
> >  dnsmasq: failed to create listening socket for 10.42.0.1: Address
> >  already in use
> >  Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
> >[1519249168.4498] dnsmasq-manager: dnsmasq exited with
> > error:
> >  Network access problem (address in use, permissions) (2)
> > 
> > is likely the current problem.  Do you have an existing dnsmasq
> > process
> > running and what is the contents of /etc/dnsmasq.conf?  If it has
> > the
> > "bind-interfaces" option enabled, that could be causing this issue.
> 
> AFAIK dnsmasq is not running due to this:
> Feb 20 21:40:11 orange-pi-pc-plus systemd[1]: Starting DNS forwarder

Ok, lets make get the iptables stuff figured out, and then see about
dnsmasq.  But what do you get for "ps ax | grep dnsmasq" when you see
the NM failure?

Dan


> > > and DHCP server...
> > > Feb 20 21:40:11 orange-pi-pc-plus dnsmasq[290]: dnsmasq: syntax
> > > check
> > > OK.
> > > Feb 20 21:40:11 orange-pi-pc-plus dnsmasq[293]: dnsmasq:
> > > directory
> > > /etc/resolv.conf for resolv-file is missing, cannot poll
> > > Feb 20 21:40:11 orange-pi-pc-plus systemd[1]:
> > > [

Re: NM 1.4.4 and hotspot problem

2018-02-21 Thread Belisko Marek
Hi Dan,

On Wed, Feb 21, 2018 at 11:45 PM, Dan Williams  wrote:
> On Wed, 2018-02-21 at 22:46 +0100, Belisko Marek wrote:
>> Hi Dan,
>>
>> On Tue, Feb 20, 2018 at 11:53 PM, Dan Williams 
>> wrote:
>> > On Tue, 2018-02-20 at 22:47 +0100, Belisko Marek wrote:
>> > > Hi Dan,
>> > >
>> > > On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams 
>> > > wrote:
>> > > > On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
>> > > > > Hi,
>> > > > >
>> > > > > I'm trying to configure hotspot by using this command:
>> > > > > nmcli dev wifi hotspot ifname wlan0 ssid test password
>> > > > > "test1234"
>> > > > >
>> > > > > on orangepi which is using realtek wifi (out of tree driver).
>> > > > > When
>> > > > > want to setup simple hotspot it looks like there are soe
>> > > > > mtroubles
>> > > > > with iptbles + dnsmasq. Any ideas what can cause this issue?
>> > > > > Thanks
>> > > >
>> > > > Your analysis looks correct.  What happens when you run the
>> > > > iptables
>> > > > command manually?
>> > > >
>> > > > /usr/sbin/iptables --table nat \
>> > > >--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
>> > > >! --destination 10.42.0.0/255.255.255.0 --jump MASQUERADE
>> > > >
>> > > > does /usr/sbin/iptables exist?
>> > > >
>> > > > does your kernel have the ipt_MASQUERADE, iptable_nat,
>> > > > nf_conntrack,
>> > > > iptable_mangle, and other modules like that available?
>> > >
>> > > I've nmcli c up Hotspot
>> >
>> > What does your 'iptables-save' output look like on this machine?
>>
>> It looks like this:
>>
>>  iptables-save
>> # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
>> *filter
>> :INPUT ACCEPT [61:11807]
>> :FORWARD ACCEPT [0:0]
>> :OUTPUT ACCEPT [42:7785]
>> COMMIT
>> # Completed on Wed Feb 21 21:42:54 2018
>> # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
>> *nat
>> :PREROUTING ACCEPT [0:0]
>> :INPUT ACCEPT [0:0]
>> :OUTPUT ACCEPT [0:0]
>> :POSTROUTING ACCEPT [0:0]
>> COMMIT
>> # Completed on Wed Feb 21 21:42:54 2018
>> root@orange-pi-pc-plus:~# lsmod
>> Module  Size  Used by
>> ipt_REJECT 16384  -2
>> ipt_MASQUERADE 16384  -2
>> xt_tcpudp  16384  -2
>> iptable_filter 16384  -2
>> iptable_nat16384  -2
>> ip_tables  20480  -2
>> x_tables   20480  -2
>> mali  208896  -2
>> 8189fs   1224704  -2
>>
>>
>> I've added more kernel modules (according :
>> https://wiki.gentoo.org/wiki/Iptables#Kernel) and output look much
>> better (unfortunately there are still some problems):
>
> Ok, so the issue with iptables is solved (at least I think?), but now
> it's dnsmasq.  There was a problem in Debian a while back, where just
> installing dnsmasq set up a configuration that did this, which meant
> that NM could not run its own interface-specific dnsmasq.

