Bastian Blank <[EMAIL PROTECTED]> writes:
> The log shows the following:
> | May 25 10:36:35 kdc1 kadmind[1385]: chpw: Couldn't connect to client: No
> such process
>
> And holds several extra sockets open:
> | # netstat -ulpen
> | Active Internet connections (only servers)
> | Proto Recv-Q Send-Q Local Address Foreign Address State
> User Inode PID/Program name
> | udp 0 0 0.0.0.0:32772 0.0.0.0:*
> 0 3832 1385/kadmind
> | udp 0 0 0.0.0.0:32773 0.0.0.0:*
> 0 3833 1385/kadmind
> | udp 0 0 0.0.0.0:32774 0.0.0.0:*
> 0 3835 1385/kadmind
> | udp 0 0 0.0.0.0:32775 0.0.0.0:*
> 0 3836 1385/kadmind
> | udp 0 0 0.0.0.0:464 0.0.0.0:*
> 0 3719 1385/kadmind
> | udp 0 0 10.42.1.65:88 0.0.0.0:*
> 0 2941 1125/krb5kdc
> | udp6 0 0 fe80::216:3eff:fe4e::88 :::*
> 0 2943 1125/krb5kdc
>
> It seems that it uses the new sockets to do something special which is
> not allowed by my config. But it seems to not send data over it.
Hm, thanks. I'll try to reproduce this. The error message that you're
getting is extremely odd, since it's coming from this code:
if (connect(s2, (struct sockaddr *) &from, sizeof(from)) < 0) {
krb5_klog_syslog(LOG_ERR, "chpw: Couldn't connect to client: %s",
krb5_get_error_message (context, errno));
goto cleanup;
}
The man page for connect doesn't document any circumstance under which it
would return ESRCH, so I'm not sure how to explain this. The error you're
getting is from attempting to do the connect on the UDP socket, not from
actually sending the packet.
Could the other high UDP ports be from outstanding DNS requests?
--
Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
