#5631 Undefined address for Socket::pack_sockaddr_in at /usr/share/webmin/miniserv.pl line 497

[Jaap van Wingerde]

After dist-upgrading to Debian 12 Bookworm, Webmin version 2.101 is not starting anymore.

Error messages:

• authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=root
• miniserv.pl[3958]: Undefined address for Socket::pack_sockaddr_in at /usr/share/webmin/miniserv.pl line 497
• The process' exit code is exited and its exit status is 29

Jaap@chanchala:~$ sudo webmin -v
**2.101**
jaap@chanchala:~$ sudo systemctl stop  webmin
jaap@chanchala:~$ sudo systemctl restart webmin
Job for webmin.service failed because the control process exited with error code.
See "systemctl status webmin.service" and "journalctl -xeu webmin.service" for details.
jaap@chanchala:~$ sudo systemctl status webmin
● webmin.service - Webmin server daemon
     Loaded: loaded (/lib/systemd/system/webmin.service; disabled; preset: enabled)
     Active: activating (start) since Sun 2023-08-13 16:45:34 UTC; 2s ago
Cntrl PID: 3894 (miniserv.pl)
      Tasks: 1 (limit: 1108)
     Memory: 9.4M
        CPU: 130ms
     CGroup: /system.slice/webmin.service
             └─3894 /usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
Aug 13 16:45:34 chanchala systemd[1]: Stopped webmin.service - Webmin server daemon.
Aug 13 16:45:34 chanchala systemd[1]: Starting webmin.service - Webmin server daemon...
Aug 13 16:45:34 chanchala perl[3894]: pam_unix(webmin:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=  user=root

jaap@chanchala:~$ sudo journalctl -xeu webmin.service
░░ the configured Restart= setting for the unit.
Aug 13 16:46:09 chanchala systemd[1]: Stopped webmin.service - Webmin server daemon.
░░ Subject: A stop job for unit webmin.service has finished
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ A stop job for unit webmin.service has finished.
░░ The job identifier is 16322 and the job result is done.
Aug 13 16:46:09 chanchala systemd[1]: Starting webmin.service - Webmin server daemon...
░░ Subject: A start job for unit webmin.service has begun execution
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ A start job for unit webmin.service has begun execution.
░░ The job identifier is 16322.
Aug 13 16:46:10 chanchala perl[3958]: pam_unix(webmin:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=  user=root
Aug 13 16:46:12 chanchala webmin[3958]: Webmin starting
Aug 13 16:46:12 chanchala miniserv.pl[3958]: Undefined address for Socket::pack_sockaddr_in at /usr/share/webmin/miniserv.pl line 497.
Aug 13 16:46:12 chanchala systemd[1]: webmin.service: Control process exited, code=exited, status=29/n/a
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ An ExecStart= process belonging to unit webmin.service has exited.
░░ The process' exit code is 'exited' and its exit status is 29.
Aug 13 16:46:12 chanchala systemd[1]: webmin.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ The unit webmin.service has entered the 'failed' state with result 'exit-code'.
Aug 13 16:46:12 chanchala systemd[1]: Failed to start webmin.service - Webmin server daemon.
░░ Subject: A start job for unit webmin.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░ A start job for unit webmin.service has finished with a failure.
░░ The job identifier is 16322 and the job result is failed.
jaap@chanchala:~$

[Jaap van Wingerde]

Deleting the empty file /var/webmin/blocked does not help. It gets recreated.

jaap@chanchala:~$ sudo ls -al /var/webmin/blocked
-rwx------ 1 root root 0 Aug 13 19:50 /var/webmin/blocked
jaap@chanchala:~$

[Jamie Cameron]

Can you post your /etc/webmin/miniserv.conf file?

