Welcome to Pandora FMS Community!

Find answers, ask questions, and connect with our community around the world.

Welcome to Pandora FMS Community Forums Community support understanding proxy mode

  • understanding proxy mode

    Posted by JunesePeter on December 11, 2013 at 15:19

    hi all,

    i have some trouble with understanding the proxy mode.
    in my test enviroment i got 2 LAN’s on the one hand my pandora server with some clients and on the other hand my proxy with a client. in my config i set the pandoras ip to server_ip of the proxy and the proxy’s ip to server_ip of the monitored client.
    now the question how can i proof that the proxy works fine? or is it necessary to add the client in the web console ( i thought that it would be added automatically through the proxy)?

    regards
    Peter

    JunesePeter replied 12 years, 7 months ago 3 Members · 19 Replies
  • 19 Replies
  • Mario

    Administrator
    December 11, 2013 at 16:35
    1188 Karma points
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    Hi

    To check if the proxy mode it is working correctly you need to activate this mode in an agent (A), and configure in other agent (B), the ip of this agent (A).

    Automatically in pandora_server, you have to receive the XML file of the agent (B), that pass for agent (A)
    http://wiki.pandorafms.com/index.php?title=Pandora:Documentation_en:Operations#Proxy_Mode

    Regards

  • JunesePeter

    Member
    December 12, 2013 at 20:55
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    hi

    okay i made all the settings like described but should the agent B appear automatically in the web console or do i have to add it also manually?

    regards
    Peter

  • Mario

    Administrator
    December 12, 2013 at 21:19
    1188 Karma points
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    If you have setting ” autocreate 1 ” in your pandora_server.conf, should be created automatically like normal agents are created.

  • JunesePeter

    Member
    December 13, 2013 at 15:21
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Ok, but must both agents installed as user with non root privileges or only agent A who has proxy mode activated?
    i only installed agent A as non root user…

    could that be the mistake?

    Regards
    Peter

  • Mario

    Administrator
    December 13, 2013 at 18:37
    1188 Karma points
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    No, only the Agent A must be with non root user.

    Check the Agent A firewall. It’s possible that is enabled and the listening port tentacle off…

  • JunesePeter

    Member
    December 18, 2013 at 13:30
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    So,
    i’ve done a complete reinstall of the Client A and now there is only one more issue i don’t come along with:
    Client B tells me in the agent log:

    2013/12/18 09:50:21 – [error] – Error sending file ‘/tmp/ClientCentOS.1387356621.data’: [err] Cannot connect to 192.168.x.x on port 41121: Verbindungsaufbau abgelehnt.
    (connection rejected)

    but the firewall cannot be the problem it doesn’t matter whether it’s on or off, it’s not working…

    And the same error is sending Client A with the IP of the Pandora Server…

    I think missed any basic setting… but i don’t know which

  • JunesePeter

    Member
    December 18, 2013 at 18:49
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    Update:

    i was such a dumbass. incredible.

    for my clientA i forgot yesterday to start up the tentacle server on my pandora…

    at the time the client A is added to my monitored enviroment but i can’t get client B to my enviroment.
    still the same error like at the last post!
    maybe also such a basic thing i forgot…

    if someone has an idea how to get client b added…

    thanks

  • Sancho

    Administrator
    December 24, 2013 at 16:58
    2428 Karma points
    Community awards: bulb Bright ideas
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    Update:

    i was such a dumbass. incredible.

    for my clientA i forgot yesterday to start up the tentacle server on my pandora…

    at the time the client A is added to my monitored enviroment but i can’t get client B to my enviroment.
    still the same error like at the last post!
    maybe also such a basic thing i forgot…

    if someone has an idea how to get client b added…

    thanks

    Until I’ve read:

    Agent A has the proxy mode enabled.
    Agent B connect the server using Agent A proxy.

    So:

    Check manually from AGENT B (telnet 41121). That should be OK.
    Check manually from AGENT A (telnet 41121). That should be OK.

  • JunesePeter

    Member
    January 7, 2014 at 12:17
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    i tried to connect over telnet.

    from agent b to agent a on port 41121: connection refused

    from agent a to pandora_srv on port 41121: connected and after a few seconds – connection closed by foreign host

    but i checked the conf and i don’t recognize the issue…

  • JunesePeter

    Member
    January 7, 2014 at 17:51
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    I tried to open the port over iptables no result…
    i looked up the ports with nmap and it shows that the port is closed although its open…

    is there any special tentacle daemon/client i have to install ,too?

  • Mario

    Administrator
    January 7, 2014 at 18:08
    1188 Karma points
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    Hi

    The only thing that must be correctly installed and started is the tentacle  server /etc/init.d/start tentacle_served. Once this it’s started should be open the port.

    As a test, you can start the server tentacle in Agent A to another port, such as 41122 and configure the agent B to send the information for the same port 41122, thus identify whether there may be some kind of conflict in the system with the default port.

  • JunesePeter

    Member
    January 7, 2014 at 20:27
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    I also tried to send files per tentacle client from agent b to the server over port 41121 and it works…

    but it still doesn’t work to send data from b to a…

  • Mario

    Administrator
    January 7, 2014 at 20:36
    1188 Karma points
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    Have you tried with the port 41122?

    You can set this port in /etc/init.d/tentacle_serverd of Agent A

    Regards

  • JunesePeter

    Member
    January 8, 2014 at 12:03
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    well, but i don’t have this data…

    i installed the tentacle server on the agent a after i changed the agent-configuration to proxy mode and i followed these instructions
    http://www.openideas.info/wiki/index.php?title=Tentacle:UserGuide#Installing_the_PERL_version
    chapter: To install just the server run

    UPDATE: the data /etc/init.d/tentacle_serverd doesn’t exist, BUT the Agent B appeared in the Pandora Web Console… I don’t know why, i changed nothing!

  • Mario

    Administrator
    January 8, 2014 at 13:41
    1188 Karma points
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    Then, Is Agent B reporting correctly to Pandora pointing to agent A?

  • JunesePeter

    Member
    January 8, 2014 at 14:02
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    yeah i would think so… but i’m still wondering why it is working now.

    nevertheless thanks for your help and if other problems occure, i will report.

    one last question: how can i test the reporting of b over a to the server?
    i mean it works but i don’t know whether it works correctly

    regards

  • Mario

    Administrator
    January 8, 2014 at 15:11
    1188 Karma points
    Community rank: tentacle_master_icon Tentacle Master
    Like it
    Up
    0
    Down
    Drop it
    ::

    Executing netstat command in Agent A, you can see all the conections performed.

    F.E: netstat -c | grep 41121

  • JunesePeter

    Member
    January 8, 2014 at 16:38
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    semms to be ok!

    thanks for the help!

    best regards

  • JunesePeter

    Member
    January 8, 2014 at 17:13
    0 Karma points
    Community rank: tentacle-noob-1 Tentacle noob
    Like it
    Up
    0
    Down
    Drop it
    ::

    *seems 🙂

Log in to reply.