<div dir="ltr"><div class="gmail_default" style="font-size:small">I feel like I had a similar error message when the firewall on my system was not allowing the traffic.</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">Another possibility would be selinux if you have that enabled.</div><div class="gmail_default" style="font-size:small"><br></div><div class="gmail_default" style="font-size:small">--Dan<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Mar 8, 2022 at 11:24 AM Dustin Berube <<a href="mailto:dustin.berube@gmail.com">dustin.berube@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr">Thanks Chad & Bob, I'm replying to the list to update the thread. I double checked the permissions and went ahead as a test and ran kea as root and I'm still getting the same error. <div><br></div><div>ps aux | grep kea<br>root 13707 0.0 1.2 44312 25060 ? Ss 17:17 0:00 /usr/sbin/kea-dhcp4 -c /etc/kea/kea-dhcp4.conf<br></div><div><br></div><div>getcap /usr/sbin/kea-dhcp4<br>/usr/sbin/kea-dhcp4 = cap_net_bind_service,cap_net_raw+ep<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Mar 8, 2022 at 10:46 AM Chad Catlett <> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>On 3/8/22 08:54, Dustin Berube wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello,
<div><br>
</div>
<div>I'm running into an issue with Kea that I am unable to send
the DHCPOFFER packet to the client. After enabling debug I see
that I'm getting a permission denied error. The server is
running Ubuntu 20.04, I've tried the isc-kea packages for both
2.0.1 and 2.0.2 with the same results. Does anyone have any
suggestions on what to try? </div>
<div><br>
</div>
<div>2022-03-08 14:09:14.872 DEBUG
[kea-dhcp4.packets/6691.140535278995904] DHCP4_BUFFER_RECEIVED
received buffer from <a href="http://10.201.1.6:67" target="_blank">10.201.1.6:67</a> to <a href="http://10.201.1.2:67" target="_blank">10.201.1.2:67</a>
over interface ens192<br>
2022-03-08 14:09:14.872 DEBUG
[kea-dhcp4.options/6691.140535278995904] DHCP4_BUFFER_UNPACK
parsing buffer received from 10.201.1.6 to 10.201.1.2 over
interface ens192<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.packets/6691.140535278995904] DHCP4_PACKET_RECEIVED
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: DHCPDISCOVER
(type 1) received from 10.201.1.6 to 10.201.1.2 on interface
ens192<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.packets/6691.140535278995904] DHCP4_QUERY_DATA
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20, packet details:
local_address=<a href="http://10.201.1.2:67" target="_blank">10.201.1.2:67</a>, remote_address=<a href="http://10.201.1.6:67" target="_blank">10.201.1.6:67</a>,
msg_type=DHCPDISCOVER (1), transid=0x20,<br>
options:<br>
type=012, len=010: "esx-01-ilo" (string)<br>
type=050, len=004: 10.201.1.10 (ipv4-address)<br>
type=053, len=001: 1 (uint8)<br>
type=055, len=015: 1(uint8) 2(uint8) 3(uint8) 4(uint8)
6(uint8) 15(uint8) 28(uint8) 33(uint8) 42(uint8) 43(uint8)
44(uint8) 58(uint8) 59(uint8) 100(uint8) 101(uint8)<br>
type=060, len=007: "CPQRIB3" (string)<br>
type=061, len=010: 00:94:40:c9:40:f4:5c:00:00:00<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.dhcpsrv/6691.140535278995904]
DHCPSRV_CFGMGR_SUBNET4_ADDR selected subnet <a href="http://10.201.1.0/24" target="_blank">10.201.1.0/24</a>
for packet received by matching address 10.201.1.6<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.packets/6691.140535278995904] DHCP4_SUBNET_SELECTED
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: the subnet with
ID 1 was selected for client assignments<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.packets/6691.140535278995904] DHCP4_SUBNET_DATA
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: the selected
subnet details: <a href="http://10.201.1.0/24" target="_blank">10.201.1.0/24</a><br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.hosts/6691.140535278995904]
HOSTS_CFG_GET_ONE_SUBNET_ID_IDENTIFIER get one host with IPv4
reservation for subnet id 1, identified by hwaddr=9440C940F45C<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.hosts/6691.140535278995904]
HOSTS_CFG_GET_ALL_IDENTIFIER get all hosts with reservations
using identifier: hwaddr=9440C940F45C<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.hosts/6691.140535278995904]
HOSTS_CFG_GET_ALL_IDENTIFIER_HOST using identifier:
hwaddr=9440C940F45C, found host: hwaddr=9440C940F45C
ipv4_subnet_id=1 hostname=esx-01-ilo
ipv4_reservation=10.201.1.10 siaddr=(no) sname=(empty)
file=(empty) key=(empty) ipv6_reservations=(none)<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.hosts/6691.140535278995904]
HOSTS_CFG_GET_ALL_IDENTIFIER_COUNT using identifier
hwaddr=9440C940F45C, found 1 host(s)<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.hosts/6691.140535278995904]
HOSTS_CFG_GET_ONE_SUBNET_ID_IDENTIFIER_HOST using subnet id 1
and identifier hwaddr=9440C940F45C, found host:
