• Recent
    • Unsolved
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    PXE Boot issue - default.ipxe permssion denied

    Scheduled Pinned Locked Moved Solved
    Linux Problems
    6
    20
    18.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      Tim Jackson
      last edited by

      Hi - Thanks. Ok I captured the boot of both the Dell and my Acer laptop, both up to the point of failure and then restarting (or in the case of the Dell waiting on F1 to retry). The difference between the two is that the Acer doesn’t ask for the TFTP server name (option 66) for some reason but the Dell does. The responses back from the DHCP server look right to me but I’m not really familiar with DHCP. And then after that …nothing. Here is the link to the [URL=‘https://drive.google.com/open?id=0B_kJyPnsAGFZQl9iU2s3c2dFZms&authuser=0’]Acer pcap[/URL] and the link to Dell pcap is [URL=‘https://drive.google.com/open?id=0B_kJyPnsAGFZOUlITXBvanVWUk0&authuser=0’]here[/URL]. My OSX DHCP/TFTP server IP is 10.250.144.2 and the Fog box 10.250.144.11.
      Cheers

      1 Reply Last reply Reply Quote 0
      • S
        Sebastian Roth Moderator
        last edited by

        I was pretty confused when looking at those dump files and I couldn’t see any TFTP traffic whatsoever. Then I noticed that I asked for the wrong capture files!

        Please run tcpdump on your OSX server (hosting DHCP and TFTP…)!

        [CODE]sudo tcpdump -i en0 -s 0 -w dump.pcap[/CODE]

        From what I can see so far the DHCP server seems ok. At least you see ‘Configuring (net0 …’ which meens ipxe binary gets loaded from the TFTP server!

        Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

        Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

        1 Reply Last reply Reply Quote 0
        • T
          Tim Jackson
          last edited by

          OK didn’t know that wireshark provided in-built filters for tftp, many thanks for that. Really useful - I’ve struggled with trying to analyse the logs for tftp in the past so that’s great.
          Anyway - [URL='https://drive.google.com/open?id=0B_kJyPnsAGFZVlpwY1lUNnk1REU&authuser=0’]here’s the pcap for the Dell[/URL]; it seems like it’s failing on the absolute path for /default.ipxe…not even sure where that would try and get the file from…I tried copying it to the root directory of my osx server but it made no difference. Had a brief look to see if I could remove the path from undionly.kpxe? but that looks not so trivial…
          With my acer laptop that looks to be an entirely different issue, maybe the implementation of PXE on that isn’t compatible, as the requested TFTP filename seems screwed up with a string of appended bytes (the server address?). The [URL=‘https://drive.google.com/open?id=0B_kJyPnsAGFZMlJPZEVCaG85NnM&authuser=0’]Pcap for that is here[/URL], but that isn’t my main issue…
          Cheers

          Edit: Sorry - set the link for acer.pcap correctly now

          1 Reply Last reply Reply Quote 0
          • S
            Sebastian Roth Moderator
            last edited by

            Access rights…? Could it be that easy?? Why didn’t that come to my mind earlier?? Please post the output of ‘ls -al /tftboot’ on your OS X server!

            Edit: Sorry, I just re-read your postings and saw that you have successfully downloaded default.ipxe from other host via TFTP… right??

            Edit2: TFTP server’s root is /tftpboot. So ‘get /default.ipxe’ should translate to ‘/tftpboot/default.ipxe’ on the server. Does anyone know if Mac OS X is doing things different here?? Can’t find anything on the web about it… DEFAULT TFTP dir is: /private/tftpboot, right? ‘ls -al /private/tftpboot’ then…

            Edit 3: Both links to pcap files are the same… can’t see any new one for Acer

            Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

            Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

            1 Reply Last reply Reply Quote 0
            • T
              Tim Jackson
              last edited by

              [quote=“Uncle Frank, post: 44484, member: 28116”]Access rights…? Could it be that easy?? Why didn’t that come to my mind earlier?? Please post the output of ‘ls -al /tftboot’ on your OS X server!

