Debian Bug report logs - #560837
lighttpd listened on ipv6 only after upgrade

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Andy Wettstein <ajw1980@gmail.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: lighttpd listened on ipv6 only after upgrade

Date: Sat, 12 Dec 2009 11:35:50 -0600

Package: lighttpd
Version: 1.4.25-1
Severity: important

On upgrade to version 1.4.25, this option made lighttpd only listen on
ipv6 addresses:
include_shell "/usr/share/lighttpd/use-ipv6.pl"

After commenting that out lighttpd was again available through ipv4.


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-0.slh.8-sidux-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages lighttpd depends on:
ii  libattr1               1:2.4.44-1        Extended attribute shared library
ii  libbz2-1.0             1.0.5-3           high-quality block-sorting file co
ii  libc6                  2.10.2-2          GNU C Library: Shared libraries
ii  libgamin0 [libfam0]    0.1.10-2          Client library for the gamin file 
ii  libldap-2.4-2          2.4.17-2.1        OpenLDAP libraries
ii  libpcre3               7.8-3             Perl 5 Compatible Regular Expressi
ii  libssl0.9.8            0.9.8k-7          SSL shared libraries
ii  libterm-readline-perl- 1.0303-1          Perl implementation of Readline li
ii  lsb-base               3.2-23            Linux Standard Base 3.2 init scrip
ii  mime-support           3.48-1            MIME files 'mime.types' & 'mailcap
ii  zlib1g                 1:1.2.3.3.dfsg-15 compression library - runtime

Versions of packages lighttpd recommends:
pn  spawn-fcgi                    <none>     (no description available)

Versions of packages lighttpd suggests:
ii  apache2-utils                 2.2.14-3   utility programs for webservers
ii  openssl                       0.9.8k-7   Secure Socket Layer (SSL) binary a
pn  rrdtool                       <none>     (no description available)

-- no debconf information

Message #10 received at 560837@bugs.debian.org (full text, mbox, reply):

From: Stefan Bühler <stbuehler@web.de>

To: 560837@bugs.debian.org

Subject: Re: lighttpd listened on ipv6 only after upgrade

Date: Sun, 20 Dec 2009 17:23:45 +0100

Hi,

this is due to an update to netbase unstable:
" * Create /etc/sysctl.d/bindv6only.conf on upgrades and new installs to set 
net.ipv6.bindv6only=1."

Message #15 received at 560837@bugs.debian.org (full text, mbox, reply):

From: "Anatoly A. Kazantsev" <anatoly@gnu.org>

To: 560837@bugs.debian.org

Subject: Re: lighttpd listened on ipv6 only after upgrade

Date: Wed, 23 Dec 2009 17:28:13 +0600

[Message part 1 (text/plain, inline)]

But how to configure lighttpd to open two listening sockets?

-- 
Thanks,
Anatoly

[Message part 2 (application/pgp-signature, inline)]

Message #20 received at 560837@bugs.debian.org (full text, mbox, reply):

From: Stefan Bühler <lighttpd@stbuehler.de>

To: 560837@bugs.debian.org

Cc: "Anatoly A. Kazantsev" <anatoly@gnu.org>

Subject: Re: lighttpd listened on ipv6 only after upgrade

Date: Wed, 23 Dec 2009 21:02:38 +0100

$SERVER["socket"] == "[::]:80" { }

Message #25 received at 560837@bugs.debian.org (full text, mbox, reply):

From: md@Linux.IT (Marco d'Itri)

To: 560837@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: Bug#560837: lighttpd listened on ipv6 only after upgrade

Date: Fri, 25 Dec 2009 19:23:50 +0100

[Message part 1 (text/plain, inline)]

severity 560837 critical
block 560238 with 560837
tag 560837 patch
thanks

http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=70;bug=560238
http://redmine.lighttpd.net/projects/1/wiki/IPv4_mapped_addresses

The upstream developers do not appear to care about IPv6 and decided to
ignore the issue, but it can be easily fixed in use-ipv6.pl.
Pseudo-patch:

-    print "server.use-ipv6 = \"enable\"\n";
+    print qq|$SERVER["socket"] == "[::]:80" { }\n|;

While not needed with the new default I still recommend to force
IPV6_V6ONLY to 1 in the lighttpd source, because for a complex program
it is a much better default and would solve the persistent issues with
ACLs and logs parsing.