Issue with iptables remains (I think last one):
Feb 21 21:39:28 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249168.1555] Executing: /usr/sbin/iptables --table filter
--insert FORWARD --destination 10.42.0.0/255.255.255.0 --out-interface
wlan0 --match state --state ESTA
BLISHED,RELATED --jump ACCEPT
Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
  [1519249168.1786] ** Command returned exit status 1.

>
> This line:
>
> Feb 21 21:39:28 orange-pi-pc-plus daemon.info NetworkManager[765]:
>  dnsmasq: failed to create listening socket for 10.42.0.1: Address
>  already in use
>  Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
>[1519249168.4498] dnsmasq-manager: dnsmasq exited with error:
>  Network access problem (address in use, permissions) (2)
>
> is likely the current problem.  Do you have an existing dnsmasq process
> running and what is the contents of /etc/dnsmasq.conf?  If it has the
> "bind-interfaces" option enabled, that could be causing this issue.

AFAIK dnsmasq is not running due to this:
Feb 20 21:40:11 orange-pi-pc-plus systemd[1]: Starting DNS forwarder
>> and DHCP server...
>> Feb 20 21:40:11 orange-pi-pc-plus dnsmasq[290]: dnsmasq: syntax check
>> OK.
>> Feb 20 21:40:11 orange-pi-pc-plus dnsmasq[293]: dnsmasq: directory
>> /etc/resolv.conf for resolv-file is missing, cannot poll
>> Feb 20 21:40:11 orange-pi-pc-plus systemd[1]:
>> [[0;1;39mdnsmasq.service: Control process exited, code=exited
>> status=5[[0m
>> Feb 20 21:40:11 orange-pi-pc-plus systemd[1]: [[0;1;31mFailed to
>> start

Need to investigate further. I'm using yocto build system to build NM.
Need to check dnsmasq.conf.
Any idea why lats call to iptables fails?  Maybe still some kernel
module missing? Thanks.

Marek

>
> Dan
>
>> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>>   [1519249167.7576] device (wlan0): Activation: (wifi)
>> connection 'Hotspot' has security, and secrets exist.  No new secrets
>> needed.
>> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>>   [1519249167.7579] Config: added 'ssid' value 'test'
>> Feb 21 21:39:27 orange-pi-

Re: NM 1.4.4 and hotspot problem

2018-02-21 Thread Dan Williams
On Wed, 2018-02-21 at 22:46 +0100, Belisko Marek wrote:
> Hi Dan,
> 
> On Tue, Feb 20, 2018 at 11:53 PM, Dan Williams 
> wrote:
> > On Tue, 2018-02-20 at 22:47 +0100, Belisko Marek wrote:
> > > Hi Dan,
> > > 
> > > On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams 
> > > wrote:
> > > > On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
> > > > > Hi,
> > > > > 
> > > > > I'm trying to configure hotspot by using this command:
> > > > > nmcli dev wifi hotspot ifname wlan0 ssid test password
> > > > > "test1234"
> > > > > 
> > > > > on orangepi which is using realtek wifi (out of tree driver).
> > > > > When
> > > > > want to setup simple hotspot it looks like there are soe
> > > > > mtroubles
> > > > > with iptbles + dnsmasq. Any ideas what can cause this issue?
> > > > > Thanks
> > > > 
> > > > Your analysis looks correct.  What happens when you run the
> > > > iptables
> > > > command manually?
> > > > 
> > > > /usr/sbin/iptables --table nat \
> > > >--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
> > > >! --destination 10.42.0.0/255.255.255.0 --jump MASQUERADE
> > > > 
> > > > does /usr/sbin/iptables exist?
> > > > 
> > > > does your kernel have the ipt_MASQUERADE, iptable_nat,
> > > > nf_conntrack,
> > > > iptable_mangle, and other modules like that available?
> > > 
> > > I've nmcli c up Hotspot
> > 
> > What does your 'iptables-save' output look like on this machine?
> 
> It looks like this:
> 
>  iptables-save
> # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
> *filter
> :INPUT ACCEPT [61:11807]
> :FORWARD ACCEPT [0:0]
> :OUTPUT ACCEPT [42:7785]
> COMMIT
> # Completed on Wed Feb 21 21:42:54 2018
> # Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
> *nat
> :PREROUTING ACCEPT [0:0]
> :INPUT ACCEPT [0:0]
> :OUTPUT ACCEPT [0:0]
> :POSTROUTING ACCEPT [0:0]
> COMMIT
> # Completed on Wed Feb 21 21:42:54 2018
> root@orange-pi-pc-plus:~# lsmod
> Module  Size  Used by
> ipt_REJECT 16384  -2
> ipt_MASQUERADE 16384  -2
> xt_tcpudp  16384  -2
> iptable_filter 16384  -2
> iptable_nat16384  -2
> ip_tables  20480  -2
> x_tables   20480  -2
> mali  208896  -2
> 8189fs   1224704  -2
> 
> 
> I've added more kernel modules (according :
> https://wiki.gentoo.org/wiki/Iptables#Kernel) and output look much
> better (unfortunately there are still some problems):

