[Dnsmasq-discuss] Problem with TFTP in dnsmasq

[Brown, Aaron M.]

> Please, more respect for yourself.
> You are doing great. Do known that you detected that you are stuck.
> It was you who made the step to ask mankind for help.

I was being silly, but thank you for the kind words. 😊

> And which permissions has file 'test.txt'?

The file test.txt is 755 as well.

> Please explicite that the filename is 'test.txt' for the tftp GET. 
> ( not '/tftp/test.txt' )

I just verified to be sure. Yes, I'm using the command tftp> GET test.txt
I've also tried variations like tftp> GET "test.txt" just to be sure (even knowing they'd probably throw invalid command errors).

>> Anyone have any ideas?

>Only a wild guess:
>Dnsmasq process has NOT the privelege to send.

>I don't know if such thing exists, but I'm thinking "capabilities".
>Capabilities as in https://manpages.debian.org/buster/manpages/capabilities.7.en.html

Wild guess or not, I'll dig into this today, thank you for a possible lead!

amb

-----Original Message-----
From: Geert Stappers <stappers at stappers.nl> 
Sent: Wednesday, June 9, 2021 03:58
To: dnsmasq-discuss at lists.thekelleys.org.uk
Subject: Re: [Dnsmasq-discuss] Problem with TFTP in dnsmasq

On Tue, Jun 08, 2021 at 08:54:45PM +0000, Brown, Aaron M. wrote:
> Hello all,
> 
> I'm having trouble getting dnsmasq and tftp to work and I'm tearing my 
> hair out. I'm hoping someone can potentially hit me with the clue by 
> four and point out what dumb thing I'm missing.

Please, more respect for yourself.
You are doing great. Do known that you detected that you are stuck.
It was you who made the step to ask mankind for help.

Short: Be kind enough to respond to this posting.

 
> In the bigger scope, I'm trying to get PXE booting setup on a server, 
> but at the moment before I even get to anything more complicated, I'm 
> struggling just to get TFTP to work. I have set up my 
> /etc/dnsmasq.conf file as the following:
> 
> interface=bond0
> port=0
> enable-tftp
> tftp-root=/tftp
> log-dhcp
> dhcp-range=<serverIPAddress>,proxy
> dhcp-no-override
> 
> dnsmasq is up and running without errors. I put a simple file in /tftp 
> called "test.txt". The /tftp directory has been set to 755 permissions.

And which permissions has file 'test.txt'?

 
> I then go to client computer and using a tftp client attempt to GET 
> the test.txt file but it times out without retrieving the file.

Please explicite that the filename is 'test.txt' for the tftp GET.
( not '/tftp/test.txt' )
 
> There is no firewall running when I do this on either server or client 
> and I can ping from both client and server to each other.

Acknowledge.


> On the server, I see in a tcpdump of port 69 that the client is making 
> RRQ requests. When I look at the status of the dnsmasq service I see:
> 
> Jun 08 16:13:46 <serverName> dnsmasq-tftp[258381]: failed sending 
> /tftp/test.txt to <clientIPAddress>
> 
> There's a similar message in /var/log/syslog as well for dnsmasq-tftp 
> failing to send the file.
> I've been pouring over the docs/man pages and the sample .conf file, 
> but I'm clearly not understanding what I'm missing.

It is surely an interresting problem.

 
> Anyone have any ideas?

Only a wild guess:
Dnsmasq process has NOT the privelege to send.

I don't know if such thing exists, but I'm thinking "capabilities".
Capabilities as in https://manpages.debian.org/buster/manpages/capabilities.7.en.html


> I've searched the web for similar problems, but I haven't been able to 
> find anything that resembles my situation. Usually people seem to have 
> issues after this point with what TFTP is passing out, not just 
> getting TFPT up and running.

:-)

Acknowledge on "your question is very valid".
Otherwise I would have ignored it. Backgrond information at http://www.catb.org/~esr/faqs/smart-questions.html

 
> Server OS: Ubuntu 20.04 Server
> Client OS: Ubuntu 20.04 Desktop
> 
> Aaron M Brown
> Engineering College Computing
> Desktop Administrator
> NI1013A - 419.530.8022


Groeten
Geert Stappers

P.S.
Dnsmasq tftp works for me ...
--
Silence is hard to parse