Re: Help with directory mirror

[Roger Dingledine <arma@xxxxxxx>]

On Wed, Dec 05, 2007 at 10:51:46AM -0600, Eric C wrote:
> I need some help with a directory mirror that I already set up.

Ok.

> I have 3 directory mirrors set up, each having PublishServerDescriptor
> = 0 and DirPort and ORPort set. Let's call them DirectoryMirror1,
> DirectoryMirror2, DirectoryMirror3.

Ok.

> Then I have 3 of my own computers that I set up as Tor Onion Routers
> (servers). Let's call them Tor1, Tor2, and Tor3. Each of them have the
> correct DirServer lines pointing to DirectoryMirrorX.

I think you might misunderstand what DirServer is for. That config line
changes the directory authorities that Tor believes in. So if you put
DirServer lines pointing to DirectoryMirror{1,2,3}, then Tor will demand
networkstatus documents (or in 0.2.0, a consensus document) signed by
a majority of the DirServers.

Since you didn't talk above about setting AuthoritativeDirectory, which
you would do if you were actually trying to create your own separate Tor
network, I have to assume that the mirrors aren't making any networkstatus
documents, which means anybody who sets DirServer lines pointing to them
are going to have real problems finding enough dir info to make circuits.

> Now, I have a client with the DirServer lines pointing to
> DirectoryMirrorX and which tries to setup a circuit with TorX as a
> node in the circuit. This fails. Note that DirectoryMirrorX does have
> TorX in its cached-status.

It probably has TorX in its cached-status from back before you changed
the DirServer lines on TorX?

> However, if I have the client with the same DirServer lines try to
> setup a circuit with the other Tor nodes (the "real" ones on the
> network), this works.

Something is deeply wrong with your assumptions here. You might try
reading the man page entries again.

> Any help will be greatly appreciated.

Hope that helps,
--Roger