ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Salt-Minion can't talk to Salt-Master

    Scheduled Pinned Locked Moved IT Discussion
    salt-minionsalt-mastersalt minionsalt stacksaltsaltstack
    41 Posts 7 Posters 3.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DustinB3403D
      DustinB3403
      last edited by

      If your output of firewall-cmd --get-active-zones is FedoraServer interfaces: enp3s0 then yes, add the rules to that zone.

      1 Reply Last reply Reply Quote 0
      • DustinB3403D
        DustinB3403
        last edited by

        firewall-cmd --permanent --zone=FedoraServer --add-port=4505-4506/tcp

        Should be what you're looking for.

        NerdyDadN 1 Reply Last reply Reply Quote 1
        • DustinB3403D
          DustinB3403
          last edited by

          Then you need to reload the firewall and test.

          1 Reply Last reply Reply Quote 0
          • NerdyDadN
            NerdyDad @DustinB3403
            last edited by

            @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

            firewall-cmd --permanent --zone=FedoraServer --add-port=4505-4506/tcp

            Should be what you're looking for.

            Did that and says it is already enabled.

            1 Reply Last reply Reply Quote 0
            • NerdyDadN
              NerdyDad
              last edited by NerdyDad

              Is the salt master service looking at the correct zone? Is that the right way to think of it?

              1 Reply Last reply Reply Quote 0
              • DustinB3403D
                DustinB3403
                last edited by

                And you've reloaded the firewall with firewall-cmd --reload?

                NerdyDadN 1 Reply Last reply Reply Quote 0
                • DustinB3403D
                  DustinB3403
                  last edited by

                  Well going into the salt master config file you'd have to look and see if it's set correctly.

                  https://docs.saltstack.com/en/latest/ref/configuration/master.html

                  1 Reply Last reply Reply Quote 0
                  • DustinB3403D
                    DustinB3403
                    last edited by

                    Just for laughs check the status of setenforce.

                    1 Reply Last reply Reply Quote 0
                    • NerdyDadN
                      NerdyDad @DustinB3403
                      last edited by

                      @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                      And you've reloaded the firewall with firewall-cmd --reload?

                      Still not working

                      @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                      Just for laughs check the status of setenforce.

                      Enforcing

                      DustinB3403D 1 Reply Last reply Reply Quote 0
                      • DustinB3403D
                        DustinB3403 @NerdyDad
                        last edited by

                        @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                        @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                        And you've reloaded the firewall with firewall-cmd --reload?

                        Still not working

                        @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                        Just for laughs check the status of setenforce.

                        Enforcing

                        Try setting setenforce to permissive or disabled for now and test.

                        NerdyDadN 1 Reply Last reply Reply Quote 0
                        • NerdyDadN
                          NerdyDad @DustinB3403
                          last edited by

                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                          @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                          And you've reloaded the firewall with firewall-cmd --reload?

                          Still not working

                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                          Just for laughs check the status of setenforce.

                          Enforcing

                          Try setting setenforce to permissive or disabled for now and test.

                          Finally, got the minion to talk to the master. Thanks

                          dafyreD DustinB3403D 2 Replies Last reply Reply Quote 0
                          • dafyreD
                            dafyre @NerdyDad
                            last edited by

                            @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                            @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                            @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                            @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                            And you've reloaded the firewall with firewall-cmd --reload?

                            Still not working

                            @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                            Just for laughs check the status of setenforce.

                            Enforcing

                            Try setting setenforce to permissive or disabled for now and test.

                            Finally, got the minion to talk to the master. Thanks

                            Was it SELinux?

                            NerdyDadN 1 Reply Last reply Reply Quote 1
                            • DustinB3403D
                              DustinB3403 @NerdyDad
                              last edited by

                              @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                              @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                              @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                              @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                              And you've reloaded the firewall with firewall-cmd --reload?

                              Still not working

                              @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                              Just for laughs check the status of setenforce.

                              Enforcing

                              Try setting setenforce to permissive or disabled for now and test.

                              Finally, got the minion to talk to the master. Thanks

                              Cool so now you need create an exclusion in setenforce.

