Bug 205923

Summary: New version of iproute broke vpnc-script
Product: [Fedora] Fedora Reporter: Cory Bell <bellcr>
Component: vpncAssignee: Tomas Mraz <tmraz>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: medium    
Version: 5CC: alessandro.suardi, extras-qa, james
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: vpnc-0.3.3-7.3 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-09-12 16:40:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Patch to strip hoplimit from output of ip route get none

Description Cory Bell 2006-09-10 06:10:56 UTC 
Description of problem:
The recent update to iproute-2.6.16-1.fc5 broke vpnc (more accurately, it broke
/etc/vpnc/vpnc-script). The new iproute adds a "hoplimit" value to the output of
"ip route get <ipsec_gw_address>". Because fix_ip_get_output doesn't know to
remove it (and it isn't a valid parameter to "ip route add"), the attempt to add
a route to the VPN concentrator fails with "Error: either "to" is duplicate, or
"hoplimit" is a garbage."

The fix is easy, just modify fix_ip_get_output to strip the hoplimit value.
Patch will be attached shortly.

Version-Release number of selected component (if applicable):
vpnc-0.3.3-7.2

How reproducible:
100% since updating to iproute-2.6.16-1.fc5.

Steps to Reproduce:
1. Update to iproute-2.6.16-1.fc5
2. Try to connect to a VPN concentrator
3. Enjoy not being able to pass any packets
  
Actual results:
Error adding route to VPN concentrator

Expected results:
Sucessful addition of route to VPN concentrator
Comment 1 Cory Bell 2006-09-10 06:10:56 UTC 
Created attachment 135916 [details]
Patch to strip hoplimit from output of ip route get
Comment 2 Alessandro Suardi 2006-09-11 01:15:42 UTC 
Bug reproduces for me on two different VPN concentrators.
Reverted for now to iproute-2.6.15-1.2.
Comment 3 Alessandro Suardi 2006-09-18 00:57:08 UTC 
Just to confirm that vpnc-0.3.3-7.3 and newer iproute work fine together.
Comment 4 Lans Carstensen 2006-10-10 04:32:13 UTC 
This is confirmation that vpnc-0.3.3-7.3 works properly on RHEL5 beta 1, whereas
-7.2 does not.