Network Unreachable - GPG - sources list

UCS - Univention Corporate Server
#1

Hello,
One of our servers had an interruption during an upgrade. The result is the typical SOURCES LIST problem which I suspect is related to a secure connection HTTPS or GPG problem. NevertheLess, I am having problem connecting to the repositories servers.




updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://appcenter.software-univention.de/univention-repository/4.1/maintained/component/oxseforucs_20160421/all/Packages  Cannot initiate the connection to appcenter.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.0/maintained/4.0-3/all/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.0/maintained/4.0-3/i386/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.0/maintained/4.0-4/all/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.0/maintained/4.0-4/i386/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.0/maintained/4.0-5/all/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.0/maintained/4.0-5/i386/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.1/maintained/4.1-0/all/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://updates.software-univention.de/4.1/maintained/4.1-0/i386/Packages  Cannot initiate the connection to updates.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

W: Failed to fetch http://appcenter.software-univention.de/univention-repository/4.0/maintained/component/oxseforucs_20160421/all/Packages  Cannot initiate the connection to appcenter.software-univention.de:80 (2a01:4f8:151:6489::2). - connect (101: Network is unreachable)

E: Some index files failed to download. They have been ignored, or old ones used instead.
root@mail:/etc/apt/sources.list.d# ping updates.software-univention.de
PING updates.software-univention.de (176.9.114.147) 56(84) bytes of data.
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=1 ttl=49 time=326 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=2 ttl=49 time=295 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=3 ttl=49 time=305 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=4 ttl=49 time=265 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=5 ttl=49 time=325 ms
           As you can see after issuing  apt-get update  the machine throws that error  "Network is unreachable"   which is not true since  I can ping it.        There is also this address number that pops up when trying to connect  (2a01:4f8:151:6489::2) 



            Can you please me point me to the steps to recreate a valid  SOURCES.LIST

thanks,

Rolando Riley

Errors upgrading to 4.2
#2

Do you knwo you’re old thread? Please check it and provide the same informations. Also a log of the interrupted update would be nice. You should find it in /var/log/univention/updater.log

#3

Hi SirTux,
Yes I know I am old thread. I found something additional . I can ping your servers, but when I try to telnet port 80 I am able to replicate the problem. Seems this is related to a network layer; not an application layer.

===========

root@mail:/etc/apt/sources.list.d# telnet updates.software-univention.de 80
Trying 2a01:4f8:151:6489::2…
telnet: connect to address 2a01:4f8:151:6489::2: Network is unreachable
root@mail:/etc/apt/sources.list.d# ping updates.software-univention.de
PING updates.software-univention.de (176.9.114.147) 56(84) bytes of data.
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=2 ttl=49 time=249 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=4 ttl=49 time=232 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=6 ttl=49 time=224 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=10 ttl=49 time=245 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=11 ttl=49 time=226 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=12 ttl=49 time=196 ms
64 bytes from download2.software-univention.de (176.9.114.147): icmp_req=13 ttl=49 time=284 ms

                 Seems my ip is  being filtered on your end.    See bellow test from other server on my network

======
infadmin@mail:~$ telnet updtates.software-univention.de 80
Trying 176.9.114.147…
Connected to updtates.software-univention.de.
Escape character is ‘^]’.
Connection closed by foreign host.

                    Updater log is attached

Rolando Riley
updaterlog.txt (252 KB)

#4

Yes it’s the network layer, I should have recognized it earlier. It tries to access over IPv6, but the IPv6-configuration seems to be broken (do you have IPv6 really?).

You can check it:

ping6 updates.software-univention.de
ping6 google.com
#5

Negative. I don’t use Ipv6. What could be the UCR variable that is forcing ipv6?

Rolando Riley

#6

I don’t know. Whats your current network configuration? Please paste the output of

ifconfig
route
traceroute6 updates.software-univention.de
#7

root@mail:~# ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:21:5a:d9:e3:7e
inet addr:192.168.1.14 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::221:5aff:fed9:e37e/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:7523188 errors:0 dropped:37832 overruns:0 frame:0
TX packets:12287760 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:844758887 (805.6 MiB) TX bytes:12603568129 (11.7 GiB)

eth1 Link encap:Ethernet HWaddr 00:21:5a:d9:e3:7c
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:1749788 errors:0 dropped:0 overruns:0 frame:0
TX packets:1749788 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:815557072 (777.7 MiB) TX bytes:815557072 (777.7 MiB)

======================

root@mail:~# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
root@mail:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default fg50.infreserve 0.0.0.0 UG 0 0 0 eth0
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0

