Package: cfengine3
Version: 3.12.1-2
Severity: normal
Tags: ipv6

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

installed cfengine3 and configured it on a raspberry pi, and also 
configured a client correctly via ipv4. Bootstrap to ipv4 address of 
server worked. Tried to bootstrap a client to the ipv6 address of the 
server but it failed...

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

Tested ipv6 via recommendation online at cfengine site:

https://docs.cfengine.com/docs/3.5/reference-components-cfserver.html

nc -v -6 raspberrypi.lan 5308
nc: connect to raspberrypi.lan port 5308 (tcp) failed: Connection refused
nc: connect to raspberrypi.lan port 5308 (tcp) failed: Connection refused

In wireshark I see that as soon as the syn packet is sent, the server 
sends a RST,ACK packet refusing the connection

   * What outcome did you expect instead?

Connect should have worked, and bootstrapping to the ipv6 address of the 
server should have worked.

note also that the server has this in the inputs/controls/cf_serverd.cf 
file:

      # Bind to all interfaces including ipv6
      # Adding this on windows will force ipv6 only
      bindtointerface => "::";

so it should be binding to ipv6 and 

sysctl: 

net.ipv6.bindv6only = 0

so it should accept ipv4 and ipv6 on this socket.



-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (750, 'testing'), (500, 'unstable'), (500, 'stable'), (102, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.4.0-trunk-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cfengine3 depends on:
ii  e2fsprogs     1.44.4-2
ii  libacl1       2.2.52-3+b1
ii  libc6         2.29-2
ii  liblmdb0      0.9.21-1
ii  libpam0g      1.1.8-3.7
ii  libpcre3      2:8.39-9
ii  libpromises3  3.10.2-4
ii  libssl1.1     1.1.1a-1
ii  libvirt0      4.3.0-1
ii  libxml2       2.9.4+dfsg1-7
ii  lsb-base      9.20170808

Versions of packages cfengine3 recommends:
ii  python  2.7.15-3

cfengine3 suggests no packages.

-- Configuration Files:
/etc/default/cfengine3 changed [not included]

-- no debconf information

Reply via email to