<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
I have switch the control-socket to http (in kea-dhcp) </div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
The control Agent is disabled</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
At first communication between stork and isc-kea-dhcp seems to be in order but I still cannot refresh . </div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
I have no machine under the unauthorized tab</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Regards,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Ronald</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Van:</b> Kea-users <kea-users-bounces@lists.isc.org> namens Peter Davies <peterd@isc.org><br>
<b>Verzonden:</b> vrijdag 17 april 2026 11:01<br>
<b>Aan:</b> kea-users@lists.isc.org <kea-users@lists.isc.org><br>
<b>Onderwerp:</b> Re: [Kea-users] kea-dhcp upgrade from 2.6.4 -> 3.0.3</font>
<div> </div>
</div>
<div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>Hi Ronald,</span><br>
<span> Looking at the Stork ARMI, I see that on Stork 2.4 with Kea 3.0:</span><br>
<span>--PASTE--</span><br>
<span>The Stork agent uses the first control socket which it is able to connect to. It supports both UNIX domain and network sockets.</span><br>
<span>--PASTE--</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>So it looks as if your “control-socket” statement should be ok.</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><br>
<span>Are there any machines awaiting authorization on the Services -> Machines -> unauthorized tab?</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>If there are none, have you tried restarting Stork?</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>/Peter</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><br>
<br>
</div>
<p></p>
<div class="x_moz-cite-prefix">On 17/04/2026 10.38, Peter Davies wrote:<br>
</div>
<blockquote type="cite">
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>Hi Ronald,</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span> Thanks for the update.</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>The Stork Agent communicates with Kea over http/https not over a unix socket, as the CA does.<br>
<br>
</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>You need to replace your "control-socket" statement with a "control-sockets" statement that includes a "socket-type": "https"</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><br>
</font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>Perhaps you should restart the CA while you test this new configuration item.</span></font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><br>
</font></div>
<div style="text-align:left; margin-top:0.5em; margin-bottom:0.5em"><font face="monospace"><span>/Peter</span></font></div>
<div class="x_moz-cite-prefix">On 17/04/2026 10.16, DDFR | Ronald Blaas wrote:<br>
</div>
<blockquote type="cite"><style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Hi Peter,</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Thanks for your reply.</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
I did see the Notes </div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
The problem: I have now disabled the CA but stork is not good. </div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
My 2 servers (HA) are reporting: Communication with the daemon on this machine is broken. The Stork Agent and Kea Control Agent appear to be working, but the daemon behind it is not responding or responds with errors. The last 3 attempt(s) to communicate with
the daemon failed. Please make sure that the daemon is up and is reachable. </div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
So I am confused. </div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Do I need to change anything in isc-kea-conf or stork-agent env ?</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
HA is also not reporting (status is Fetching) </div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Kind regards,</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Ronald</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Van:</b> Kea-users
<a class="x_moz-txt-link-rfc2396E" href="mailto:kea-users-bounces@lists.isc.org">
<kea-users-bounces@lists.isc.org></a> namens Peter Davies <a class="x_moz-txt-link-rfc2396E" href="mailto:peterd@isc.org">
<peterd@isc.org></a><br>
<b>Verzonden:</b> vrijdag 17 april 2026 07:54<br>
<b>Aan:</b> <a class="x_moz-txt-link-abbreviated x_moz-txt-link-freetext" href="mailto:kea-users@lists.isc.org">
kea-users@lists.isc.org</a> <a class="x_moz-txt-link-rfc2396E" href="mailto:kea-users@lists.isc.org">