-- 
ciao,
Marco

[signature.asc (application/pgp-signature, inline)]

Message #38 received at 560837@bugs.debian.org (full text, mbox, reply):

From: Stefan Bühler <lighttpd@stbuehler.de>

To: 560837@bugs.debian.org

Subject: Re: lighttpd listened on ipv6 only after upgrade

Date: Sun, 3 Jan 2010 15:27:50 +0100

Looks like you don't understand the problem. We ("upstream") know perfectly 
well that IPV6_V6ONLY would have made things easier, but we don't like 
breaking existing setups, so we didn't change it. In our next version 
(lighttpd sandbox/2.0) we already use IPV6_V6ONLY, and have a better syntax 
for listening to multiple sockets.

I would recommend to just drop the ipv6-enabled script. The people who care 
about ipv6 listening should just enable it manually; i think it is bad style 
to silently change existing setups to listen to ipv6, as it might circumvent 
access restrictions.

Message #43 received at 560837-close@bugs.debian.org (full text, mbox, reply):

From: Krzysztof Krzyżaniak (eloy) <eloy@debian.org>

To: 560837-close@bugs.debian.org

Subject: Bug#560837: fixed in lighttpd 1.4.25-2

Date: Tue, 05 Jan 2010 11:03:17 +0000

Source: lighttpd
Source-Version: 1.4.25-2

We believe that the bug you reported is fixed in the latest version of
lighttpd, which is due to be installed in the Debian FTP archive:

