Bug 609413

Summary: Yast don't set tfte udp 69 port on firewall
Product: [openSUSE] openSUSE 12.2 Reporter: kamil rosinski <rysic>
Component: BasesystemAssignee: Vítězslav Čížek <vcizek>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P5 - None CC: jreidinger, lchiquitto, locilka, mpost, poolbarde, vcizek
Version: RC 1   
Target Milestone: ---   
Hardware: i586   
OS: openSUSE 11.2   
Whiteboard: maint:released:sle11-sp2:49033
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Deadline: 2012-09-14   
Attachments: yast ftp configurator

Description kamil rosinski 2010-05-27 11:34:03 UTC
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

I Yast tftp server configurator don't set 69 port on firewall. After do it by had, tftp works fine. The same sytuation in 11.3 M7.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.
Comment 1 Vladislav Lewin 2010-06-01 06:59:48 UTC
Please attach YaST logs.
It's actually helpful to attach them to (almost) every bug report
for YaST.

See http://en.opensuse.org/Bugs/YaST
Comment 2 Josef Reidinger 2011-06-17 14:10:08 UTC
no response more then two months
Comment 3 kamil rosinski 2011-06-21 16:14:15 UTC
I'm sorry :( I missed message about YaST logs :(
This Bug was in old 11.2 openSUSE verion and I tried it in actual 11.4 to check if error still exits but there is something even worst. Button to open port isn't active (attachement).

Logs from Yast TFTP configurator:

Jun 21 17:48:57 linux-9m11 shadow[7241]: new group added - group=tftp, gid=115, by=0
Jun 21 17:48:57 linux-9m11 shadow[7241]: running GROUPADD_CMD command - script=/usr/sbin/groupadd.local, account=tftp, uid=115, gid=0, home=, by=0
Jun 21 17:48:57 linux-9m11 useradd[7245]: new account added - account=tftp, uid=111, gid=115, home=/srv/tftpboot, shell=/bin/false, by=0
Jun 21 17:48:57 linux-9m11 useradd[7245]: account added to group - account=tftp, group=tftp, gid=115, by=0
Jun 21 17:48:57 linux-9m11 useradd[7245]: running USERADD_CMD command - script=/usr/sbin/useradd.local, account=tftp, uid=111, gid=115, home=/srv/tftpboot, by=0

I have configured two interfaces wlan0 and eth0, so thus isn't problem.
Comment 4 kamil rosinski 2011-06-21 16:15:21 UTC
Created attachment 435737 [details]
yast ftp configurator
Comment 5 Lukas Ocilka 2012-08-01 12:23:34 UTC
Reproduced:

<3> dhcp32(17176) [YCP] SuSEFirewallServices.ycp:538 Uknown service 'tftp'

the tftp package should contain firewall plugin 

    /etc/sysconfig/SuSEfirewall2.d/services/tftp

Please see /etc/sysconfig/SuSEfirewall2.d/services/TEMPLATE
for info how to create the file.
Comment 6 Vítězslav Čížek 2012-08-01 14:16:40 UTC
This looks like bnc#729793

Since this bug, tftp contains following firewall rule:

## Name: TFTP Server
## Description: Opens ports for tftp service.

# space separated list of allowed UDP ports
UDP="tftp"
Comment 7 Lukas Ocilka 2012-08-01 14:30:15 UTC
OK, so solved in 12.2

Vit, what about SLE 11?

*** This bug has been marked as a duplicate of bug 729793 ***
Comment 8 Vítězslav Čížek 2012-08-01 15:06:57 UTC
atftp needs the firewall rule too.

Regarding SLE, let's ask maintenance team.
Comment 9 Vítězslav Čížek 2012-08-01 15:07:35 UTC
Maintenance,
do you want an update for tftp/atftp which will add firewall rules?
Comment 11 Lukas Ocilka 2012-08-24 09:12:11 UTC
*** Bug 493157 has been marked as a duplicate of this bug. ***
Comment 12 Lukas Ocilka 2012-08-24 09:12:25 UTC
*** Bug 777166 has been marked as a duplicate of this bug. ***
Comment 15 Swamp Workflow Management 2012-08-29 11:41:33 UTC
The SWAMPID for this issue is 48899.
This issue was rated as low.
Please submit fixed packages until 2012-09-26.
Also create a patchinfo file using this link:
https://swamp.suse.de/webswamp/wf/48899
Comment 19 Swamp Workflow Management 2012-08-31 12:21:09 UTC
The SWAMPID for this issue is 49006.
This issue was rated as moderate.
Please submit fixed packages until 2012-09-14.
Also create a patchinfo file using this link:
https://swamp.suse.de/webswamp/wf/49006
Comment 21 Swamp Workflow Management 2012-09-13 20:44:48 UTC
Update released for: tftp, tftp-debuginfo, tftp-debugsource
Products:
SLE-DEBUGINFO 11-SP2 (i386, ia64, ppc64, s390x, x86_64)
SLE-DESKTOP 11-SP2 (i386, x86_64)
SLE-SERVER 11-SP2 (i386, ia64, ppc64, s390x, x86_64)
SLES4VMWARE 11-SP2 (i386, x86_64)