hwaddr=9440C940F45C ipv4_subnet_id=1 hostname=esx-01-ilo
ipv4_reservation=10.201.1.10 siaddr=(no) sname=(empty)
file=(empty) key=(empty) ipv6_reservations=(none)<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.dhcp4/6691.140535278995904] DHCP4_CLASS_ASSIGNED
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: client packet
has been assigned to the following class(es): KNOWN<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.dhcp4/6691.140535278995904] DHCP4_CLASS_ASSIGNED
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: client packet
has been assigned to the following class(es): ALL,
VENDOR_CLASS_CPQRIB3, KNOWN<br>
2022-03-08 14:09:14.873 DEBUG
[kea-dhcp4.ddns/6691.140535278995904]
DHCP4_CLIENT_HOSTNAME_PROCESS [hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: processing
client's Hostname option<br>
2022-03-08 14:09:14.874 DEBUG
[kea-dhcp4.ddns/6691.140535278995904]
DHCP4_CLIENT_HOSTNAME_DATA [hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: client sent
Hostname option: esx-01-ilo<br>
2022-03-08 14:09:14.874 DEBUG
[kea-dhcp4.ddns/6691.140535278995904]
DHCP4_RESERVED_HOSTNAME_ASSIGNED [hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: server assigned
reserved hostname esx-01-ilo.flagler.cloud<br>
2022-03-08 14:09:14.874 DEBUG
[kea-dhcp4.dhcpsrv/6691.140535278995904]
DHCPSRV_MYSQL_GET_CLIENTID obtaining IPv4 leases for client ID
00:94:40:c9:40:f4:5c:00:00:00<br>
2022-03-08 14:09:14.874 DEBUG
[kea-dhcp4.dhcpsrv/6691.140535278995904]
DHCPSRV_MYSQL_GET_HWADDR obtaining IPv4 leases for hardware
address hwtype=1 94:40:c9:40:f4:5c<br>
2022-03-08 14:09:14.874 DEBUG
[kea-dhcp4.alloc-engine/6691.140535278995904]
ALLOC_ENGINE_V4_DISCOVER_HR client [hwtype=1
94:40:c9:40:f4:5c], cid=[00:94:40:c9:40:f4:5c:00:00:00],
tid=0x20 sending DHCPDISCOVER has reservation for the address
10.201.1.10<br>
2022-03-08 14:09:14.874 DEBUG
[kea-dhcp4.dhcpsrv/6691.140535278995904]
DHCPSRV_MYSQL_GET_ADDR4 obtaining IPv4 lease for address
10.201.1.10<br>
2022-03-08 14:09:14.875 INFO
[kea-dhcp4.leases/6691.140535278995904] DHCP4_LEASE_ADVERT
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: lease
10.201.1.10 will be advertised<br>
2022-03-08 14:09:14.875 DEBUG
[kea-dhcp4.options/6691.140535278995904] DHCP4_PACKET_PACK
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: preparing
on-wire format of the packet to be sent<br>
2022-03-08 14:09:14.875 DEBUG
[kea-dhcp4.packets/6691.140535278995904] DHCP4_PACKET_SEND
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: trying to send
packet DHCPOFFER (type 2) from <a href="http://10.201.1.2:67" target="_blank">10.201.1.2:67</a> to <a href="http://255.255.255.255:68" target="_blank">255.255.255.255:68</a>
on interface ens192<br>
2022-03-08 14:09:14.875 DEBUG
[kea-dhcp4.packets/6691.140535278995904] DHCP4_RESPONSE_DATA
[hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: responding with
packet DHCPOFFER (type 2), packet details: local_address=<a href="http://10.201.1.2:67" target="_blank">10.201.1.2:67</a>,
remote_address=<a href="http://255.255.255.255:68" target="_blank">255.255.255.255:68</a>,
msg_type=DHCPOFFER (2), transid=0x20,<br>
options:<br>
type=001, len=004: 4294967040 (uint32)<br>
type=003, len=004: 10.201.1.1<br>
type=006, len=008: 10.203.255.11 10.203.255.12<br>
type=012, len=024: "esx-01-ilo.flagler.cloud" (string)<br>
type=015, len=013: "flagler.cloud" (string)<br>
type=042, len=004: 10.203.255.13<br>
type=051, len=004: 604800 (uint32)<br>
type=053, len=001: 2 (uint8)<br>
type=054, len=004: 10.201.1.2<br>
type=058, len=004: 64800 (uint32)<br>
type=059, len=004: 129600 (uint32)<br>
type=061, len=010: 00:94:40:c9:40:f4:5c:00:00:00<br>
2022-03-08 14:09:14.875 ERROR
[kea-dhcp4.packets/6691.140535278995904]
DHCP4_PACKET_SEND_FAIL [hwtype=1 94:40:c9:40:f4:5c],
cid=[00:94:40:c9:40:f4:5c:00:00:00], tid=0x20: failed to send
DHCPv4 packet: pkt4 send failed: sendmsg() returned with an
error: Permission denied<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Dustin</div>
</div>
<br>
<fieldset></fieldset>
</blockquote>
<p><br>
</p>
<p>Dustin,</p>
<p>Ensure that Kea is running proper permissions. Not being able to
send the offer makes me think Kea isn't running as root and needs
additional permissions to send raw packets. If running on Linux,
check out
<a href="https://kea.readthedocs.io/en/kea-2.0.2-doc/arm/install.html#running-kea-from-a-non-root-account-on-linux" target="_blank">https://kea.readthedocs.io/en/kea-2.0.2-doc/arm/install.html#running-kea-from-a-non-root-account-on-linux</a>.</p>
<p><br>
</p>
<p>Chad<br>
</p>
<pre cols="72">--
Chad Catlett
<br></pre>
</div>
</blockquote></div>
</div>
-- <br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
<br>
Kea-users mailing list<br>
<a href="mailto:Kea-users@lists.isc.org" target="_blank">Kea-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/kea-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/kea-users</a><br>
</blockquote></div>