[Kea-users] Using kea-shell

[Rick Frey]

Connection refused would indicate that kea-shell is unable to connect to specified address and port.  First step would be to verify the CA is listening on the address and port you are specifying as args to kea-shell.  Is the CA listening on localhost (127.0.0.1 or ::1 if IPv6) and port 8000?
In an earlier thread around CA connectivity issues, your redacted config for the CA indicated you were specifying an address using directive http-address.  See Kea Docs (https://kea.readthedocs.io/en/kea-2.4.1/arm/agent.html#configuration for info on CA http-address and http-port.  If you are specifying http-address and/or http-port for CA, the kea-shell args for —host and —port must match. 

Note that if you configure your CA to use TLS, you will also need to specify —ca arg to kea-shell (see https://kea.readthedocs.io/en/kea-2.4.1/arm/shell.html#tls-support ).  I don’t believe there is means to ignore a cert hostname mismatch for kea-shell (would require using a cert that contains an SAN that matches the hostname or IP adddress used for —host arg).  Mainly mentioning since your earlier threads indicated you may be using TLS for CA as well.


> On Jan 8, 2024, at 2:30 PM, CS <cs.temp.mail at gmail.com> wrote:
> 
> Still trying to get my deployment to play nice with micetro. Everything it up and working as far as I know. Good status on the CA and DHCP4 daemons and logging heartbeats between my HA servers leads me to believe so. 
> But trying to touch the kea control agent
> 
> sudo kea-shell --host localhost --port 8000 --auth-user keauser --auth-password "bad password" --service dhcp4 list-commands
> <ctrl+d>
> Failed to run: <urlopen error [Errno 111] Connection refused>
> 
> makes me think otherwise. Nothing gets logged to the CA or DHCP4 verbose logs either. Just refuses the connection... am I missing something simple?
> 
> CS, cs.Temp.Mail at gMail.com
> -- 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.
> 
> Kea-users mailing list
> Kea-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/kea-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20240108/d182c466/attachment-0001.htm>