Bug#715440: [Pkg-ipsec-tools-devel] Bug#715440: ipsec-tools-0.8.0: Mobile Clients Phase 1 Negotiation timeout during NAT-T
d51be6ef fbd85c17#0120714 9ea14260 5185c05f 80a3b5a7 b0e4aad4 14ac 043081a4 310b3009#01206035504 06130244 45311b30 19060355 04081312 42616465 6e2d5775 65727474#012656d6265 72673113 30110603 55040713 0a486569 64656e68 65696d31 21301f06#0120355040a 0c185765 72626561 67656e74 75722048 c3bc7065 7220476d 6248310c#012300a0603 55040b13 03454456 31153013 06035504 03130c68 75657065 722e6465#01220434131 1b301906 092a8648 86f70d01 0901160c 63614068 75657065 722e6465#0121418 a65ec448 cd64cb06 51babce2 c315cecc f8c5eadf 0018 1ec86d9a#0122429383a ab4ba1cf 3b837a73 cc7a3236 Dec 12 08:42:16 dieder racoon: DEBUG: resend phase1 packet d31de13bfdd30a3d:0bc65d88361c3747 Dec 12 08:42:26 dieder racoon: DEBUG: 400 bytes from XX.XX.XX.140[500] to 109.42.3.94[40989] Dec 12 08:42:26 dieder racoon: DEBUG: sockname XX.XX.XX.140[500] Dec 12 08:42:26 dieder racoon: DEBUG: send packet from XX.XX.XX.140[500] Dec 12 08:42:26 dieder racoon: DEBUG: send packet to 109.42.3.94[40989] Dec 12 08:42:26 dieder racoon: DEBUG: src4 XX.XX.XX.140[500] Dec 12 08:42:26 dieder racoon: DEBUG: dst4 109.42.3.94[40989] Dec 12 08:42:26 dieder racoon: DEBUG: 1 times of 400 bytes message will be sent to 109.42.3.94[40989] Dec 12 08:42:26 dieder racoon: DEBUG: #012d31de13b fdd30a3d 0bc65d88 361c3747 04100200 0190 0a84#0123f87485c 4e9cc109 60765c47 8462fedd 987ea7a7 9a7962af ccbbeecf fa6d5f0f#012bae3083c 9846ae7f 2b8cd1ae 97e0462d c41dc976 d03833ab 933e444b 1bea8f12#012afef4d29 c984579a 2abcb932 e2be0c52 16ef2215 80694a2c 01354603 dc8145c9#0129187bf08 9932abb1 b51b1d01 78bb4575 04eb2836 95277dac d51be6ef fbd85c17#0120714 9ea14260 5185c05f 80a3b5a7 b0e4aad4 14ac 043081a4 310b3009#01206035504 06130244 45311b30 19060355 04081312 42616465 6e2d5775 65727474#012656d6265 72673113 30110603 55040713 0a486569 64656e68 65696d31 21301f06#0120355040a 0c185765 72626561 67656e74 75722048 c3bc7065 7220476d 6248310c#012300a0603 55040b13 03454456 31153013 06035504 03130c68 75657065 722e6465#01220434131 1b301906 092a8648 86f70d01 0901160c 63614068 75657065 722e6465#0121418 a65ec448 cd64cb06 51babce2 c315cecc f8c5eadf 0018 1ec86d9a#0122429383a ab4ba1cf 3b837a73 cc7a3236 Dec 12 08:42:26 dieder racoon: DEBUG: resend phase1 packet d31de13bfdd30a3d:0bc65d88361c3747 Dec 12 08:42:36 dieder racoon: ERROR: phase1 negotiation failed due to time up. d31de13bfdd30a3d:0bc65d88361c3747 Dec 12 08:42:36 dieder racoon: DEBUG: IV freed -- Thomas Kempf fon + 49 7321 969845 fax + 49 7321 969890 tke...@hueper.de http://www.hueper.de Werbeagentur Hüper GmbH Im Brühl 1 89520 Heidenheim an der Brenz Registergericht Amtsgericht Heidenheim an der Brenz HRB 720441 Geschäftsführer Peter Hüper Bernd Weser -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#715440: ipsec-tools-0.8.0: Mobile Clients Phase 1 Negotiation timeout during NAT-T
