Welcome to Pandora FMS Community!

Find answers, ask questions, and connect with our community around the world.

Welcome to Pandora FMS Community Forums Community support External Connection Pandora Server

  • External Connection Pandora Server

    Posted by mafelipe on January 27, 2009 at 02:42

    I just wondering if its supported other connection than direct mysql to the Database.
    Im trying to establish a remote PandoraServer to recollect information of another site and connect to the master server thorought internet. I dont want to have unencripted user/pass to go via internet.
    Also a VPN is a solution, but I was wondering if another type is supported.

    manu replied 16 years ago 3 Members · 5 Replies
  • 5 Replies
  • manu

    Member
    January 28, 2009 at 03:50
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    I don’t understand what you meant, do you mean if you can connect to the mysql from a remote location? If so, sure you can.
    In the pandora_server.conf just define the IP of the MySQL you want to connect to

  • mafelipe

    Member
    January 29, 2009 at 08:20
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    I want to know if pandora can use an encrypted mysql connection, so no clear password is sent via internet…

  • daniels

    Member
    January 29, 2009 at 08:55
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Hi Mafelipe,

    I think this is an issue for mysql/tcp connection, not for pandora….

    Anyway, vpn is a good way (as you already known) but you can do this by ssh tunnel too. As far as I know, there isn’t a specific way to treat this inside pandora…

  • mafelipe

    Member
    February 1, 2009 at 03:16
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Hi, Im trying with ssh tunnles, and, this is only a comment, shouldnt be better to take out the mysql port to the config file? The problem now is that if the tunnels stops the data servers dies. I also have tried autossh, but no way. I still working on this….

  • manu

    Member
    February 4, 2009 at 07:20
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Yeah, it would be useful to put a small option in the pandora_server.conf to allow to change mysql port.
    Nowadays the port is set in the code (grep -R “3306” *) so if you want to change it you would need to change it in the code (binary, libraries…)

    Obviously if the tunnels dies there is no way to reach the MySQL, in this scenario, as Daniels said, VPN is very likely the best option you can do, ssh-tunneling is also a good approach but it’s not as good as it should be for this matters.

    Another shot you can try is just to allow the FW (if there were any) to be able to reach the MySQL remotely and for a certain IP (pandora_server machine)