                              NerdyDadN 1 Reply Last reply Reply Quote 0
                              • NerdyDadN
                                NerdyDad @dafyre
                                last edited by

                                @dafyre said in Salt-Minion can't talk to Salt-Master:

                                @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                And you've reloaded the firewall with firewall-cmd --reload?

                                Still not working

                                @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                Just for laughs check the status of setenforce.

                                Enforcing

                                Try setting setenforce to permissive or disabled for now and test.

                                Finally, got the minion to talk to the master. Thanks

                                Was it SELinux?

                                I think that was part of it. The other part as not to specify a port to the server in the minions config file.

                                1 Reply Last reply Reply Quote 0
                                • NerdyDadN
                                  NerdyDad @DustinB3403
                                  last edited by

                                  @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                  @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                  @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                  @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                  @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                  And you've reloaded the firewall with firewall-cmd --reload?

                                  Still not working

                                  @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                  Just for laughs check the status of setenforce.

                                  Enforcing

                                  Try setting setenforce to permissive or disabled for now and test.

                                  Finally, got the minion to talk to the master. Thanks

                                  Cool so now you need create an exclusion in setenforce.

                                  How do I do that? Help the newb here please.

                                  DustinB3403D 1 Reply Last reply Reply Quote 0
                                  • black3dynamiteB
                                    black3dynamite
                                    last edited by

                                    I don't recall ever needed to configure SELinux.

                                    1 Reply Last reply Reply Quote 0
                                    • DustinB3403D
                                      DustinB3403 @NerdyDad
                                      last edited by

                                      @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                      @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                      @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                      @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                      @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                      @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                      And you've reloaded the firewall with firewall-cmd --reload?

                                      Still not working

                                      @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                      Just for laughs check the status of setenforce.

                                      Enforcing

                                      Try setting setenforce to permissive or disabled for now and test.

                                      Finally, got the minion to talk to the master. Thanks

                                      Cool so now you need create an exclusion in setenforce.

                                      How do I do that? Help the newb here please.

                                      You'll need to use semanage to allow this.

                                      NerdyDadN scottalanmillerS 2 Replies Last reply Reply Quote 0
                                      • DustinB3403D
                                        DustinB3403
                                        last edited by

                                        Here is a decent man page and examples.

                                        Since you're allowing ports through you'd want to do that.

                                        1 Reply Last reply Reply Quote 0
                                        • NerdyDadN
                                          NerdyDad @DustinB3403
                                          last edited by

                                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                          @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                          @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                          @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                          And you've reloaded the firewall with firewall-cmd --reload?

                                          Still not working

                                          @DustinB3403 said in Salt-Minion can't talk to Salt-Master:

                                          Just for laughs check the status of setenforce.

                                          Enforcing

                                          Try setting setenforce to permissive or disabled for now and test.

                                          Finally, got the minion to talk to the master. Thanks

                                          Cool so now you need create an exclusion in setenforce.

                                          How do I do that? Help the newb here please.

                                          You'll need to use semanage to allow this.

                                          semanage port -a -t http_port_t -p tcp 4505-4506

                                          What would http_port_t translate to? Everything else I understand except that.

                                          DustinB3403D 1 Reply Last reply Reply Quote 0
                                          • scottalanmillerS
                                            scottalanmiller @NerdyDad
                                            last edited by

                                            @NerdyDad said in Salt-Minion can't talk to Salt-Master:

                                            @black3dynamite said in Salt-Minion can't talk to Salt-Master:

                                            Will you show the command for adding the firewall rules for 4505-5606?
                                            The reason I'm asking is because if you include --zone=FedoraServer but your active firewall zone is public then that could be the issue.

                                            I've tried a number of commands

                                            firewall-cmd --permanent --zone=trusted --add-port=4505-4506/tcp
                                            firewall-cmd --permanent --zone=default --add-port=4505-4506/tcp
                                            firewall-cmd --permanent --add-port=4505-4506/tcp

                                            In that order, but not all at the same time. I reloaded the firewall and retested between each line.

                                            None of those is expected to work. The default zone is FedoraServer

                                            NerdyDadN 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 3
                                            • 1 / 3
                                            • First post
                                              Last post