Ok, so the issue with iptables is solved (at least I think?), but now
it's dnsmasq.  There was a problem in Debian a while back, where just
installing dnsmasq set up a configuration that did this, which meant
that NM could not run its own interface-specific dnsmasq.

This line:

Feb 21 21:39:28 orange-pi-pc-plus daemon.info NetworkManager[765]:
 dnsmasq: failed to create listening socket for 10.42.0.1: Address
 already in use
 Feb 21 21:39:28 orange-pi-pc-plus user.warn NetworkManager[765]:
   [1519249168.4498] dnsmasq-manager: dnsmasq exited with error:
 Network access problem (address in use, permissions) (2)

is likely the current problem.  Do you have an existing dnsmasq process
running and what is the contents of /etc/dnsmasq.conf?  If it has the
"bind-interfaces" option enabled, that could be causing this issue.

Dan

> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7576] device (wlan0): Activation: (wifi)
> connection 'Hotspot' has security, and secrets exist.  No new secrets
> needed.
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7579] Config: added 'ssid' value 'test'
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7580] Config: added 'mode' value '2'
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7581] Config: added 'frequency' value '2412'
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7583] Config: added 'key_mgmt' value 'WPA-PSK'
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7584] Config: added 'psk' value ''
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7585] Config: added 'proto' value 'RSN'
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7586] Config: added 'pairwise' value 'CCMP'
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7587] Config: added 'group' value 'CCMP'
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.7688] sup-iface[0x25a1f8,wlan0]: config: set
> interface ap_scan to 2
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.9895] device (wlan0): supplicant interface state:
> disconnected -> completed
> Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
>   [1519249167.9897] device (wlan0): Activation: (wifi) Stage 2
> of 5 (Device Configure) successful.  Started Wi-Fi Hotspot 'test

Re: NM 1.4.4 and hotspot problem

2018-02-21 Thread Belisko Marek
Hi Dan,

On Tue, Feb 20, 2018 at 11:53 PM, Dan Williams  wrote:
> On Tue, 2018-02-20 at 22:47 +0100, Belisko Marek wrote:
>> Hi Dan,
>>
>> On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams 
>> wrote:
>> > On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
>> > > Hi,
>> > >
>> > > I'm trying to configure hotspot by using this command:
>> > > nmcli dev wifi hotspot ifname wlan0 ssid test password "test1234"
>> > >
>> > > on orangepi which is using realtek wifi (out of tree driver).
>> > > When
>> > > want to setup simple hotspot it looks like there are soe
>> > > mtroubles
>> > > with iptbles + dnsmasq. Any ideas what can cause this issue?
>> > > Thanks
>> >
>> > Your analysis looks correct.  What happens when you run the
>> > iptables
>> > command manually?
>> >
>> > /usr/sbin/iptables --table nat \
>> >--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
>> >! --destination 10.42.0.0/255.255.255.0 --jump MASQUERADE
>> >
>> > does /usr/sbin/iptables exist?
>> >
>> > does your kernel have the ipt_MASQUERADE, iptable_nat,
>> > nf_conntrack,
>> > iptable_mangle, and other modules like that available?
>>
>> I've nmcli c up Hotspot
>
> What does your 'iptables-save' output look like on this machine?
It looks like this:

 iptables-save
# Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
*filter
:INPUT ACCEPT [61:11807]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [42:7785]
COMMIT
# Completed on Wed Feb 21 21:42:54 2018
# Generated by iptables-save v1.6.1 on Wed Feb 21 21:42:54 2018
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed on Wed Feb 21 21:42:54 2018
root@orange-pi-pc-plus:~# lsmod
Module  Size  Used by
ipt_REJECT 16384  -2
ipt_MASQUERADE 16384  -2
xt_tcpudp  16384  -2
iptable_filter 16384  -2
iptable_nat16384  -2
ip_tables  20480  -2
x_tables   20480  -2
mali  208896  -2
8189fs   1224704  -2


