Mailing List Archive: Conser 8.0 access problems.

I have conserver 8.0 running on a Solaris box. I am using netmasks to
define access like I did in 7.x. However, I am getting the following error
message upon startup. And, no access from remote nodes. Here are the
particulars (names changed for security), any ideas? BTW, it makes no
difference if I use a comma or space to separate the hosts.

ERROR: invalid ACL CIDR notation `10.17.0.0/16'
[/usr/local/etc/conserver.cf:40]
------------------------------------------------------------------------
$ /usr/local/sbin/conserver -V
conserver: conserver.com version 8.0.0
conserver: default access type `r'
conserver: default escape sequence `^Ec'
conserver: default configuration in `/usr/local/etc/conserver.cf'
conserver: default password in `/usr/local/etc/conserver.passwd'
conserver: default logfile is `/var/log/conserver'
conserver: default pidfile is `/var/run/conserver.pid'
conserver: default limit is 16 members per group
conserver: default primary port referenced as `586'
conserver: default secondary base port referenced as `0'
conserver: options: openssl, pam
conserver: openssl version: OpenSSL 0.9.7b 10 Apr 2003
conserver: built with `./configure --with-openssl=/usr/local/ssl
--with-regex --with-pam --with-master=master.ourdomain.com
--with-port=586 --with-trustrevdns'
------------------------------------------------------------------------
$ cat /usr/local/etc/conserver.cf
default full {
rw *;
}

default * {
logfile /var/log/consoles/&;
timestamp 1lab;
include full;
}
console systemname {
master master.ourdomain.com;
logfile /var/log/consoles/&.current;
type host;
host terminalserver1;
port 4001;
}
access * {
trusted 127.0.0.1 localhost;
allowed 192.168.220.0/24,10.17.0.0/16;
}
------------------------------------------------------------------------
$ cat /usr/local/etc/conserver.passwd
*any*:*passwd*
------------------------------------------------------------------------

On Thu, Sep 25, 2003 at 03:43:32PM -0700, McCanta, Jay wrote:
> I have conserver 8.0 running on a Solaris box. I am using netmasks to
> define access like I did in 7.x. However, I am getting the following error
> message upon startup. And, no access from remote nodes. Here are the
> particulars (names changed for security), any ideas? BTW, it makes no
> difference if I use a comma or space to separate the hosts.

well, the beta code obviously didn't get exercised that well. you have
two options to get around this. the first is to just put each address
in it's own access list. so,

allowed 192.168.220.0/24,10.17.0.0/16;

becomes

allowed 192.168.220.0/24; allowed 10.17.0.0/16;

the second option is to apply a small patch to reset some of the
variables that were not cleared through the loop:

*** readcfg.c Thu Aug 21 15:04:07 2003
--- readcfg.c+ Thu Sep 25 16:10:25 2003
***************
*** 2872,2877 ****
--- 2872,2879 ----

for (token = strtok(acl, ALLWORDSEP); token != (char *)0;
token = strtok(NULL, ALLWORDSEP)) {
+ i = 0; isCIDR = 0;
+ nCount = 0; dCount = 0; sCount = 0; mCount = 0; sPos = 0;
/* Scan for [0-9./], and stop if you find something else */
for (i = 0; token[i] != '\000'; i++) {
if (isdigit((int)(token[i]))) {

thanks for sharing the problem. the patch will be in 8.0.1, whenever
that happens (hopefully if there are more issues with 8.0.0 i'll hear
about them and be able to include them as well).

Bryan