yahoo-eng-team team mailing list archive

[Tobias <1456335@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

The executable neutron-vpn-netns-wrapper (path /usr/bin/neutron-vpn-
netns-wrapper) in Ubuntu 14.04 packages is missing for OpenStack Kilo.

I tried to enable VPNaaS with StrongSwan and it failed with this error message:
2015-05-18 19:20:41.510 3254 TRACE neutron_vpnaas.services.vpn.device_drivers.ipsec Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qrouter-0b4c88fa-4944-45a7-b1b3-fbee1d7fc2ac neutron-vpn-netns-wrapper --mount_paths=/etc:/var/lib/neutron/ipsec/0b4c88fa-4944-45a7-b1b3-fbee1d7fc2ac/etc,/var/run:/var/lib/neutron/ipsec/0b4c88fa-4944-45a7-b1b3-fbee1d7fc2ac/var/run --cmd=ipsec,start (no filter matched)

After copying the content of neutron-vpn-netns-wrapper from the Fedora
repository VPNaaS with StrongSwan worked.

The content of the vpn-netns-wrapper:

#!/usr/bin/python2
# PBR Generated from u'console_scripts'

import sys

from neutron_vpnaas.services.vpn.common.netns_wrapper import main


if __name__ == "__main__":
    sys.exit(main())

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: vpnaas

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1456335

Title:
  neutron-vpn-netns-wrapper missing in Ubuntu Package

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  The executable neutron-vpn-netns-wrapper (path /usr/bin/neutron-vpn-
  netns-wrapper) in Ubuntu 14.04 packages is missing for OpenStack Kilo.

  I tried to enable VPNaaS with StrongSwan and it failed with this error message:
  2015-05-18 19:20:41.510 3254 TRACE neutron_vpnaas.services.vpn.device_drivers.ipsec Stderr: /usr/bin/neutron-rootwrap: Unauthorized command: ip netns exec qrouter-0b4c88fa-4944-45a7-b1b3-fbee1d7fc2ac neutron-vpn-netns-wrapper --mount_paths=/etc:/var/lib/neutron/ipsec/0b4c88fa-4944-45a7-b1b3-fbee1d7fc2ac/etc,/var/run:/var/lib/neutron/ipsec/0b4c88fa-4944-45a7-b1b3-fbee1d7fc2ac/var/run --cmd=ipsec,start (no filter matched)

  After copying the content of neutron-vpn-netns-wrapper from the Fedora
  repository VPNaaS with StrongSwan worked.

  The content of the vpn-netns-wrapper:

  #!/usr/bin/python2
  # PBR Generated from u'console_scripts'

  import sys

  from neutron_vpnaas.services.vpn.common.netns_wrapper import main

  
  if __name__ == "__main__":
      sys.exit(main())

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1456335/+subscriptions