Hi Christian, i just tried to backport the 0.8.2 from jessie to wheezy, but the build failed with a message configure.ac:10: option 'serial-tests' not recognized Seems i have to install a newer automake, but i don't have the time to dig into this right now... You don't have a prebuilt binary package for powerpc-wheezy by hazard ;-) On Sat, 28 Jun 2014 18:25:30 +0200 Christian Hofstaedtler wrote: Thomas, I've a nicely working setup with ipsec-tools 0.8.2 and various clients, including iOS 7. Could you try again with 0.8.2? Thanks, -- ,''`. Christian Hofstaedtler : :' : Debian Developer `. `' 7D1A CFFA D9E0 806C 9C4C D392 5C13 D6DB 9305 2E03 `- -- Thomas Kempf fon + 49 7321 969845 fax + 49 7321 969890 tke...@hueper.de http://www.hueper.de Werbeagentur Hüper GmbH Im Brühl 1 89520 Heidenheim an der Brenz Registergericht Amtsgericht Heidenheim an der Brenz HRB 720441 Geschäftsführer Peter Hüper Bernd Weser -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#723719: ghostscript: New Upstream Version 9.10 available
Package: ghostscript Version: 9.05~dfsg-6.3 Severity: wishlist Upstream released Version 9.10 with significant improvements -- System Information: Debian Release: 7.1 APT prefers stable APT policy: (500, 'stable') Architecture: powerpc (ppc64) Kernel: Linux 3.2.0-4-powerpc64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8@euro, LC_CTYPE=de_DE.UTF-8@euro (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages ghostscript depends on: ii debconf [de 1.5.49 Debian configuration management sy ii debianutils 4.3.2Miscellaneous utilities specific t ii gsfonts 1:8.11+urwcyr1.0.7~pre44-4.2 Fonts for the Ghostscript interpre ii libc6 2.13-38 Embedded GNU C Library: Shared lib ii libgs9 9.05~dfsg-6.3interpreter for the PostScript lan ghostscript recommends no packages. Versions of packages ghostscript suggests: pn ghostscript-cups (no description available) pn ghostscript-x (no description available) pn hpijs (no description available) -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#715440: LogFiles
racoon: [XXX.XXX.XXX.XXX] INFO: Hashing XXX.XXX.XXX.XXX[500] with algo #1 Jul 4 18:21:40 dieder racoon: INFO: Adding remote and local NAT-D payloads. Jul 4 18:22:30 dieder racoon: ERROR: phase1 negotiation failed due to time up. dd6a3a1137027e34:78b246eff841caed successfull connect with Shrewsoft: Jul 4 19:00:16 dieder racoon: INFO: respond new phase 1 negotiation: XXX.XXX.XXX.XXX[500]<=>62.68.22.93[500] Jul 4 19:00:16 dieder racoon: INFO: begin Identity Protection mode. Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-01 Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02#012 Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: RFC 3947 Jul 4 19:00:16 dieder racoon: INFO: received broken Microsoft ID: FRAGMENTATION Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: DPD Jul 4 19:00:16 dieder racoon: INFO: received Vendor ID: CISCO-UNITY Jul 4 19:00:16 dieder racoon: [62.68.22.93] INFO: Selected NAT-T version: RFC 3947 Jul 4 19:00:16 dieder racoon: INFO: Adding xauth VID payload. Jul 4 19:00:16 dieder racoon: [62.68.22.93] WARNING: CR received, ignore it. It should be in other exchange. Jul 4 19:00:16 dieder racoon: [XXX.XXX.XXX.XXX] INFO: Hashing XXX.XXX.XXX.XXX[500] with algo #2 Jul 4 19:00:16 dieder racoon: INFO: NAT-D payload #0 verified Jul 4 19:00:16 dieder racoon: [62.68.22.93] INFO: Hashing 62.68.22.93[500] with algo #2 Jul 4 19:00:16 dieder racoon: INFO: NAT-D payload #1 doesn't match Jul 4 19:00:16 dieder racoon: INFO: NAT detected: PEER Jul 4 19:00:16 dieder racoon: [62.68.22.93] INFO: Hashing 62.68.22.93[500] with algo #2 Jul 4 19:00:16 dieder racoon: [XXX.XXX.XXX.XXX] INFO: Hashing XXX.XXX.XXX.XXX[500] with algo #2 Jul 4 19:00:16 dieder racoon: INFO: Adding remote and local NAT-D payloads. Jul 4 19:00:16 dieder racoon: INFO: NAT-T: ports changed to: 62.68.22.93[4500]<->XXX.XXX.XXX.XXX[4500] Jul 4 19:00:16 dieder racoon: INFO: KA list add: XXX.XXX.XXX.XXX[4500]->62.68.22.93[4500] Jul 4 19:00:16 dieder racoon: [62.68.22.93] WARNING: CERT validation disabled by configuration Jul 4 19:00:16 dieder racoon: INFO: Sending Xauth request Jul 4 19:00:16 dieder racoon: INFO: ISAKMP-SA established XXX.XXX.XXX.XXX[4500]-62.68.22.93[4500] spi:02a3a0d93c250d88:1854d273bfc8daa6 Jul 4 19:00:17 dieder racoon: [62.68.22.93] INFO: received INITIAL-CONTACT Jul 4 19:00:17 dieder racoon: INFO: Using port 0 Jul 4 19:00:17 dieder racoon: INFO: login succeeded for user "xxx" Jul 4 19:00:17 dieder racoon: WARNING: Ignored attribute INTERNAL_ADDRESS_EXPIRY Jul 4 19:00:41 dieder racoon: INFO: respond new phase 2 negotiation: XXX.XXX.XXX.XXX[4500]<=>62.68.22.93[4500] Jul 4 19:00:41 dieder racoon: INFO: no policy found, try to generate the policy : 192.168.9.1/32[0] 0.0.0.0/0[0] proto=any dir=in Jul 4 19:00:41 dieder racoon: INFO: Adjusting my encmode UDP-Tunnel->Tunnel Jul 4 19:00:41 dieder racoon: INFO: Adjusting peer's encmode UDP-Tunnel(3)->Tunnel(1) Jul 4 19:00:41 dieder racoon: INFO: IPsec-SA established: ESP/Tunnel XXX.XXX.XXX.XXX[4500]->62.68.22.93[4500] spi=138485535(0x8411f1f) Jul 4 19:00:41 dieder racoon: INFO: IPsec-SA established: ESP/Tunnel XXX.XXX.XXX.XXX[4500]->62.68.22.93[4500] spi=1023794243(0x3d05dc43) Jul 4 19:00:54 dieder racoon: INFO: deleting a generated policy. Jul 4 19:00:54 dieder racoon: INFO: purged IPsec-SA proto_id=ESP spi=1023794243. Jul 4 19:00:54 dieder racoon: INFO: purging ISAKMP-SA spi=02a3a0d93c250d88:1854d273bfc8daa6:b2e577c5. Jul 4 19:00:54 dieder racoon: INFO: purged IPsec-SA spi=138485535. Jul 4 19:00:54 dieder racoon: INFO: purged ISAKMP-SA spi=02a3a0d93c250d88:1854d273bfc8daa6:b2e577c5. Jul 4 19:00:54 dieder racoon: INFO: ISAKMP-SA deleted XXX.XXX.XXX.XXX[4500]-62.68.22.93[4500] spi:02a3a0d93c250d88:1854d273bfc8daa6 Jul 4 19:00:54 dieder racoon: INFO: KA remove: XXX.XXX.XXX.XXX[4500]->62.68.22.93[4500] Jul 4 19:00:54 dieder racoon: INFO: Released port 0 Thomas Kempf fon + 49 7321 969845 fax + 49 7321 969890 tke...@hueper.de http://www.hueper.de Werbeagentur Hüper GmbH Im Brühl 1 89520 Heidenheim an der Brenz Registergericht Amtsgericht Heidenheim an der Brenz HRB 720441 Geschäftsführer Peter Hüper Bernd Weser -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#715440: ipsec-tools-0.8.0: Mobile Clients Phase 1 Negotiation timeout during NAT-T
Package: ipsec-tools-0.8.0 Severity: important -- System Information: Debian Release: 7.1 APT prefers stable APT policy: (500, 'stable') Architecture: powerpc (ppc64) Kernel: Linux 3.2.0-4-powerpc64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8@euro, LC_CTYPE=de_DE.UTF-8@euro (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Phase 1 Negotiation fails with Mobile Clients (Android,iOS) when it comes to switching to the NAT Ports whereas VPN-Tunnel builds successfully with ShrewSoft VPN Client on Win. Racoon reports the line Adding remote and local NAT-D payloads but ther is no message that it switched to NAT-T ports. Instead it logs a phase 1 negotiation failed due to tome up message. I built a new package with upstream version 0.8.1 with the same behaviour. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#601830: Regression in 1:9.7.3.dfsg-1~squeeze4 ?
