[RPKI] "Permission denied (13)" rsync errors

[Compton, Rich A]

Hi, yes, all outbound traffic is permitted.  The rsync commands when launched by routinator seem to work fine when I start it from the command line but the rsync commands get that error “Permission denied (13)” and seem to fail when routinator is launched by systemd.

From: Martin Hoffmann <martin at nlnetlabs.nl>
Date: Wednesday, March 4, 2020 at 4:23 AM
To: "Compton, Rich A" <Rich.Compton at charter.com>
Cc: Alex Band <alex at nlnetlabs.nl>, "rpki at lists.nlnetlabs.nl" <rpki at lists.nlnetlabs.nl>
Subject: Re: [RPKI] "Permission denied (13)" rsync errors

Hi Rich!


On 3 Mar 2020, at 23:52, Compton, Rich A via RPKI <rpki at lists.nlnetlabs.nl<mailto:rpki at lists.nlnetlabs.nl>> wrote:

Hi, yeah, I am starting routinator with a systemd script on Centos7.  I think there is an issue with the rsync commands that are launched by routinator that prevent rsync from successfully putting files into the ".rpki-cache/repository/" directories.

From your errors, RRDP works fine, so permission in that directory shouldn’t be the error.

Rsync seems to complain about socket errors and not being allowed to connect. This may be a firewall issue. Rsync uses port 873. Is your machine allowed to connect out for that?

Kind regards,
Martin


E-MAIL CONFIDENTIALITY NOTICE: 
The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/rpki/attachments/20200304/d28a5688/attachment.htm>