Package: mandos
Version: 1.6.9-1
Severity: important
Dear Maintainer,
Upon installing mandos after a fresh jessie install, the service fails to start:
# systemctl -l status mandos.service
● mandos.service - Server of encrypted passwords to Mandos clients
Loaded: loaded (/lib/systemd/system/mandos.service; disabled)
Active: failed (Result: start-limit) since Mon 2015-05-25 16:56:02 PDT; 4min
53s ago
Docs: man:intro(8mandos)
man:mandos(8)
Main PID: 2041 (code=exited, status=1/FAILURE)
May 25 16:56:02 server systemd[1]: mandos.service: main process exited,
code=exited, status=1/FAILURE
May 25 16:56:02 server systemd[1]: Unit mandos.service entered failed state.
May 25 16:56:02 server systemd[1]: mandos.service start request repeated too
quickly, refusing to start.
May 25 16:56:02 server systemd[1]: Failed to start Server of encrypted
passwords to Mandos clients.
May 25 16:56:02 server systemd[1]: Unit mandos.service entered failed state.
Here are some further relevant logs:
May 25 16:56:01 server mandos[2015]: Traceback (most recent call last):
May 25 16:56:01 server mandos[2015]: File "/usr/sbin/mandos", line 2883, in
<module>
May 25 16:56:01 server mandos[2015]: main()
May 25 16:56:01 server mandos[2015]: File "/usr/sbin/mandos", line 2536, in main
May 25 16:56:01 server mandos[2015]: bus, do_not_queue=True)
May 25 16:56:01 server mandos[2015]: File
"/usr/lib/python2.7/dist-packages/dbus/service.py", line 131, in __new__
May 25 16:56:01 server mandos[2015]: retval = bus.request_name(name, name_flags)
May 25 16:56:01 server mandos[2015]: File
"/usr/lib/python2.7/dist-packages/dbus/bus.py", line 303, in request_name
May 25 16:56:01 server mandos[2015]: 'su', (name, flags))
May 25 16:56:01 server mandos[2015]: File
"/usr/lib/python2.7/dist-packages/dbus/connection.py", line 651, in
call_blocking
May 25 16:56:01 server mandos[2015]: message, timeout)
May 25 16:56:01 server mandos[2015]: dbus.exceptions.DBusException:
org.freedesktop.DBus.Error.AccessDenied: Connection ":1.5" is not allowed to
own the service "se.recompile.Mandos" due to security policies in the
configuration file
May 25 16:56:01 server systemd[1]: mandos.service: main process exited,
code=exited, status=1/FAILURE
May 25 16:56:01 server systemd[1]: Unit mandos.service entered failed state.
I don't fully understand why this fails. Perhaps dbus.service needs to be
reloaded for the new mandos policies from /etc/dbus-1/system.d/mandos.conf
to take effect?
Upon rebooting, the service still does not start, but now for a different
reason: it is not enabled.
# systemctl status mandos.service
● mandos.service - Server of encrypted passwords to Mandos clients
Loaded: loaded (/lib/systemd/system/mandos.service; disabled)
Active: inactive (dead)
Docs: man:intro(8mandos)
man:mandos(8)
The service can, however, be started manually:
# systemctl start mandos.service
# systemctl -l status mandos.service
● mandos.service - Server of encrypted passwords to Mandos clients
Loaded: loaded (/lib/systemd/system/mandos.service; disabled)
Active: active (running) since Mon 2015-05-25 17:17:06 PDT; 12s ago
Docs: man:intro(8mandos)
man:mandos(8)
Main PID: 878 (mandos)
CGroup: /system.slice/mandos.service
├─878 /usr/bin/python2.7 /usr/sbin/mandos --foreground
└─883 /usr/bin/python2.7 /usr/sbin/mandos --foreground
May 25 17:17:06 server mandos[878]: Mandos [878]: WARNING: Could not load
persistent state: No such file or directory
May 25 17:17:06 server mandos[878]: Mandos [878]: WARNING: No clients defined
The service is still disabled, however, and must be enabled manually if it is
to be started automatically on future boots:
# systemctl enable mandos.service
I see that mandos.service has:
[Install]
WantedBy=multi-user.target
...so I would have expected the service to be enabled upon install. Perhaps
it is only disabled because it failed to start when it was first installed?
Regards.
-- System Information:
Debian Release: 8.0
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages mandos depends on:
ii adduser 3.113+nmu3
ii avahi-daemon 0.6.31-5
ii gnupg 1.4.18-7
ii initscripts 2.88dsf-59
ii python 2.7.9-1
ii python-avahi [python2.7-avahi] 0.6.31-5
ii python-dbus [python2.7-dbus] 1.2.0-2+b3
ii python-gnutls [python2.7-gnutls] 2.0.1-2
ii python-gobject 3.14.0-1
ii python-gobject-2 [python2.7-gobject] 2.28.6-12+b1
ii python-urwid [python2.7-urwid] 1.2.1-2+b1
ii python2.7 2.7.9-2
Versions of packages mandos recommends:
ii openssh-client [ssh-client] 1:6.7p1-5
mandos suggests no packages.
-- Configuration Files:
/etc/mandos/clients.conf [Errno 13] Permission denied:
u'/etc/mandos/clients.conf'
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