<kea-users@lists.isc.org></a><br>
<b>Onderwerp:</b> Re: [Kea-users] kea-dhcp upgrade from 2.6.4 -> 3.0.3</font>
<div> </div>
</div>
<div>
<p><font face="monospace">Hi Ronald,<br>
<br>
The Kea 3.0.0 Release Notes contain the following information regarding the <br>
deprication of the Kea Control Agent (CA).<br>
<br>
—-PASTE—-<br>
1. **Native HTTP/TLS support**: The DHCPv4, DHCPv6, and DHCP-DDNS<br>
daemons now have native support for API sockets over HTTP and TLS<br>
(HTTP), without the need to use the Control Agent (CA). This greatly<br>
simplifies the configuration as CA is no longer necessary [#3477, #1764,<br>
#3490]. As a result, the CA is now deprecated.<br>
—-PASTE—-<br>
<br>
The Stork 2.4.0 Release notes contain the following information regarding the <br>
deprication of the CA.<br>
<br>
---PASTE---<br>
1. **Direct API support for Kea**: The Kea Control Agent (CA) is<br>
deprecated as of Kea 3.0; it is now possible to run Kea in a mode where<br>
the DHCP daemons receive commands directly (without the CA). This caused<br>
a major refactoring of Stork: the application concept was dropped and<br>
Stork now operates on the daemon level [#1835, #2193]. We fixed a<br>
problem where the Stork agent was not able to detect a Kea instance when<br>
the control agent was bound to an IPv6 address [#2092]. System tests for<br>
the direct API were implemented [#2133]. Commands to Kea are now sent<br>
over other control sockets if the first one is unavailable [#2223]. The<br>
daemons are no longer removed from the database if they are inactive; a<br>
button can delete them manually [#2095]. The agent can now communicate<br>
to UNIX control sockets if they are configured by name only in Kea<br>
[#2166].<br>
---PASTE---<br>
<br>
See: <a class="x_x_moz-txt-link-freetext x_moz-txt-link-freetext" href="https://downloads.isc.org/isc/kea/3.0.0/Kea-3.0.0-ReleaseNotes.txt" originalsrc="https://downloads.isc.org/isc/kea/3.0.0/Kea-3.0.0-ReleaseNotes.txt" originalsrc="https://downloads.isc.org/isc/kea/3.0.0/Kea-3.0.0-ReleaseNotes.txt">
https://downloads.isc.org/isc/kea/3.0.0/Kea-3.0.0-ReleaseNotes.txt</a> and <br>
<a class="x_x_moz-txt-link-freetext x_moz-txt-link-freetext" href="https://downloads.isc.org/isc/stork/2.4.0/Stork-2.4.0-ReleaseNotes.txt" originalsrc="https://downloads.isc.org/isc/stork/2.4.0/Stork-2.4.0-ReleaseNotes.txt" originalsrc="https://downloads.isc.org/isc/stork/2.4.0/Stork-2.4.0-ReleaseNotes.txt">https://downloads.isc.org/isc/stork/2.4.0/Stork-2.4.0-ReleaseNotes.txt</a><br>
<br>
If there are duplicate entries, you should stop and disable the CA.<br>
<br>
When the CA is no longer running, you should be able to remove the daemon, which <br>
communicates over the CA.<br>
<br>
/Peter<br>
<br>
</font></p>
<div class="x_x_moz-cite-prefix">On 16/04/2026 17.13, DDFR | Ronald Blaas wrote:<br>
</div>
<blockquote type="cite">
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Hi all,</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
I just upgraded my test environment from v2.6.5 to v3.0.3 </div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
After adjusting some changes in the config it is all up and running. So far no problems.</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
The question I have is about the control agent and Stork. </div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
When I look at stork (v2.4.0) I now see duplicated entries is this because of the control agent? I have not (yet) changed the control agent</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
The part which is unclear to me is that stork can now run without the use of the control agent. (as I understand it)</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
But it is unclear what I need to do to make this happen. </div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Any insights are welcome 🙂</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Kind regards,</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
Ronald</div>
<div class="x_x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">
</div>
</blockquote>
<pre class="x_x_moz-signature" cols="72">--
Peter Davies
Support Engineer
Internet Systems Corporation
</pre>
</div>
<br>
<fieldset class="x_moz-mime-attachment-header"></fieldset> </blockquote>
<pre class="x_moz-signature" cols="72">--
Peter Davies
Support Engineer
Internet Systems Corporation
</pre>
<br>
<fieldset class="x_moz-mime-attachment-header"></fieldset> </blockquote>
<pre class="x_moz-signature" cols="72">--
Peter Davies
Support Engineer
Internet Systems Corporation
<a class="x_moz-txt-link-abbreviated" href="mailto:peterd@isc.org">peterd@isc.org</a>
001 650-423-1460</pre>
</div>
</body>
</html>