#5637 closed defect (duplicate)

Reconfigure with an unusable lease back end, leaves the server in a non-working state (no rollback)

Reported by: tmark Owned by:
Priority: medium Milestone: Kea1.5
Component: configuration Version: git
Keywords: Cc:
CVSS Scoring: Parent Tickets:
Sensitive: no Defect Severity: N/A
Sub-Project: DHCP Feature Depending on Ticket:
Estimated Difficulty: 0 Add Hours to Ticket: 0
Total Hours: 0 Internal?: no

Description

A running kea-dhcpX server can be rendered non-functional by issuing a reconfigure (either by command or signal) with a configuration containing
a flawed lease back end specifications or to back end which cannot be reached.

After successfully parsing the configuration, the server attempts to connect to the new lease back end. This causes the LeaseMgrFactory? to close the existing instance and subsequently fails to open a new one. The server will emit a log message that states reconfiguration has failed and at this point it will no longer process client packets.

A simple scenario:

  1. start server with memfile lease back end
  2. verify server hands out leases
  3. change configuration to MySQL back end with an invalid database or user name
  4. issue reconfig command
  5. verify server does not see or acknowledge packets

The basic issue is the LeaseMgrFactory? only permits one instance to exist. There is no "Staged" instance and we do not restore the one we closed. We probably don't handle host back ends any differently.

Subtickets

Change History (2)

comment:1 Changed 18 months ago by tomek

  • Milestone changed from Kea-proposed to Kea1.5

comment:2 Changed 15 months ago by tomek

  • Resolution set to duplicate
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.