Amanda-Users

client attempts UDP connect outside of --with-udpportrange config

2005-04-28 15:02:07
Subject: client attempts UDP connect outside of --with-udpportrange config
From: Phil Mocek <pmocek-list-amanda-users AT mocek DOT org>
To: amanda-users AT amanda DOT org
Date: Thu, 28 Apr 2005 11:38:18 -0700
I'm running AMANDA 2.4.4p1 compiled with the following options:

    amandad:        CONFIGURE_COMMAND="'./configure'
    '--mandir=/usr/share/man' '--prefix=/usr'
    '--infodir=/usr/share/info' '--sysconfdir=/etc'
    '--libdir=/usr/lib' '--libexecdir=/usr/lib/amanda'
    '--localstatedir=/var/lib' '--with-index-server=localhost'
    '--with-gnutar-listdir=/var/lib/amanda/gnutar-lists'
    '--with-smbclient=/usr/bin/smbclient' '--with-amandahosts'
    '--with-user=amanda' '--with-group=disk' '--with-gnutar=/bin/tar'
    '--with-tcpportrange=50000,50029' '--with-udpportrange=850,859'
    '--disable-libtool' '--disable-shared' '--disable-static'"

After much frustration and reading anything relevant I could find
short of the source code, I compiled with the --with-*portrange
options because both the backup server and client machine are
behind firewalls.  I specified a range of 10 ports because I'm
using 10 dumpers (``inparallel=10'' in amanda.conf).  I've
configured both firewalls to allow traffic on UDP 850 - 859 and
TCP 50000 - 50029.

When I run amdump, it completes backup of the server disks as
expected, but fails to receive backups from the client.  I see in
the server's firewall logs that the client is attempting to
connect to the server on UDP ports 591 and 835.  These packets
are, of course, denied, because I've only opened 850 - 859.  I've
attached a copy of the only debug file that is created in
/tmp/amanda on the client.

I understand that AMANDA tries first to use the user UDP port
range and then, if that fails, tries for any privileged port.
So presumably, it was unable to use ports 850 - 859.  I'm unaware
of anything else using these ports on either the client or the
server.

Strangely, I've already made a successful test run with the same
configuration (except for changing to record=yes and disabling the
use of an exclude file).

Where should I proceed from here with troubleshooting?

-- 
Phil Mocek
amandad: debug 1 pid 14126 ruid 37 euid 37: start at Thu Apr 28 09:20:00 2005
amandad: version 2.4.4p1
amandad: build: VERSION="Amanda-2.4.4p1"
amandad:        BUILT_DATE="Wed Apr 27 12:00:51 PDT 2005"
amandad:        BUILT_MACH="Linux tapeserver 2.4.21-215-smp4G #1 SMP Tue Apr 27 
00:56:55 UTC 2004 i686 i686 i386 GNU/Linux"
amandad:        CC="gcc"
amandad:        CONFIGURE_COMMAND="'./configure' '--mandir=/usr/share/man' 
'--prefix=/usr' '--infodir=/usr/share/info' '--sysconfdir=/etc' 
'--libdir=/usr/lib' '--libexecdir=/usr/lib/amanda' '--localstatedir=/var/lib' 
'--with-index-server=localhost' 
'--with-gnutar-listdir=/var/lib/amanda/gnutar-lists' 
'--with-smbclient=/usr/bin/smbclient' '--with-amandahosts' '--with-user=amanda' 
'--with-group=disk' '--with-gnutar=/bin/tar' '--with-tcpportrange=50000,50029' 
'--with-udpportrange=850,859' '--disable-libtool' '--disable-shared' 
'--disable-static'"
amandad: paths: bindir="/usr/bin" sbindir="/usr/sbin"
amandad:        libexecdir="/usr/lib/amanda" mandir="/usr/share/man"
amandad:        AMANDA_TMPDIR="/tmp/amanda" AMANDA_DBGDIR="/tmp/amanda"
amandad:        CONFIG_DIR="/etc/amanda" DEV_PREFIX="/dev/"
amandad:        RDEV_PREFIX="/dev/" DUMP="/sbin/dump"
amandad:        RESTORE="/sbin/restore" SAMBA_CLIENT="/usr/bin/smbclient"
amandad:        GNUTAR="/bin/tar" COMPRESS_PATH="/usr/bin/gzip"
amandad:        UNCOMPRESS_PATH="/usr/bin/gzip" MAILER="/usr/bin/Mail"
amandad:        listed_incr_dir="/var/lib/amanda/gnutar-lists"
amandad: defs:  DEFAULT_SERVER="localhost" DEFAULT_CONFIG="DailySet1"
amandad:        DEFAULT_TAPE_SERVER="localhost"
amandad:        DEFAULT_TAPE_DEVICE="/dev/null" HAVE_MMAP HAVE_SYSVSHM
amandad:        LOCKING=POSIX_FCNTL SETPGRP_VOID DEBUG_CODE
amandad:        AMANDA_DEBUG_DAYS=4 BSD_SECURITY USE_AMANDAHOSTS
amandad:        CLIENT_LOGIN="amanda" FORCE_USERID HAVE_GZIP
amandad:        COMPRESS_SUFFIX=".gz" COMPRESS_FAST_OPT="--fast"
amandad:        COMPRESS_BEST_OPT="--best" UNCOMPRESS_OPT="-dc"
amandad: time 0.000: got packet:
--------
Amanda 2.4 REQ HANDLE 001-00590808 SEQ 1114705202
SECURITY USER amanda
SERVICE noop
OPTIONS features=fffffeff9ffe0f;
--------

amandad: time 0.000: sending ack:
----
Amanda 2.4 ACK HANDLE 001-00590808 SEQ 1114705202
----

amandad: time 0.000: bsd security: remote host tapeserver.example.com user 
amanda local user amanda
amandad: time 0.000: amandahosts security check passed
amandad: time 0.000: running service "noop"
amandad: time 0.001: sending REP packet:
----
Amanda 2.4 REP HANDLE 001-00590808 SEQ 1114705202
OPTIONS features=fffffeff9ffe0f;
----

amandad: time 9.961: got packet:
----
Amanda 2.4 REQ HANDLE 001-00590808 SEQ 1114705202
SECURITY USER amanda
SERVICE noop
OPTIONS features=fffffeff9ffe0f;
----

amandad: time 9.961: it is not an ack
amandad: time 9.961: sending REP packet:
----
Amanda 2.4 REP HANDLE 001-00590808 SEQ 1114705202
OPTIONS features=fffffeff9ffe0f;
----

amandad: time 19.959: dgram_recv: timeout after 10 seconds
amandad: time 19.959: waiting for ack: timeout, retrying
amandad: time 19.961: got packet:
----
Amanda 2.4 REQ HANDLE 001-00590808 SEQ 1114705202
SECURITY USER amanda
SERVICE noop
OPTIONS features=fffffeff9ffe0f;
----

amandad: time 19.961: it is not an ack
amandad: time 29.959: dgram_recv: timeout after 10 seconds
amandad: time 29.959: waiting for ack: timeout, retrying
amandad: time 39.956: dgram_recv: timeout after 10 seconds
amandad: time 39.956: waiting for ack: timeout, retrying
amandad: time 49.954: dgram_recv: timeout after 10 seconds
amandad: time 49.954: waiting for ack: timeout, retrying
amandad: time 59.952: dgram_recv: timeout after 10 seconds
amandad: time 59.952: waiting for ack: timeout, giving up!
amandad: time 59.952: pid 14126 finish time Thu Apr 28 09:21:00 2005
<Prev in Thread] Current Thread [Next in Thread>