Univention Bugzilla – Bug 53558
Veyon crashes if iTALC Client in Computerroom
Last modified: 2022-07-15 08:31:11 CEST
If a client is not switched from iTalk to Veyon f.e. opsi rollout failed on this client, the Veyon proxy and the computerroom module will crash or become not responsive. You need to restart both services. The Veyon proxy app should be robust enough to handle a non Veyon speaking client. Simply ignore would work, excellent would be a pop up like "Client XY is not configured using Veyon. Please check. Will ignore this client(s)" Happened in two customer environments already.
@patrick: we should check whether this can be fixed upstream
From my ticket I got the now attached docker.log. The same buffer overflow seems to be logged in kern.log as Daniel mentioned in the other pointed ticket. I will try to reproduce that in my test environment to get more logs and closer details as f.e. network traffic log.
Created attachment 10801 [details] docker.log
An updated Veyon WebAPI Proxy Docker container is available for testing. Please pull veyon/webapi-proxy:4.5.7.17 and check whether it fixes the issue when connecting to computers running the iTALC server. It contains several improvements to handle protocol errors during the authentication stage more reliably (see today's commits at https://github.com/veyon/veyon/commits/4.5) and even reports protocol mismatches via a new WebAPI error code (ProtocolMismatch=12 with HTTP status code 501). This new error code can be used to indicate Veyon deployment issues in the computer room module. BTW the container no longer is based on Ubuntu 20.04. Instead debian:bullseye-slim is used as base image.
- 5.0 MR https://git.knut.univention.de/univention/ucsschoo/-/merge_requests/120 - remove veyon session if it becomes invalid (e.g. after a docker restart ...) - spread update over time in run() - added 92_ucsschool-veyon (currently unused) - Veyon App - new version 4.4/ucsschool-veyon-proxy=4.6.0.0-0 (UCS 4.4 and 5.0) - based on veyon/webapi-proxy:4.6.0.0 - new app setting `veyon/WebAPI/ConnectionLimit` for the connection limit conf, new default 200 (instead of 5000), *.settings - new configure_host script to apply app settings - in the preinst we now so `--restart unless-stopped` for the app, so that after a crash the container is restarted
successful build Package: ucs-school-umc-computerroom Version: 12.0.11A~5.0.0.202206301342 Branch: ucs_5.0-0 Scope: ucs-school-5.0
QA -> all ok verify changelog ok advisory ok code ok jenkins happy manual testing ok I ran the provided test script: up to 200 connections are ok. With veyon/WebAPI/ConnectionLimit=200 the veyon webapi now returns 429. After a crash, the container is restarted.
UCS@school 5.0 v2 has been released. https://docs.software-univention.de/changelog-ucsschool-5.0v2-de.html If this error occurs again, please clone this bug.