Bug 143751

Summary: yast2 firewall not starting
Product: [openSUSE] SUSE Linux 10.1 Reporter: Andreas Jaeger <aj>
Component: InstallationAssignee: Lukas Ocilka <locilka>
Status: RESOLVED INVALID QA Contact: Klaus Kämpf <kkaempf>
Severity: Blocker    
Priority: P5 - None CC: asklein, diehl, ihno, michael.raskey, ro, werner
Version: Beta 1   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: yast2 log files

Description Andreas Jaeger 2006-01-18 12:43:58 UTC
Enabling firewall services directly after network proposal does not work.
Comment 1 Andreas Jaeger 2006-01-18 12:44:21 UTC
Created attachment 63808 [details]
yast2 log files
Comment 2 Andreas Jaeger 2006-01-18 13:29:02 UTC
This might be the same problem as described in #135595, comment 59.
Comment 3 Andreas Jaeger 2006-01-19 15:39:46 UTC
Note this worked now for me - but now the internet test failed.  HOpe you can reproduce either of this once beta1 is out.
Comment 4 Lukas Ocilka 2006-01-20 08:52:01 UTC
Andreas, I've installed Beta1 just now and the problem was that it the Firewall::Write() was unable to enable `insserv SuSEfirewall2_init` but the Firewall was started.

It says: "boot.localfs has to be enabled for service SuSEfirewall2_init"
Note, that this behavior is with NetworkManager, I'll try the same without.

I'll check it against your YaST logs, but if you have any additional installation information (behavior description), please, try to write them down.
Comment 5 Andreas Jaeger 2006-01-20 09:40:40 UTC
boot.localfs is enabled at that point of time.  I checked it but please double check.

You might want to call insserv -f.  Werner, what do you suggest?
Comment 6 Lukas Ocilka 2006-01-20 09:51:03 UTC
`insserv -f` is probably not a way to go since all YaST modules use Service::Enable($service_name) for enabling the service. That would change the behavior for all modules.
Comment 7 Lukas Ocilka 2006-01-20 10:35:05 UTC
Andreas, this is part of your y2log:

clients/firewall_proposal.ycp:16 Firewall proposal started
clients/firewall_proposal.ycp:17 Arguments: ["Write", $[]]
SuSEFirewall.ycp:2316 Firewall configuration has been changed. Writing: $[... "FW_SERVICES_EXT_TCP":"ssh", "enable_firewall":true, "start_firewall":true].
SuSEFirewall.ycp:2333 Enabling firewall services
Service.ycp:386 Enabling service SuSEfirewall2_init
--- important ---
ShellCommand.cc(shellcommand):78 insserv: There is a loop between service cron and syslog
Service.ycp:386 Enabling service SuSEfirewall2_setup
ShellCommand.cc(shellcommand):78 insserv: Service network has to be enabled for service SuSEfirewall2_setup
ShellCommand.cc(shellcommand):78 insserv: exiting now!
Service.ycp:195 Unable to enable service SuSEfirewall2_setup:
insserv: Service network has to be enabled for service SuSEfirewall2_setup
insserv: exiting now!
...
SuSEFirewall.ycp:1406 Firewall service SuSEfirewall2_setup is not enabled
--- important ---

So, that's it. There are two ways to repair that:
1.) hack YaST Firewall to enable the SuSEirewall service with the "--force" option
2.) fix dependencies...
Comment 8 Andreas Jaeger 2006-01-20 10:44:13 UTC
Rudi, we might need to do our hack earlier.

I suggest to use --force - Rudi, Werner, what do you think?
Comment 9 Ruediger Oertel 2006-01-20 15:04:29 UTC
well, the plan is that the SuSEconfig.insserv_cleanup will go away 
and insserv will automatically restart itself with "-d" if a loop is
detected. So this should work unchanged again once insserv is changed.
(but please keep an eye on this to monitor it really works then).
Comment 10 Dr. Werner Fink 2006-01-23 17:41:41 UTC
Try out the newest insserv from STABLE.
Comment 11 Lukas Ocilka 2006-01-24 07:46:48 UTC
The problem was in insserv, but is was already said that it didn't work...
Comment 12 Lukas Ocilka 2006-01-24 08:04:52 UTC
*** Bug 144791 has been marked as a duplicate of this bug. ***
Comment 13 Lukas Ocilka 2006-01-24 11:08:55 UTC
*** Bug 144698 has been marked as a duplicate of this bug. ***
Comment 14 Lukas Ocilka 2006-01-24 11:34:14 UTC
*** Bug 144791 has been marked as a duplicate of this bug. ***
Comment 15 Lukas Ocilka 2006-01-26 15:21:02 UTC
*** Bug 145344 has been marked as a duplicate of this bug. ***