Traceroute to ANY OTHER than UPDATES UNIVENTION (traceroute and traceroute6)

root@mail:~# traceroute6 cwpanama.com
cwpanama.com: Name or service not known
Cannot handle “host” cmdline arg `cwpanama.com’ on position 1 (argc 1)
root@mail:~# traceroute www.cwpanama.com
traceroute to www.cwpanama.com (201.224.58.241), 30 hops max, 60 byte packets
1 fg50.infreserve.net (192.168.1.1) 1.686 ms 1.580 ms 1.525 ms
2 10.0.0.1 (10.0.0.1) 3.053 ms 3.240 ms 3.342 ms
3 190.35.126.33 (190.35.126.33) 8.789 ms 8.835 ms 8.854 ms
4 10.8.148.53 (10.8.148.53) 28.308 ms 28.327 ms 28.345 ms
5 10.255.5.37 (10.255.5.37) 28.385 ms 28.391 ms 28.420 ms
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 *^C

TRACEROUTE TO Updates Univention ( traceroute and traceroute6)

root@mail:~# traceroute6 updates.software-univention.de
traceroute to updates.software-univention.de (2a01:4f8:151:6489::2), 30 hops max, 80 byte packets
connect: Network is unreachable
root@mail:~# traceroute updates.software-univention.de
traceroute to updates.software-univention.de (2a01:4f8:151:6489::2), 30 hops max, 80 byte packets

#8

Hey SirTux,
Look at this if I do telnet www.software-univention.de it works!.

========
root@mail:/etc/network# telnet updates.software-univention.de 80
Trying 2a01:4f8:151:6489::2…
telnet: connect to address 2a01:4f8:151:6489::2: Network is unreachable

root@mail:/etc/network# telnet www.software-univention.de 80
Trying 176.9.114.147…
Connected to www.software-univention.de.
Escape character is ‘^]’.

root@mail:/etc/network# telnet gmail.com 80
Trying 216.58.219.101…
Connected to gmail.com.
Escape character is ‘^]’.

root@mail:/etc/network# telnet ldb.open-xchange.com 80
Trying 153.92.65.56…
Connected to ldb.open-xchange.com.
Escape character is ‘^]’.

========

Rolando

=========

#9

Hi,

it looks like disabling or fixing IPv6 on eth0 should solve the problem.

Best Regards,
Dirk Ahrnke

4.1 to 4.2 upgrade niggles
4.1 to 4.2 upgrade niggles
#10

Hello,
No need to touch ipV6. The following UCR set solved the problem

root@smtp:~# ucr get repository/online/server
https://updates.software-univention.de/
root@smtp:~# ucr set repository/online/server=http://updates.software-univention

thanks

Rolando

#11

Hi guys.

I am facing a similar problem and unable to update from 4.4-3 to 4.4.-4

log of update log:

    assert self.server.access(None, '/univention-repository/')
  File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 709, in access
    raise ConfigurationError(uri, reason)
ConfigurationError: Configuration error: host is unresolvable
21.05.20 22:42:06.521  DEBUG_INIT
**** Starting univention-updater with parameter=['/usr/share/univention-updater/univention-updater', 'net', '--updateto', '4.4-4']
Version=4.4
Patchlevel=3
starting net mode
Error: Update aborted due to configuration error: Configuration error: host is unresolvable

content of 15_ucs-online-version.list

# An error occurred during the repository check. The error message:
#   Traceback (most recent call last):
#     File "<stdin>", line 16, in <module>
#     File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 1533, in print_version_repositories
#       for server, ver in self._iterate_version_repositories(start, end, self.parts, self.architectures, dists):
#     File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 1460, in _iterate_version_repositori$
#       for ver in self._iterate_versions(struct_pool, start, end, parts, ['all'] + archs, server):
#     File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 1416, in _iterate_versions
#       assert server.access(ver)  # patchlevel
#     File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 709, in access
#       raise ConfigurationError(uri, reason)
#   ConfigurationError: Configuration error: Network is unreachable
#

# After fixing this issue, you should rewrite this file with the following command:
#   univention-config-registry commit /etc/apt/sources.list.d/15_ucs-online-version.list
#

content of 20_ucs-online-component.list

# An error occurred during the repository check. The error message:
#   Traceback (most recent call last):
#     File "<stdin>", line 13, in <module>
#     File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 841, in __init__
#       self.ucr_reinit()
#     File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 924, in ucr_reinit
#       assert self.server.access(None, '')
#     File "/usr/lib/python2.7/dist-packages/univention/updater/tools.py", line 709, in access
#       raise ConfigurationError(uri, reason)
#   ConfigurationError: Configuration error: Network is unreachable
#

# After fixing this issue, you should rewrite this file with the following command:
#   univention-config-registry commit /etc/apt/sources.list.d/20_ucs-online-component.list

I am also facing network unreachable when I try to add new apps or update apps within the web interface.

I have no clue why this is happening and spent more than 4 hours with no luck…

I do appreciate the assistance guys.

1 Like
Mastodon