              Edit: Sorry, I just re-read your postings and saw that you have successfully downloaded default.ipxe from other host via TFTP… right??

              Edit2: TFTP server’s root is /tftpboot. So ‘get /default.ipxe’ should translate to ‘/tftpboot/default.ipxe’ on the server. Does anyone know if Mac OS X is doing things different here?? Can’t find anything on the web about it… DEFAULT TFTP dir is: /private/tftpboot, right? ‘ls -al /private/tftpboot’ then…

              Edit 3: Both links to pcap files are the same… can’t see any new one for Acer[/quote]

              Yes - have successfully downloaded default.ipxe from the OSX server. The default is indeed /private/tftpboot. ls -la yields:
              drwxrwxrwx 24 root wheel 816 27 Mar 09:54 .
              drwxr-xr-x@ 8 root wheel 272 7 Jul 2014 …
              -rw-r–r–@ 1 root wheel 6148 29 Aug 2014 .DS_Store
              drwxrwxrwx 3 root wheel 102 18 Jul 2014 NetBoot
              -rwxrwxrwx@ 1 service wheel 2425 1 Oct 15:41 at800s.txt
              -rwxrwxrwx 1 service wheel 840 21 Nov 15:21 boot.txt
              -rwxrwxrwx 1 service wheel 295 21 Nov 15:21 default.ipxe
              drwxr-xr-x 5 root wheel 170 5 Mar 09:38 deploystudiopc
              -rw-r–r-- 1 service wheel 3605993 27 Mar 09:41 dump.pcap
              drwxrwxrwx 8 root wheel 272 27 Feb 14:27 fog
              -rwxrwxrwx 1 service wheel 389009 21 Nov 15:21 ipxe.kkpxe
              -rwxrwxrwx 1 service wheel 389057 21 Nov 15:21 ipxe.kpxe
              -rwxrwxrwx 1 service wheel 388044 21 Nov 15:21 ipxe.krn
              -rwxrwxrwx 1 service wheel 389073 21 Nov 15:21 ipxe.pxe
              -rwxrwxrwx 1 service wheel 25340 21 Nov 15:21 memdisk
              drwxr-xr-x 13 root wheel 442 5 Mar 09:38 pxelinux
              -rwxrwxrwx 1 root wheel 16794 20 Dec 2013 pxelinux.0
              -rwxrwxrwx 1 service wheel 16794 21 Nov 15:21 pxelinux.0.old
              -rwxrwxrwx 1 service wheel 165088 21 Nov 15:21 snponly.efi
              -rwxrwxrwx 1 service wheel 101989 21 Nov 15:21 undionly.kkpxe
              -rwxrwxrwx 1 service wheel 102037 21 Nov 15:21 undionly.kpxe
              -rwxrwxrwx 1 service wheel 382650 21 Nov 15:21 undionly.kpxe.INTEL
              -rwxrwxrwx 1 service wheel 102053 21 Nov 15:21 undionly.pxe
              -rwxrwxrwx 1 service wheel 147728 21 Nov 15:21 vesamenu.c32

              Haven’t cleaned it up since migrating from 0.32…
              Edit: Also I’ve set the Acer.pcap link correctly now I think…
              Edit2: Also my OSX tftp server uses the insecure (-i) parameter - caused me no end of grief before getting 0.32 working…
              Edit3: I can set the path on the TFTP server so maybe I should try it with /tftpboot (copying everything first of course)?
              Cheers

              1 Reply Last reply Reply Quote 0
              • S
                Sebastian Roth Moderator
                last edited by

                Did you ever try to download ‘/default.ipxe’ (WITH slash!) from another PC??

                Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                1 Reply Last reply Reply Quote 0
                • T
                  Tim Jackson
                  last edited by

                  [quote=“Uncle Frank, post: 44487, member: 28116”]Did you ever try to download ‘/default.ipxe’ (WITH slash!) from another PC??[/quote]

                  Good Point. Just tried this and it fails…Error on server ??? Connect request failed
                  I’m guessing that the OSX Tftp server does attempt to get from the root directory but because it’s outside /private/tftpboot it fails. I’ll try moving my tftp default directory to /tftpboot but that will probably fail for the same reason I imagine…

                  1 Reply Last reply Reply Quote 0
                  • T
                    Tim Jackson
                    last edited by

                    OK tried setting the default to /tftpboot and it had no effect - same problem occurs. If I read it right, reading the [URL=‘https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/tftpd.8.html’]man page for tftpd[/URL] it looks like using “/” in the file name will definitely get refused by the OSX tftp server unfortunately. Can’t quite see a way around this.

                    Edit: Success! But nervous of the cost. I fixed it by allowing the TFTP server access to “/” and making a symlink there to /tftpboot/default.ipxe. But that does allow TFTP access to the root directory of my OSX server…as I’m the only one imaging perhaps I’ll turn off TFTP access unless I’m using it…

                    1 Reply Last reply Reply Quote 0
                    • S
                      Sebastian Roth Moderator
                      last edited by

                      Great to hear. No need to open up your whole system and symlink files if you go ahead and build you own custom undionly.kpxe binary… [url]http://fogproject.org/forum/threads/build-ipxe-from-source.10152/[/url]

                      Follow those steps. Maybe it’s a coincidence but in this post Tom suggests building the embedded script without the leading slash!!

                      Maybe Tom can tell us why the official binaries are build with ‘/default.ipxe’…

                      Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                      Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                      1 Reply Last reply Reply Quote 0
                      • Tom ElliottT
                        Tom Elliott
                        last edited by

                        They were not built with the leading slash. All it does is chain to default.ipxe in 1.2.0. Most systems worked fine but on occasion some systems what the protocol implicitly defined which is what you see now on the development fog.

                        Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.

                        Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                        Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                        1 Reply Last reply Reply Quote 0
                        • D
                          datastream
                          last edited by

                          I am having the same issue with the default.ipxe permission denied error. I have gotten one client to successfully boot and inventory. It got the error but booted on the next try. I have had four more though that fail no matter what. I am new to fog and it is a fresh install on ubuntu 12.04. Is there any answer on fixing this issue?

                          Wayne WorkmanW 1 Reply Last reply Reply Quote 0
                          • Wayne WorkmanW
                            Wayne Workman @datastream
                            last edited by

                            @datastream It’s weird that it’s inconsistent… Are the ones that succeeded and the ones that failed the same model or different models?

                            Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
                            Daily Clean Installation Results:
                            https://fogtesting.fogproject.us/
                            FOG Reporting:
                            https://fog-external-reporting-results.fogproject.us/

                            1 Reply Last reply Reply Quote 0
                            • D
                              datastream
                              last edited by

                              They are all the same model. I tried a couple more and I can only get the one to PXE boot. The rest give me that same error.

                              Wayne WorkmanW 1 Reply Last reply Reply Quote 0
                              • Wayne WorkmanW
                                Wayne Workman @datastream
                                last edited by Wayne Workman

                                @datastream What’s different about that one? Something special about that port on the switch? Is there a difference in BIOS settings?

                                Also, the problem you’re describing smells a lot like an IP conflict.

                                Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
                                Daily Clean Installation Results:
                                https://fogtesting.fogproject.us/
                                FOG Reporting:
                                https://fog-external-reporting-results.fogproject.us/

                                1 Reply Last reply Reply Quote 0
                                • D
                                  datastream
                                  last edited by

                                  Well that was dumb of me. I rebooted the server and everything is working now.

                                  1 Reply Last reply Reply Quote 1
                                  • 1 / 1
                                  • First post
                                    Last post

                                  245

                                  Online

                                  12.0k

                                  Users

                                  17.3k

                                  Topics

                                  155.2k

                                  Posts
                                  Copyright © 2012-2024 FOG Project