<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Stefan,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Please be aware that you posted a password in your control agent config. I strongly recommend replacing it.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
You may prefer to put the socket in /var. Cleaning of /tmp is distro-dependent behavior. You'll need to make that change (to the socket path) in the control agent and DHCP configs on both servers. Stork will pick up the change automatically (without any config
changes), but the agent may need a restart, as well as all Kea services.</div>
<div class="elementToProof">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<b>Eric Graham</b></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<i>DevOps Specialist</i></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<span style="font-size: 8pt;">Direct: 605.990.1859</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 8pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"></span><i><br>
</i></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<i><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 8pt; color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);"></span></i><a href="mailto:eric.graham@vantagepnt.com" title="mailto:eric.graham@vantagepnt.com"><span style="font-size: 8pt;">Eric.Graham@vantagepnt.com</span></a><i><br>
</i></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<i><img style="max-width:100%" class="ContentPasted0" id="imageSelected0" data-outlook-trace="F:1|T:1" src="cid:17380953-0d73-4ca6-97ae-ed624e23c4b6"><br>
</i></div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Kea-users <kea-users-bounces@lists.isc.org> on behalf of Darren Ankney <darren.ankney@gmail.com><br>
<b>Sent:</b> Friday, June 23, 2023 6:01 AM<br>
<b>To:</b> kea-users@lists.isc.org <kea-users@lists.isc.org><br>
<b>Subject:</b> Re: [Kea-users] kea-2.2.0 - HA cluster - communication between stork and dhcp4 gets lost</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">CAUTION: This email originated outside the organization. Do not click any links or attachments unless you have verified the sender.<br>
<br>
Hi Stefan,<br>
<br>
I imagine your socket file is being removed during routine OS cleaning<br>
of /tmp/ I would not store it there in production (I do often do that<br>
in testing, however). If the socket file gets removed, Kea will not<br>
recreate it until a restart.<br>
<br>
Thank you,<br>
<br>
Darren Ankney<br>
<br>
On Fri, Jun 23, 2023 at 4:21 AM Stefan G. Weichinger <lists@xunil.at> wrote:<br>
><br>
> Am 22.06.23 um 19:35 schrieb Eric Graham:<br>
> > Check the permissions of the control socket on your server:<br>
> ><br>
> > * Confirm that the Kea control agent can read it * Confirm that<br>
> > SELinux is not denying the attempt<br>
><br>
> Eric, thanks for your help.<br>
><br>
> If it works most of the time ... why wouldn't the permissions be OK then?<br>
><br>
> OK:<br>
><br>
> root@adc1:/etc/kea# ls -l /tmp/kea4*<br>
> srwxr-xr-x 1 _kea _kea 0 22. Jun 07:35 /tmp/kea4-ctrl-socket<br>
> -rw------- 1 _kea _kea 0 22. Jun 07:35 /tmp/kea4-ctrl-socket.lock<br>
><br>
><br>
> root@adc2:/etc/kea# ls -l /tmp/kea4*<br>
> srwxr-xr-x 1 _kea _kea 0 17. Mai 08:18 /tmp/kea4-ctrl-socket<br>
> -rw------- 1 _kea _kea 0 17. Mai 08:18 /tmp/kea4-ctrl-socket.lock<br>
><br>
> SElinux: don't know how to check that right now ...<br>
><br>
><br>
> > Your control agent on the other server isn't configured to connect to<br>
> > the socket for dhcp4 on your primary server, correct?<br>
><br>
> As far as I understand, no.<br>
><br>
> I add the whole file just to be safe here:<br>
><br>
> root@adc1:/etc/kea# cat kea-ctrl-agent.conf<br>
> // This is a basic configuration for the Kea Control Agent.<br>
> //<br>
> // This is just a very basic configuration. Kea comes with large suite<br>
> (over 30)<br>
> // of configuration examples and extensive Kea User's Guide. Please refer to<br>
> // those materials to get better understanding of what this software is<br>
> able to<br>
> // do. Comments in this configuration file sometimes refer to sections<br>
> for more<br>
> // details. These are section numbers in Kea User's Guide. The version<br>
> matching<br>
> // your software should come with your Kea package, but it is also available<br>
> // in ISC's Knowledgebase (<a href=""></a>https://kea.readthedocs.io; the direct link for<br>
> // the stable version is <a href="https://kea.readthedocs.io/)">https://kea.readthedocs.io/)</a>.<br>