I've added more kernel modules (according :
https://wiki.gentoo.org/wiki/Iptables#Kernel) and output look much
better (unfortunately there are still some problems):

Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7576] device (wlan0): Activation: (wifi)
connection 'Hotspot' has security, and secrets exist.  No new secrets
needed.
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7579] Config: added 'ssid' value 'test'
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7580] Config: added 'mode' value '2'
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7581] Config: added 'frequency' value '2412'
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7583] Config: added 'key_mgmt' value 'WPA-PSK'
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7584] Config: added 'psk' value ''
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7585] Config: added 'proto' value 'RSN'
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7586] Config: added 'pairwise' value 'CCMP'
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7587] Config: added 'group' value 'CCMP'
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.7688] sup-iface[0x25a1f8,wlan0]: config: set
interface ap_scan to 2
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.9895] device (wlan0): supplicant interface state:
disconnected -> completed
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.9897] device (wlan0): Activation: (wifi) Stage 2
of 5 (Device Configure) successful.  Started Wi-Fi Hotspot 'test'.
Feb 21 21:39:27 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249167.9902] device (wlan0): state change: config ->
ip-config (reason 'none') [50 70 0]
Error: Connection activation failed.
IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
root@orange-pi-pc-plus:~# Feb 21 21:39:28 orange-pi-pc-plus user.info
NetworkManager[765]:   [1519249168.0696] Executing:
/usr/sbin/iptables --table filter --insert INPUT --in-interface wlan0
--protocol tcp --destination-port 53 --ju
mp ACCEPT
Feb 21 21:39:28 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249168.0801] Executing: /usr/sbin/iptables --table filter
--insert INPUT --in-interface wlan0 --protocol udp --destination-port
53 --jump ACCEPT
Feb 21 21:39:28 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249168.0912] Executing: /usr/sbin/iptables --table filter
--insert INPUT --in-interface wlan0 --protocol tcp --destination-port
67 --jump ACCEPT
Feb 21 21:39:28 orange-pi-pc-plus user.info NetworkManager[765]:
  [1519249168.1018] Executing: /usr/sbin/iptables --table filter
--insert INPUT --in-interface wlan0 -

Re: NM 1.4.4 and hotspot problem

2018-02-20 Thread Dan Williams
On Tue, 2018-02-20 at 22:47 +0100, Belisko Marek wrote:
> Hi Dan,
> 
> On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams 
> wrote:
> > On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
> > > Hi,
> > > 
> > > I'm trying to configure hotspot by using this command:
> > > nmcli dev wifi hotspot ifname wlan0 ssid test password "test1234"
> > > 
> > > on orangepi which is using realtek wifi (out of tree driver).
> > > When
> > > want to setup simple hotspot it looks like there are soe
> > > mtroubles
> > > with iptbles + dnsmasq. Any ideas what can cause this issue?
> > > Thanks
> > 
> > Your analysis looks correct.  What happens when you run the
> > iptables
> > command manually?
> > 
> > /usr/sbin/iptables --table nat \
> >--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
> >! --destination 10.42.0.0/255.255.255.0 --jump MASQUERADE
> > 
> > does /usr/sbin/iptables exist?
> > 
> > does your kernel have the ipt_MASQUERADE, iptable_nat,
> > nf_conntrack,
> > iptable_mangle, and other modules like that available?
> 
> I've nmcli c up Hotspot

What does your 'iptables-save' output look like on this machine?

