[stork-users] Permissions to access files

Slawek Figiel slawek at isc.org
Wed Jul 2 15:33:05 UTC 2025


Hello Christoph,

Please ensure the system user that runs the Stork agent (by default 
`stork`) is a member of the `_kea` group.

When installing the Stork from packages, the Stork user is created and 
added to this group if it exists. I suppose you installed Stork first 
and then Kea on the second machine. There was no Kea group to which the 
Stork user could be added because it was created only during Kea 
installation.

Regards,
Slawek Figiel

On 7/2/25 5:17 PM, Christoph Pleger wrote:
> Hello,
> 
> I installed stork server and stork agent on two independent servers,
> for monitoring ISC kea.
> 
> On both computers, files in /etc/kea have the following
> users/groups/permissions:
> 
> drwxr-x---  3 _kea _kea  4096 Jul  1 13:07 .
> -rw-r-----  1 _kea _kea    33 Jun 18 15:40 kea-api-password
> -rw-r-----  1 _kea _kea  5697 Jun 12 14:00 kea-ctrl-agent.conf
> -rw-r-----  1 _kea _kea  2979 Jun 23 16:28 kea-dhcp4.conf
> -rw-r--r--  1 _kea _kea 21098 Jun 12 14:00 kea-dhcp6.conf
> -rw-r--r--  1 root root  3033 Jun 18 11:09 kea-dhcp-ddns.conf
> 
> But though these entries only differ in date and time on the two
> computers, ISC stork agent works fine on one of them, while on the
> other, it starts, but complains that it cannot access kea-api-password
> and kea-ctrl-agent.conf (what can actually be expected with stork-agent
> running as user stork-agent ...)
> 
> What is happening here?
> 
> Regards
>    Christoph
> 
> 



More information about the Stork-users mailing list