pxe boot with tftpd-hpa failed with error: Forbidden Directory

[Dmitry Ljautov]

Binary package hint: tftpd-hpa

lsb_release -rd
Description: Ubuntu lucid (development branch)
Release: 10.04
apt-cache policy tftpd-hpa
tftpd-hpa:
  Installed: 5.0-11ubuntu1

After migrating from karmic to lucid tftpd-hpa failed with error: Forbidden Directory.

Inserting "-s" before ${TFTP_DIRECTORY} in /etc/init.d/tftpd-hpa solved problem.
Please fix it...

[Dustin Kirkland  (kirkland)]

Which line are you talking about?

        if [ ! -d "${TFTP_DIRECTORY}" ]

perhaps?

[Dustin Kirkland  (kirkland)]

What is your TFTP directory set to?

[Dmitry Ljautov (dljautov)]

# cat /etc/default/tftpd-hpa
#Defaults for tftpd-hpa
TFTP_USERNAME="tftp"
TFTP_DIRECTORY="/var/pxe"
TFTP_ADDRESS="0.0.0.0:69"
TFTP_OPTIONS="-l -vvvvvvvvvv -B 512 -r blksize2 -m /etc/default/tftpd.rules"

do_start function in /etc/init.d/tftpd-hpa before fixing:

do_start()
{
        if [ ! -d "${TFTP_DIRECTORY}" ]
        then
                echo "${TFTP_DIRECTORY} missing, aborting."
                exit 1
        fi

        start-stop-daemon --start --quiet --oknodo --exec ${DAEMON} -- \
                --listen --user ${TFTP_USERNAME} --address ${TFTP_ADDRESS} \
                ${TFTP_OPTIONS} ${TFTP_DIRECTORY}
}

do_start function in /etc/init.d/tftpd-hpa after fixing:
o_start()
{
        if [ ! -d "${TFTP_DIRECTORY}" ]
        then
                echo "${TFTP_DIRECTORY} missing, aborting."
                exit 1
        fi

        start-stop-daemon --start --quiet --oknodo --exec ${DAEMON} -- \
                --listen --user ${TFTP_USERNAME} --address ${TFTP_ADDRESS} \
                ${TFTP_OPTIONS} -s ${TFTP_DIRECTORY}
}

[TJ (tj)]

This appears to be the same issue as my report of failed PXE in bug #544377 "PXE Error: Only absolute filenames allowed" and is caused by the tftpd-hpa daemon not being started with --secure (-s) mode.

I added it to /etc/default/tftpd-hpa:

TFTP_OPTIONS="-s"

[Launchpad Janitor (janitor)]

This bug was fixed in the package tftp-hpa - 5.0-11ubuntu2

---------------
tftp-hpa (5.0-11ubuntu2) lucid; urgency=low

  * debian/rules, debian/tftpd-hpa.upstart: Convert to upstart.
    (LP: #522509)
  * debian/tftpd-hpa.postinst: Add "-s" to /etc/default/tftpd-hpa.
    (LP: #531123)
 -- Chuck Short <email address hidden> Thu, 11 Mar 2010 12:40:07 -0500

[Jakob Unterwurzacher (jakobunt)]

Upgraded right now from 9.10 and hit this - NOT FIXED for this case!