<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Rick,</p>
<p>I was using the terms "key" and "password" interchangeably (after
all, practically they perform the same function) - sorry for the
confusion :-)</p>
<p>Yeah, both servers have the same username and password.</p>
<p>We did as you suggested and, without the authentication, the
ha-heartbeat went through. After doing some further research we
enabled the kea-ctrl-agent.auth logger, re-engaed authentication
on kea-ctrl-agent, and received the following log error:</p>
<p>2023-01-27 17:03:47.601 INFO
[kea-ctrl-agent.auth/16262.140275659275264]
HTTP_CLIENT_REQUEST_NO_AUTH_HEADER received HTTP request without
required authentication header<br>
</p>
<p>So now I have to ask is there some config setting to enable the
ha-heatbeat to send the required authentication header - because
I've been through the doco and the sample config files and I can't
find anything - apart from the relevant config info in the
kea-ctrl-agent.conf file, but nothing in the kea-dhcp4.conf file
under the hooks-libraries->ha config entries (or elsewhere, for
that matter).</p>
<p>What have we missed? :-)<br>
</p>
<p>Cheers</p>
<p>Dulux-Oz<br>
</p>
<div class="moz-cite-prefix">On 27/01/2023 01:25, Frey, Rick E via
Kea-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DM5PR05MB34510ED1029047A1DC9FC89688CF9@DM5PR05MB3451.namprd05.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}div.WordSection1
{page:WordSection1;}</style>
<div class="WordSection1">
<p class="MsoNormal">The error “Unauthorized, error code 1”
indicates that basic authentication if failing between the
control agent and dhcp server. Not sure of additional log
error “communication with kea_dhcp_2 is interrupted”. When I
test my setup with purposely bad password, I do not see that
log message.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">You mention “keactrl is using a basic
authentication with pre-shared key”. Per docs, I believe Kea
currently only supports using basic authentication with
username and password. You may want to verify that your
control agent and partner dhcp server are configured with same
username/password . If nothing else, you could
disable/remove authentication directives to verify heartbeat
successful outside of authentication.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</blockquote>
</body>
</html>