[Jaap van Wingerde]

## changed
port=10000
root=/usr/share/webmin
mimetypes=/usr/share/webmin/mime.types
addtype_cgi=internal/cgi
realm=Webmin Server
logfile=/var/webmin/miniserv.log
errorlog=/var/webmin/miniserv_error.log
pidfile=/var/webmin/miniserv.pid
logtime=168
##ssl=1
ssl=0
no_ssl2=1
no_ssl3=1
ssl_honorcipherorder=1
no_sslcompression=1
env_WEBMIN_CONFIG=/etc/webmin
env_WEBMIN_VAR=/var/webmin
atboot=1
logout=/etc/webmin/logout-flag
listen=10000
denyfile=\.pl$
log=1
##blockhost_failures=5
##blockhost_time=60
syslog=1
##ipv6=1
ipv6=0
session=1
premodules=WebminCore
server=MiniServ/2.101
userfile=/etc/webmin/miniserv.users
keyfile=/etc/webmin/miniserv.pem
passwd_file=/etc/shadow
passwd_uindex=0
passwd_pindex=1
passwd_cindex=2
passwd_mindex=4
passwd_mode=0
preroot=authentic-theme
passdelay=1
logout_script=/etc/webmin/logout.pl
cipher_list_def=1
login_script=/etc/webmin/login.pl
failed_script=/etc/webmin/failed.pl
sudo=1

###toegevoegd
cookiepath=/webmin
bind=127.0.0.1 10.203.122.2

[Jamie Cameron]

Is the IP address 10.203.122.2 still active on your system? From the error, it looks like it might not be ..

[Jaap van Wingerde]

jaap@chanchala:~$ sudo ip link show
[sudo] password for jaap:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether ... brd ff:ff:ff:ff:ff:ff
    altname enp0s3
3: tun122: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN mode DEFAULT group default qlen 500
    link/none
jaap@chanchala:~$ sudo ip route show
default via ... dev ens3
10.203.111.2 via 10.203.122.1 dev tun122
10.203.122.1 dev tun122 proto kernel scope link src 10.203.122.2
10.203.133.2 via 10.203.122.1 dev tun122
10.203.144.2 via 10.203.122.1 dev tun122
10.203.180.0/24 via 10.203.122.1 dev tun122
...24 dev ens3 proto kernel scope link src 136.144.222.168
jaap@chanchala:~$ ping 10.203.122.1
PING 10.203.122.1 (10.203.122.1) 56(84) bytes of data.
64 bytes from 10.203.122.1: icmp_seq=1 ttl=64 time=12.7 ms
64 bytes from 10.203.122.1: icmp_seq=2 ttl=64 time=14.0 ms
64 bytes from 10.203.122.1: icmp_seq=3 ttl=64 time=14.0 ms
64 bytes from 10.203.122.1: icmp_seq=4 ttl=64 time=14.1 ms
^C
--- 10.203.122.1 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3003ms
rtt min/avg/max/mdev = 12.733/13.690/14.068/0.553 ms
jaap@chanchala:~$ ping 10.203.122.2
PING 10.203.122.2 (10.203.122.2) 56(84) bytes of data.
64 bytes from 10.203.122.2: icmp_seq=1 ttl=64 time=0.029 ms
64 bytes from 10.203.122.2: icmp_seq=2 ttl=64 time=0.058 ms
64 bytes from 10.203.122.2: icmp_seq=3 ttl=64 time=0.055 ms
64 bytes from 10.203.122.2: icmp_seq=4 ttl=64 time=0.048 ms
^C
--- 10.203.122.2 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3077ms
rtt min/avg/max/mdev = 0.029/0.047/0.058/0.011 ms
jaap@chanchala:~$

[Jamie Cameron]

Seems like that IP is on a different system? Try just removing that bind= line from miniserv.conf and then starting Webmin.

[Jaap van Wingerde]

> 10.203.122.1 dev tun122 proto kernel scope link src 10.203.122.2
IP 10.203.112.2 is local on tun122.

On other systems this runs good.

When I remove 10.203.122.2 from bind= webmin runs. But then I can only log in via the restricted proxy webserver. It is important to have the possibilty to log in via the vpn.

[Jaap van Wingerde]

Strange: on an other server in webmin.conf bind=127.0.0.1, restricted access via proxy webserver ánd access via vpn 10.203.111.2 is possible.

On an other server bind=10.203.133.2 works. The only access is via VPN.

[Jamie Cameron]

Wait did you edit that bind line manually? Because it only supports a single IP address currently..

[Jaap van Wingerde]

ah

[Jamie Cameron]

That said, we could support multiple bind addresses if this would be a useful feature?

[Jaap van Wingerde]

I think that is very useful. By the way, I do not understand why a bind to 127.0.0.1 makes it possible to contact on a vpn-port.

[Jamie Cameron]

Actually, you can configure Webmin to listen on multiple IP addresses at Webmin -> Webmin Configuration -> Ports and Addresses.