Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#742272: ITP: ocserv -- OpenConnect VPN Server

424 views
Skip to first unread message

Aron Xu

unread,
Jan 24, 2015, 6:10:02 AM1/24/15
to
On Tue, 25 Mar 2014 10:20:21 -0400 Mike Miller <mtmi...@debian.org> wrote:
> On Mon, Mar 24, 2014 at 13:42:21 +0800, Liang Guo wrote:
> > I'm glad that you have worked on it, would you like upload your
> > ocserv package and close this bug?
> >
> > I compiled it from source and it works in Debian, but have not
> > packaging it yet.
>
> I do have a start, but not fully suitable for uploading to the archive
> yet (not lintian clean, copyright needs work, clean up default
> configuration for a fresh install).
>
> You can certainly grab what I have so far, I just updated to the 0.3.2 version:
> http://people.debian.org/~mtmiller/ocserv_0.3.2-1~local1.dsc
>
> I just noticed a segfault while quickly testing this latest version,
> I'll have to look into that.
>
> It's up to you, since you have the ITP if you want feel free to take
> my work and finish and upload it. But I'm certainly willing to finish
> it as well if you'd rather I finish what I started :)
>

I've continued the work on alioth, updated it to latest release,
cleared copyright stuff, and make it almost ready. Do you want to have
a look at it, or shall I upload directly?


Cheers,
Aron


--
To UNSUBSCRIBE, email to debian-bugs-...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Mike Miller

unread,
Jan 24, 2015, 12:10:02 PM1/24/15
to
On Sat, Jan 24, 2015 at 19:06:12 +0800, Aron Xu wrote:
> I've continued the work on alioth, updated it to latest release,
> cleared copyright stuff, and make it almost ready. Do you want to have
> a look at it, or shall I upload directly?

Thanks for working on ocserv, Aron. I have not had the need or time to
work on it as much as I previously thought. Please do feel free to set
yourself as maintainer of the package, as far as I'm concerned. You can
leave me as an additional uploader if you like.

I have been able to build and install your package. I got it to start
and respond to connections using your LIBSYSTEMD_DAEMON patch [1] that
is not yet in the collab-maint repo. I am using the ocserv.conf.sample
file without any changes.

I still crash the server, seemingly on every other login:

● ocserv.service - OpenConnect SSL VPN server
Loaded: loaded (/lib/systemd/system/ocserv.service; disabled)
Active: inactive (dead) since Sat 2015-01-24 11:44:23 EST; 3min 18s ago
Docs: man:ocserv(8)
Process: 7567 ExecStart=/usr/sbin/ocserv --foreground --pid-file /var/run/ocserv.pid --config /etc/ocserv/ocserv.conf (code=exited, status=0/SUCCESS)
Main PID: 7567 (code=exited, status=0/SUCCESS)

Jan 24 11:44:08 xps14z ocserv[7568]: PAM-auth conv: echo-off, sent: 0
Jan 24 11:44:11 xps14z ocserv[7568]: pam_ecryptfs: pam_sm_authenticate: /home/mike is already mounted
Jan 24 11:44:11 xps14z ocserv[7567]: main: [::ffff:127.0.0.1]:45262 main-misc.c:501: command socket closed
Jan 24 11:44:22 xps14z ocserv[7567]: *** Error in `/usr/sbin/ocserv': malloc(): smallbin double linked list corrupted: 0x00007fb0ed1cfc70 ***
Jan 24 11:44:22 xps14z ocserv[7567]: main: main.c:464: ocserv-secmod died unexpectedly
Jan 24 11:44:22 xps14z ocserv[7577]: common.c:385: recvmsg returned zero
Jan 24 11:44:22 xps14z ocserv[7567]: main: main.c:489: Child 7568 died with signal 6
Jan 24 11:44:22 xps14z ocserv[7577]: worker[mike]: [::ffff:127.0.0.1]:45263 worker-auth.c:679: error receiving auth reply message
Jan 24 11:44:22 xps14z ocserv[7567]: main: termination request received; waiting for children to die
Jan 24 11:44:22 xps14z ocserv[7577]: worker[mike]: [::ffff:127.0.0.1]:45263 worker-auth.c:1230: failed authentication for 'mike'

I believe this is the same crash I have been seeing for a while now, I
just haven't gotten around to figuring out what it is about my setup and
report upstream.

[1] http://git.infradead.org/ocserv.git/commitdiff/d4b6d97697884b0e018d9445c4c8614595ebdeeb

--
mike
signature.asc

Mike Miller

unread,
Jan 28, 2015, 9:00:03 AM1/28/15
to
On Sat, Jan 24, 2015 at 12:02:42 -0500, Mike Miller wrote:
> I still crash the server, seemingly on every other login:

And just to clarify, I don't think a crash on my particular setup should
necessarily hold up releasing the package whenever you feel like it is
ready for upload :)

--
mike
0 new messages