lighttpd-doc_1.4.25-2_all.deb
  to main/l/lighttpd/lighttpd-doc_1.4.25-2_all.deb
lighttpd-mod-cml_1.4.25-2_i386.deb
  to main/l/lighttpd/lighttpd-mod-cml_1.4.25-2_i386.deb
lighttpd-mod-magnet_1.4.25-2_i386.deb
  to main/l/lighttpd/lighttpd-mod-magnet_1.4.25-2_i386.deb
lighttpd-mod-mysql-vhost_1.4.25-2_i386.deb
  to main/l/lighttpd/lighttpd-mod-mysql-vhost_1.4.25-2_i386.deb
lighttpd-mod-trigger-b4-dl_1.4.25-2_i386.deb
  to main/l/lighttpd/lighttpd-mod-trigger-b4-dl_1.4.25-2_i386.deb
lighttpd-mod-webdav_1.4.25-2_i386.deb
  to main/l/lighttpd/lighttpd-mod-webdav_1.4.25-2_i386.deb
lighttpd_1.4.25-2.diff.gz
  to main/l/lighttpd/lighttpd_1.4.25-2.diff.gz
lighttpd_1.4.25-2.dsc
  to main/l/lighttpd/lighttpd_1.4.25-2.dsc
lighttpd_1.4.25-2_i386.deb
  to main/l/lighttpd/lighttpd_1.4.25-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 560837@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Krzysztof Krzyżaniak (eloy) <eloy@debian.org> (supplier of updated lighttpd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 30 Nov 2009 14:23:03 +0100
Source: lighttpd
Binary: lighttpd lighttpd-doc lighttpd-mod-mysql-vhost lighttpd-mod-trigger-b4-dl lighttpd-mod-cml lighttpd-mod-magnet lighttpd-mod-webdav
Architecture: source i386 all
Version: 1.4.25-2
Distribution: unstable
Urgency: low
Maintainer: Debian lighttpd maintainers <pkg-lighttpd-maintainers@lists.alioth.debian.org>
Changed-By: Krzysztof Krzyżaniak (eloy) <eloy@debian.org>
Description: 
 lighttpd   - A fast webserver with minimal memory footprint
 lighttpd-doc - Documentation for lighttpd
 lighttpd-mod-cml - Cache meta language module for lighttpd
 lighttpd-mod-magnet - Control the request handling module for lighttpd
 lighttpd-mod-mysql-vhost - MySQL-based virtual host configuration for lighttpd
 lighttpd-mod-trigger-b4-dl - Anti-deep-linking module for lighttpd
 lighttpd-mod-webdav - WebDAV module for lighttpd
Closes: 560837
Changes: 
 lighttpd (1.4.25-2) unstable; urgency=low
 .
   * Change behaviour of use-ipv6.pl script (closes: #560837)
Checksums-Sha1: 
 51b507bbdff8ba7832541bb7eaa965a9f875268b 1652 lighttpd_1.4.25-2.dsc
 de22aaaff48f93071c3249b03e5a2880d47ea1c7 23928 lighttpd_1.4.25-2.diff.gz
 9d05c17f7e2a0fa49b91e746e4f9f773473cac4a 276418 lighttpd_1.4.25-2_i386.deb
 c173278ded859526ec500426e07b03b0d6effed6 16076 lighttpd-mod-mysql-vhost_1.4.25-2_i386.deb
 1ce396fc597c5e8930f7afbdb75e77eb19213b4a 17814 lighttpd-mod-trigger-b4-dl_1.4.25-2_i386.deb
 9dc03bc0e8f57c752445b9d973887518c760c9f9 20622 lighttpd-mod-cml_1.4.25-2_i386.deb
 0bdb32bd23c6e8f90fa06b2fd0f3e39b696ab369 21774 lighttpd-mod-magnet_1.4.25-2_i386.deb
 b82fadcfddcfcb74af3d74cd5bd9c96d4dd514e9 28370 lighttpd-mod-webdav_1.4.25-2_i386.deb
 fae9e831f533233f0da22aebe5f6eec0c6c75760 60656 lighttpd-doc_1.4.25-2_all.deb
Checksums-Sha256: 
 563a52906821bed9f7dcfbebb8bda19cdcd8d56dded7c03be7b4ca959abe521c 1652 lighttpd_1.4.25-2.dsc
 bb44596878ccbbea8936be699135d3d57e121c2c034140b605795fe913a9ab0d 23928 lighttpd_1.4.25-2.diff.gz
 4f46ff601e3a19a1698954fbb1a23bc44128d4f58caa7740d4b980e7bf96b1c8 276418 lighttpd_1.4.25-2_i386.deb
 36d7c81e2339b86df935d7e3cc6a1eb6ea6e1b050ba759870ff83ee91e9066a8 16076 lighttpd-mod-mysql-vhost_1.4.25-2_i386.deb
 e636e9edd418581e2f0e908531b607c3b018155bc4d20c24c7dadc7b2f8e3ca8 17814 lighttpd-mod-trigger-b4-dl_1.4.25-2_i386.deb
 57fbb70da0ecfd199b674a3286a8cac5c34fb18f4a6c37bff3d27a5b3a580587 20622 lighttpd-mod-cml_1.4.25-2_i386.deb
 788667df9fbf81c12fb0018a4a725c1400b7fd777c7ef99054c5ba717b826107 21774 lighttpd-mod-magnet_1.4.25-2_i386.deb
 dce9a0efa78cc66e7633ac566503ef45a05ea1945de9ad627e1f60cae00e4653 28370 lighttpd-mod-webdav_1.4.25-2_i386.deb
 15dd6b1ad98479ca830ab28fdc6207deaab4daa3af5facdd0a27f63fcf1906ef 60656 lighttpd-doc_1.4.25-2_all.deb
Files: 
 01717bb48ee431b43d50abe341e767dd 1652 web optional lighttpd_1.4.25-2.dsc
 9a1e45a317e318bd0b912afe8080d0f0 23928 web optional lighttpd_1.4.25-2.diff.gz
 d52f013c98e8244710ba9a8791ac5f09 276418 web optional lighttpd_1.4.25-2_i386.deb
 3289283110049e93793718229afbbbd7 16076 web optional lighttpd-mod-mysql-vhost_1.4.25-2_i386.deb
 c84a487ff9b82ebedd2494ec74e75316 17814 web optional lighttpd-mod-trigger-b4-dl_1.4.25-2_i386.deb
 6db020180dd522e65ff0ae0f7a50e5d0 20622 web optional lighttpd-mod-cml_1.4.25-2_i386.deb
 83580bf284c2dc854507b15fabdba24a 21774 web optional lighttpd-mod-magnet_1.4.25-2_i386.deb
 4827e91396d2ea24289ca03611255cb5 28370 web optional lighttpd-mod-webdav_1.4.25-2_i386.deb
 c63136a62bb2587e7b49642947f5f308 60656 doc optional lighttpd-doc_1.4.25-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAktDGvUACgkQy+HP4f7iC8tE8gCgmwWQ7U4v51bG5j9PN3+FDZPl
0VAAn08Aw7GQvMecm7IBOkLEaNlE4q+Z
=/jXy
-----END PGP SIGNATURE-----

Message #48 received at 560837@bugs.debian.org (full text, mbox, reply):

From: Ken Bowley <kbowley@ser.asu.edu>

To: 560837@bugs.debian.org

Subject: fix breaks installs not using port 80

Date: Wed, 6 Jan 2010 10:24:59 -0700 (MST)

The "fix" to use_ipv6.pl breaks installations where lighttpd is running on 
a port other than port 80.  In our case, we have apache on port 80, and 
lighttpd running on port 83.  The upgrade to 1.4.25-2 failed because 
apache is already listening on port 80.