Hi, I'm running the 1:9.7.3.dfsg-1~squeeze4 with DDNS-Updates as described above on a PowerPC G5 SMP machine and experience the same error as described by Benoit. The -n1 workaround cured the symptoms for the last week. Kind regards Tom -- Thomas Kempf fon + 49 7321 969845 fax + 49 7321 969890 tke...@hueper.de http://www.hueper.de Werbeagentur Hüper GmbH Im Brühl 1 89520 Heidenheim an der Brenz Registergericht Amtsgericht Heidenheim an der Brenz HRB 720441 Geschäftsführer Peter Hüper Bernd Weser -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#597833: ghostscript: New Upstream Version
Package: ghostscript Version: 8.70~dfsg-2 Severity: wishlist Version 9.00 with ICC support is released by upstream -- System Information: Debian Release: 5.0.4 APT prefers stable APT policy: (500, 'stable') Architecture: powerpc (ppc) Kernel: Linux 2.6.26-1-powerpc Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages ghostscript depends on: ii debconf [debc 1.5.24 Debian configuration management sy ii debianutils 2.30 Miscellaneous utilities specific t ii defoma0.11.10-0.2Debian Font Manager -- automatic f ii ghostscript [ 8.70~dfsg-2The GPL Ghostscript PostScript/PDF ii gs-common 8.63.dfsg.1-2 Dummy package depending on ghostsc ii gsfonts 1:8.11+urwcyr1.0.7~pre44-3 Fonts for the Ghostscript interpre ii libc6 2.7-18lenny4 GNU C Library: Shared libraries ii libgs88.70~dfsg-2The Ghostscript PostScript/PDF int Versions of packages ghostscript recommends: ii psfontmgr0.11.10-0.2 PostScript font manager -- part of ghostscript suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#579960: ClamAV daemon still fails to start on 32 bit PowerPC
Hi Michael, i tried the patch you mentioned, and it seems to work fine here! Once Again thank you for your help! Best regards Tom Am 29.06.2010 19:18, schrieb Michael Tautschnig: reopen 579960 tags 579960 + upstream forwarded 579960 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1921 found 579960 0.96.1+dfsg-1~volatile1 thanks Hi Thomas, Hi Michael and Philipp, first of all than you both, for your immediate action! I immediately updated to the new packages but clamd died with the same symtoms as described by Pete in the very first mail of this thread. Could there be any regression in this update? According to upstream's bugreport it seems that it hasn't been fixed properly in 0.96.1 (see https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1921). There seems to be a new attempt, however: In this upstream bugreport there's a patch attached (https://wwws.clamav.net/bugzilla/attachment.cgi?id=1333) which you may want to try out and see whether it helps. If it does, please report back so we can upload a patched version until there is a new upstream release that finally fixes this issue. Best, Michael -- Thomas Kempf fon + 49 7321 969845 fax + 49 7321 969890 tke...@hueper.de http://www.hueper.de Werbeagentur Hüper GmbH Im Brühl 1 89520 Heidenheim an der Brenz Registergericht Amtsgericht Heidenheim an der Brenz HRB 720441 Geschäftsführer Peter Hüper Bernd Weser -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#579960: ClamAV daemon still fails to start on 32 bit PowerPC
Hi Michael and Philipp, first of all than you both, for your immediate action! I immediately updated to the new packages but clamd died with the same symtoms as described by Pete in the very first mail of this thread. Could there be any regression in this update? Thanks Tom -- Thomas Kempf fon + 49 7321 969845 fax + 49 7321 969890 tke...@hueper.de http://www.hueper.de Werbeagentur Hüper GmbH Im Brühl 1 89520 Heidenheim an der Brenz Registergericht Amtsgericht Heidenheim an der Brenz HRB 720441 Geschäftsführer Peter Hüper Bernd Weser -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#579960: 32-Bit powerpc Version still not in volatile
Hallo, meanwhile package version clamav-daemon_0.96.1+dfsg-1_powerpc.deb migrated to testing, but is still not available in volatile, which leads to dependency errors between clamav-base and clamav-daemon. Only solution is to downgrade to the ancient 0.94-lenny which is a rather bad solution for av-software. Greetings Tom -- Thomas Kempf fon + 49 7321 969845 fax + 49 7321 969890 tke...@hueper.de http://www.hueper.de Werbeagentur Hüper GmbH Im Brühl 1 89520 Heidenheim an der Brenz Registergericht Amtsgericht Heidenheim an der Brenz HRB 720441 Geschäftsführer Peter Hüper Bernd Weser -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#558108: ppc version does not build too
Hi,
i can confirm this behaviour for the powerpc version of cups, which i
cannot build due to the same test-error.