> //<br>
> // This configuration file contains only Control Agent's configuration.<br>
> // If configurations for other Kea services are also included in this<br>
> file they<br>
> // are ignored by the Control Agent.<br>
> {<br>
><br>
> // This is a basic configuration for the Kea Control Agent.<br>
> // RESTful interface to be available at <a href="http://127.0.0.1:8000/">http://127.0.0.1:8000/</a><br>
> "Control-agent": {<br>
> "http-host": "10.0.0.231",<br>
> // If enabling HA and multi-threading, the 8000 port is used by the HA<br>
> // hook library http listener. When using HA hook library with<br>
> // multi-threading to function, make sure the port used by dedicated<br>
> // listener is different (e.g. 8001) than the one used by CA. Note<br>
> // the commands should still be sent via CA. The dedicated listener<br>
> // is specifically for HA updates only.<br>
> "http-port": 8000,<br>
><br>
> "authentication": {<br>
> "type": "basic",<br>
> "realm": "kea-control-agent",<br>
> "clients": [<br>
> {<br>
> "user": "admin",<br>
> "password": "X-dEldmfRz"<br>
> } ]<br>
> },<br>
><br>
> // Specify location of the files to which the Control Agent<br>
> // should connect to forward commands to the DHCPv4, DHCPv6<br>
> // and D2 servers via unix domain sockets.<br>
> "control-sockets": {<br>
> "dhcp4": {<br>
> "socket-type": "unix",<br>
> "socket-name": "/tmp/kea4-ctrl-socket"<br>
> }<br>
> # "dhcp6": {<br>
> # "socket-type": "unix",<br>
> # "socket-name": "/tmp/kea6-ctrl-socket"<br>
> # },<br>
> # "d2": {<br>
> # "socket-type": "unix",<br>
> # "socket-name": "/tmp/kea-ddns-ctrl-socket"<br>
> # }<br>
> },<br>
><br>
> // Specify hooks libraries that are attached to the Control Agent.<br>
> // Such hooks libraries should support 'control_command_receive'<br>
> // hook point. This is currently commented out because it has to<br>
> // point to the existing hooks library. Otherwise the Control<br>
> // Agent will fail to start.<br>
> "hooks-libraries": [<br>
> // {<br>
> // "library":<br>
> "/usr/lib/x86_64-linux-gnu/kea/hooks/control-agent-commands.so",<br>
> // "parameters": {<br>
> // "param1": "foo"<br>
> // }<br>
> // }<br>
> ],<br>
><br>
> // Logging configuration starts here. Kea uses different loggers to log<br>
> various<br>
> // activities. For details (e.g. names of loggers), see Chapter 18.<br>
> "loggers": [<br>
> {<br>
> // This specifies the logging for Control Agent daemon.<br>
> "name": "kea-ctrl-agent",<br>
> "output_options": [<br>
> {<br>
> // Specifies the output file. There are several special<br>
> values<br>
> // supported:<br>
> // - stdout (prints on standard output)<br>
> // - stderr (prints on standard error)<br>
> // - syslog (logs to syslog)<br>
> // - syslog:name (logs to syslog using specified name)<br>
> // Any other value is considered a name of the file<br>
> "output": "stdout",<br>
><br>
> // Shorter log pattern suitable for use with systemd,<br>
> // avoids redundant information<br>
> "pattern": "%-5p %m\n"<br>
><br>
> // This governs whether the log output is flushed to<br>
> disk after<br>
> // every write.<br>
> // "flush": false,<br>
><br>
> // This specifies the maximum size of the file before it is<br>
> // rotated.<br>
> // "maxsize": 1048576,<br>
><br>
> // This specifies the maximum number of rotated files<br>
> to keep.<br>
> // "maxver": 8<br>
> }<br>
> ],<br>
> // This specifies the severity of log messages to keep.<br>
> Supported values<br>
> // are: FATAL, ERROR, WARN, INFO, DEBUG<br>
> "severity": "INFO",<br>
><br>
> // If DEBUG level is specified, this value is used. 0 is least<br>
> verbose,<br>
> // 99 is most verbose. Be cautious, Kea can generate lots and lots<br>
> // of logs if told to do so.<br>
> "debuglevel": 0<br>
> }<br>
> ]<br>
> }<br>
> }<br>
><br>
><br>
> It looks at the local socket in /tmp, right?<br>
> --<br>
> ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br>
><br>
> To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users">
https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
><br>
> Kea-users mailing list<br>
> Kea-users@lists.isc.org<br>
> <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a><br>
--<br>
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br>
<br>
To unsubscribe visit <a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a>.<br>
<br>
Kea-users mailing list<br>
Kea-users@lists.isc.org<br>
<a href="https://lists.isc.org/mailman/listinfo/kea-users">https://lists.isc.org/mailman/listinfo/kea-users</a><br>
</div>
</span></font></div>
</body>
</html>