-- 
Ken Bowley
System Administrator
Lunar Reconnaissance Orbiter Camera Science Operations Center
School of Earth & Space Exploration
Arizona State University

Message #53 received at 560837@bugs.debian.org (full text, mbox, reply):

From: Rodrigo Campos <rodrigo@sdfg.com.ar>

To: Debian Bug Tracking System <560837@bugs.debian.org>

Subject: lighttpd: New package does not fix the issue

Date: Mon, 11 Jan 2010 13:39:06 -0300

Package: lighttpd
Version: 1.4.25-2
Severity: normal

You forgot to comment the line that does the include, so it is not fixed in this
new version.



Thanks,
Rodrigo

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'stable'), (400, 'unstable'), (200, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-trunk-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages lighttpd depends on:
ii  libattr1                1:2.4.44-1       Extended attribute shared library
ii  libbz2-1.0              1.0.5-3          high-quality block-sorting file co
ii  libc6                   2.10.2-2         GNU C Library: Shared libraries
ii  libfam0                 2.7.0-16.1       Client library to control the FAM 
ii  libldap-2.4-2           2.4.17-2.1       OpenLDAP libraries
ii  libpcre3                7.8-3            Perl 5 Compatible Regular Expressi
ii  libssl0.9.8             0.9.8k-7         SSL shared libraries
ii  libterm-readline-perl-p 1.0303-1         Perl implementation of Readline li
ii  lsb-base                3.2-23           Linux Standard Base 3.2 init scrip
ii  mime-support            3.48-1           MIME files 'mime.types' & 'mailcap
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages lighttpd recommends:
ii  spawn-fcgi                    1.6.3-1    A fastcgi process spawner

Versions of packages lighttpd suggests:
pn  apache2-utils                 <none>     (no description available)
ii  openssl                       0.9.8k-7   Secure Socket Layer (SSL) binary a
ii  rrdtool                       1.3.8-1    Time-series data storage and displ

-- no debconf information

Message #60 received at 560837@bugs.debian.org (full text, mbox, reply):

From: "Steve Walker" <walker@maps0.com>

To: 560837@bugs.debian.org

Subject: FYI

Date: Thu, 4 Feb 2010 09:51:06 -0600

Just an FYI to show that I experienced the bug:

On my Debian server (squeeze/sid 2.6.30-2-686-bigmem #1 SMP) this morning
I just installed lighttpd (1.4.25-2) using apt-get.

Since Apache is already running on port 80 I knew I needed to choose a
different port.

So I edited /etc/lighttpd/lighttpd.conf and made the following change only:
## bind to port (default: 80)
server.port               = 81

IE I uncommented the server.port directive to choose port 81

Attempts to start lighttpd result in the error message:

Starting web server: lighttpd2010-02-03 21:03:04: (network.c.345) can't
bind to port: :: 80 Address already in use
failed!

So I proceed to comment out the following 'include_shell' directive
## Use ipv6 only if available. (disabled for while, check #560837)
#include_shell "/usr/share/lighttpd/use-ipv6.pl"

And so now
wget localhost:81

Results in a success and lighttpd is therefore working for me.




-- 
Steve Walker
Middle Fork Geographic Information Services
360.671.2505

Message #67 received at 560837@bugs.debian.org (full text, mbox, reply):

From: Frank Lin PIAT <fpiat@klabs.be>

To: 560837@bugs.debian.org

Subject: IPv6... be flexible about user configuration

Date: Tue, 02 Mar 2010 22:28:53 +0100

Hello dear developers,

I was testing lighttpd and got hit by this bug. I read the thread and I
think that you are all right:

1. People upgrading existing systems expect smooth upgrade.
2. Fresh installed system are IPv6 enabled.
3. Disabling IPv6 on a new system should be possible and easy.

Regarding the point #1, Debian provides appropriate infrastructures
(NEWS.Debian and/or debconf), to warn system admins that a substantial
changed occurred, and they should review/prevent/accept that change.

My 2¢,

Franklin

Send a report that this bug log contains spam.