Dan


> IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9165] device (wlan0): Activation: starting
> connection 'Hotspot' (13e514a4-5c21-43ec-9658-d2d80738bac7)
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9187] audit: op="connection-activate"
> uuid="13e514a4-5c21-43ec-9658-d2d80738bac7" name="Hotspot" pid=985
> uid=0 result="success"
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9207] device (wlan0): state change: disconnected
> -> prepare (reason 'none') [30 40 0]
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9230] manager: NetworkManager state is now
> CONNECTING
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9439] device (wlan0): set-hw-addr: set-cloned MAC
> address to 12:81:76:EA:FC:D0 (permanent)
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9810] device (wlan0): state change: prepare ->
> config (reason 'none') [40 50 0]
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9840] device (wlan0): Activation: (wifi) access
> point 'Hotspot' has security, but secrets are required.
> Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162862.9856] device (wlan0): state change: config ->
> need-auth (reason 'none') [50 60 0]
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0233] device (wlan0): state change: need-auth ->
> prepare (reason 'none') [60 40 0]
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0343] device (wlan0): state change: prepare ->
> config (reason 'none') [40 50 0]
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0372] device (wlan0): Activation: (wifi)
> connection 'Hotspot' has security, and secrets exist.  No new secrets
> needed.
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0376] Config: added 'ssid' value 'test'
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0377] Config: added 'mode' value '2'
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0378] Config: added 'frequency' value '2412'
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0379] Config: added 'key_mgmt' value 'WPA-PSK'
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0379] Config: added 'psk' value ''
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0380] Config: added 'proto' value 'RSN'
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0381] Config: added 'pairwise' value 'CCMP'
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0382] Config: added 'group' value 'CCMP'
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.0543] sup-iface[0x25ecd0,wlan0]: config: set
> interface ap_scan to 2
> IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.8770] device (wlan0): supplicant interface state:
> disconnected -> completed
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.8772] device (wlan0): Activation: (wifi) Stage 2
> of 5 (Device Configure) successful.  Started Wi-Fi Hotspot 'test'.
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.8777] device (wlan0): state change: config ->
> ip-config (reason 'none') [50 70 0]
> Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
>   [1519162863.9579] Executing: /usr/sbin/iptables --t

Re: NM 1.4.4 and hotspot problem

2018-02-20 Thread Belisko Marek
Hi Dan,

On Tue, Feb 20, 2018 at 10:11 PM, Dan Williams  wrote:
> On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
>> Hi,
>>
>> I'm trying to configure hotspot by using this command:
>> nmcli dev wifi hotspot ifname wlan0 ssid test password "test1234"
>>
>> on orangepi which is using realtek wifi (out of tree driver). When
>> want to setup simple hotspot it looks like there are soe mtroubles
>> with iptbles + dnsmasq. Any ideas what can cause this issue? Thanks
>
> Your analysis looks correct.  What happens when you run the iptables
> command manually?
>
> /usr/sbin/iptables --table nat \
>--insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
>! --destination 10.42.0.0/255.255.255.0 --jump MASQUERADE
>
> does /usr/sbin/iptables exist?
>
> does your kernel have the ipt_MASQUERADE, iptable_nat, nf_conntrack,
> iptable_mangle, and other modules like that available?
I've nmcli c up Hotspot
IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9165] device (wlan0): Activation: starting
connection 'Hotspot' (13e514a4-5c21-43ec-9658-d2d80738bac7)
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9187] audit: op="connection-activate"
uuid="13e514a4-5c21-43ec-9658-d2d80738bac7" name="Hotspot" pid=985
uid=0 result="success"
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9207] device (wlan0): state change: disconnected
-> prepare (reason 'none') [30 40 0]
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9230] manager: NetworkManager state is now
CONNECTING
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9439] device (wlan0): set-hw-addr: set-cloned MAC
address to 12:81:76:EA:FC:D0 (permanent)
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9810] device (wlan0): state change: prepare ->
config (reason 'none') [40 50 0]
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9840] device (wlan0): Activation: (wifi) access
point 'Hotspot' has security, but secrets are required.
Feb 20 21:41:02 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162862.9856] device (wlan0): state change: config ->
need-auth (reason 'none') [50 60 0]
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0233] device (wlan0): state change: need-auth ->
prepare (reason 'none') [60 40 0]
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0343] device (wlan0): state change: prepare ->
config (reason 'none') [40 50 0]
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0372] device (wlan0): Activation: (wifi)
connection 'Hotspot' has security, and secrets exist.  No new secrets
needed.
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0376] Config: added 'ssid' value 'test'
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0377] Config: added 'mode' value '2'
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0378] Config: added 'frequency' value '2412'
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0379] Config: added 'key_mgmt' value 'WPA-PSK'
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0379] Config: added 'psk' value ''
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0380] Config: added 'proto' value 'RSN'
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0381] Config: added 'pairwise' value 'CCMP'
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0382] Config: added 'group' value 'CCMP'
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.0543] sup-iface[0x25ecd0,wlan0]: config: set
interface ap_scan to 2
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.8770] device (wlan0): supplicant interface state:
disconnected -> completed
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.8772] device (wlan0): Activation: (wifi) Stage 2
of 5 (Device Configure) successful.  Started Wi-Fi Hotspot 'test'.
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.8777] device (wlan0): state change: config ->
ip-config (reason 'none') [50 70 0]
Feb 20 21:41:03 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162863.9579] Executing: /usr/sbin/iptables --table filter
--insert INPUT --in-interface wlan0 --protocol tcp --destination-port
53 --jump ACCEPT
Feb 20 21:41:04 orange-pi-pc-plus user.info NetworkManager[264]:
  [1519162864.1881] Executing: /usr/sbin/iptables --table filter
--insert INPUT --in-interface wlan0 --protocol udp --destination-port
53 --jump ACCEPT
Feb 20 21:41:04 orange-pi-pc-plus user.inf

