[Pkg-utopia-maintainers] Bug#756547: Bug#756547: network-manager: Restarting NM with many connections breaks sshd via start rate limit

[Michael Biebl]

Am 30.07.2014 21:25, schrieb Vladimir Kudrya:
> Package: network-manager
> Version: 0.9.10.0-1
> Severity: important
> 
> Dear Maintainer, I recently discovered that restarting NetworkManager on my home
> server results in sshd daemon entering failed state. This happens because
> restart command is issued to ssh daemon on every found connection which
> overwhelmes systemd start rate limit for sshd.service and shuts it down,
> silently cutting off any further attempt of remote connection to the server
> (hence the 'important' severity of the bug report).
> 
> I have 4 connections on the server (3 of them handled by NM). NM issues
> restart to sshd 6 times in one second. As a workaround I will tweak
> StartLimitBurst= for sshd.service unit, but I believe the problem lies with the
> NM which triggers rapid repetitive restart.
> 

The restart seems to be triggered by /etc/network/if-up.d/openssh-server
via /etc/NetworkManager/dispatcher.d/01ifupdown.

Might be that those connections you have configured have IPv4 and IPv6
enabled, so you get separate events: 2 * 3 connections => 6 restarts.

Why do you think this is a bug in NetworkManager and what is the package
supposed to do about that?

I see the restart was added because of [1], so bringing Colin into the
loop here.

Afaics you would have the exact same problem if you say have 6
connections configured in /etc/network/interfaces and you run
  service networking restart.


Michael

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502444
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 884 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20140731/b55c2fb2/attachment.sig>