See attached log files.
in fact never have been able to build cups from source. Build system is
a stable lenny system with the source-packages from testing.
Thanks
Tom
--
Thomas Kempf
fon + 49 7321 969845
fax + 49 7321 969890
tke...@hueper.de
http://www.hueper.de
Werbeagentur Hüper GmbH
Im Brühl 1
89520 Heidenheim an der Brenz
Registergericht Amtsgericht Heidenheim an der Brenz
HRB 720441
Geschäftsführer
Peter Hüper
Bernd Weser
Title: CUPS 1.4 Software Test Report
CUPS 1.4 Software Test Report
This software test report provides detailed test results that
are used to evaluate the stability and compliance of the Common
UNIX Printing System ("CUPS") Version 1.4.
Document Overview
This software test plan is organized into the following sections:
1 - IPP Compliance Tests
2 - Command Tests
3 - Log Files
1 - IPP Compliance Tests
This section provides the results to the IPP compliance tests
outlined in the CUPS Software Test Plan. These tests were run on
2010-04-16 by root on dns1.hueper.de.
"4.1-requests.test":
No Attributes[PASS]
RECEIVED: 116 bytes in response
Charset Attribute[PASS]
RECEIVED: 119 bytes in response
Language Attribute [PASS]
RECEIVED: 119 bytes in response
Language + Charset Attributes[PASS]
RECEIVED: 119 bytes in response
Charset + Language Attributes[PASS]
RECEIVED: 119 bytes in response
Charset + Language + Printer URI Attributes [PASS]
RECEIVED: 72 bytes in response
Charset + Language + Job URI Attributes [PASS]
RECEIVED: 117 bytes in response
Bad IPP Version [PASS]
RECEIVED: 122 bytes in response
"4.2-cups-printer-ops.test":
Add Printer Test1[PASS]
RECEIVED: 72 bytes in response
Verify Printer Test1 Added [PASS]
RECEIVED: 4839 bytes in response
Delete Printer Test1 [PASS]
RECEIVED: 72 bytes in response
Verify Printer Test1 Deleted [PASS]
RECEIVED: 126 bytes in response
Subscribe to Printer Events [PASS]
RECEIVED: 104 bytes in response
Add Printer Test2[PASS]
RECEIVED: 72 bytes in response
Verify Printer Test2 Added [PASS]
RECEIVED: 4839 bytes in response
Modify Printer Test2 [PASS]
RECEIVED: 72 bytes in response
Re-Add Printer Test1 [PASS]
RECEIVED: 72 bytes in response
Verify Printer Test1 Re-Added[PASS]
RECEIVED: 5163 bytes in response
Get Default Printer with no default set [PASS]
RECEIVED: 109 bytes in response
Set Default Printer to Test1 [PASS]
RECEIVED: 72 bytes in response
Get Default Printer [PASS]
RECEIVED: 5163 bytes in response
Get IPP/2.x Attributes for Printer Test1 [PASS]
RECEIVED: 5283 bytes in response
"4.3-job-ops.test":
Print PostScript Job with bad job-sheets value to Test1 [PASS]
RECEIVED: 120 bytes in response
Print PostScript Job to Test1[PASS]
RECEIVED: 177 bytes in response
Get Job Attributes [PASS]
RECEIVED: 910 bytes in response
Print JPEG Job to Test2 [PASS]
RECEIVED: 209 bytes in response
Get Job Attributes [PASS]
RECEIVED: 797 bytes in response
Print Text Job to Test1 [PASS]
RECEIVED: 177 bytes in response
Print PDF Job to Test1 [PASS]
RECEIVED: 197 bytes in response
Hold Job on Test1[PASS]
RECEIVED: 72 bytes in response
Release Job on Test1 [PASS]
RECEIVED: 72 bytes in response
Print Held Image Job to Test1[PASS]
RECEIVED: 197 bytes in response
Cancel Job [PASS]
RECEIVED: 72 bytes in response
Get Job List on Test1