Re: NM 1.4.4 and hotspot problem

2018-02-20 Thread Dan Williams
On Tue, 2018-02-20 at 21:00 +0100, Belisko Marek wrote:
> Hi,
> 
> I'm trying to configure hotspot by using this command:
> nmcli dev wifi hotspot ifname wlan0 ssid test password "test1234"
> 
> on orangepi which is using realtek wifi (out of tree driver). When
> want to setup simple hotspot it looks like there are soe mtroubles
> with iptbles + dnsmasq. Any ideas what can cause this issue? Thanks

Your analysis looks correct.  What happens when you run the iptables
command manually?

/usr/sbin/iptables --table nat \
   --insert POSTROUTING --source 10.42.0.0/255.255.255.0 \
   ! --destination 10.42.0.0/255.255.255.0 --jump MASQUERADE

does /usr/sbin/iptables exist?

does your kernel have the ipt_MASQUERADE, iptable_nat, nf_conntrack,
iptable_mangle, and other modules like that available?

Dan

> Log:
> IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.3228] keyfile: add connection in-memory
> (13e514a4-5c21-43ec-9658-d2d80738bac7,"Hotspot")
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.3308] device (wlan0): Activation: starting
> connection 'Hotspot' (13e514a4-5c21-43ec-9658-d2d80738bac7)
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.3343] keyfile: update
> /etc/NetworkManager/system-connections/Hotspot
> (13e514a4-5c21-43ec-9658-d2d80738bac7,"Hotspot") and persist
> connection
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.3351] audit: op="connection-add-activate"
> uuid="13e514a4-5c21-43ec-9658-d2d80738bac7" name="Hotspot" pid=1384
> uid=0 result="success"
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.3416] device (wlan0): state change: disconnected
> -> prepare (reason 'none') [30 40 0]
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.3426] manager: NetworkManager state is now
> CONNECTING
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.3726] device (wlan0): set-hw-addr: set-cloned MAC
> address to 12:81:76:EA:FC:D0 (permanent)
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4096] device (wlan0): state change: prepare ->
> config (reason 'none') [40 50 0]
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4111] device (wlan0): Activation: (wifi) access
> point 'Hotspot' has security, but secrets are required.
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4113] device (wlan0): state change: config ->
> need-auth (reason 'none') [50 60 0]
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4386] device (wlan0): supplicant interface state:
> inactive -> disconnected
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4392] device (wlan0): supplicant interface state:
> disconnected -> inactive
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4666] device (wlan0): state change: need-auth ->
> prepare (reason 'none') [60 40 0]
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4746] device (wlan0): state change: prepare ->
> config (reason 'none') [40 50 0]
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4759] device (wlan0): Activation: (wifi)
> connection 'Hotspot' has security, and secrets exist.  No new secrets
> needed.
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4763] Config: added 'ssid' value 'test'
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4765] Config: added 'mode' value '2'
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4766] Config: added 'frequency' value '2412'
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4767] Config: added 'key_mgmt' value 'WPA-PSK'
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4768] Config: added 'psk' value ''
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4769] Config: added 'proto' value 'RSN'
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4770] Config: added 'pairwise' value 'CCMP'
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4771] Config: added 'group' value 'CCMP'
> Feb 20 19:55:47 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156547.4983] sup-iface[0x259368,wlan0]: config: set
> interface ap_scan to 2
> IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
> Feb 20 19:55:48 orange-pi-pc-plus user.info NetworkManager[1375]:
>   [1519156548.3471] device (wlan0): supplicant interface state:
> inactive -> completed
> Feb 20 19:55:48 orange-pi-pc-plus user.info NetworkManager[1375]: