travisghansen / hass-opnsense

OPNsense integration with Home Assistant
Apache License 2.0
227 stars 29 forks source link

Unable to register new server #19

Closed 3suns-org closed 1 year ago

3suns-org commented 2 years ago

I am getting the following error when registering my opnsense server - [%key:common::config_flow::error::unknown%]

travisghansen commented 2 years ago

Welcome! Check the hass logs and you should see a relevant entry with further details and send that over.

alexdelprete commented 2 years ago

I am getting the following error when registering my opnsense server - [%key:common::config_flow::error::unknown%]

Did you install the addon on OPNsense?

3suns-org commented 2 years ago

Welcome! Check the hass logs and you should see a relevant entry with further details and send that over.

Here is the additional data. Let me know if there is anything else I can provide.

This error originated from a custom integration.

Logger: custom_components.opnsense.config_flow Source: custom_components/opnsense/config_flow.py:140 Integration: opnsense (documentation, issues) First occurred: 7:38:28 AM (1 occurrences) Last logged: 7:38:28 AM

Unexpected err=gaierror(-3, 'Try again'), type(err)=<class 'socket.gaierror'>

3suns-org commented 2 years ago

I am getting the following error when registering my opnsense server - [%key:common::config_flow::error::unknown%]

Did you install the addon on OPNsense?

Yes - I followed the instructions here - https://github.com/travisghansen/hass-opnsense

travisghansen commented 2 years ago

That error seems to indicate an issue with the url/hostname you entered for the opnsense url…can you send what you’re using for the url by chance? Or anonymize it and send over at least the format/syntax you are attempting?

3suns-org commented 2 years ago

I have two devices and have been using https://ipaddress. I tried the backup device and was able to register but the primary device still errors.

travisghansen commented 2 years ago

Yeah not sure. It can't 'get address info' which is a pretty low-level error. Can you ping the ip of the primary device from the hass machine?

alexdelprete commented 2 years ago

From the hass system, try telnet ip_opnsense 80 to check if it can open port 80 on opnsense IP address.

3suns-org commented 2 years ago

Sorry for my newbie questions but how do I do that?

The gateway is the same address that I am using (which is accessible). I was also able to add adguard to the same device (different port of course) with no issue.

travisghansen commented 2 years ago

That is strange. Did you try multiple times and always get the same error or just the once? The error generally speaking is (or can be) sporadic/temporary and short lived vs some fundamental issue that must be fixed.

3suns-org commented 2 years ago

I tried repeatedly and after reboots. I also tried a virtual address as well as various ips across different vlans all with the same result.

travisghansen commented 2 years ago

Always with ip or have you been using hostname?

3suns-org commented 2 years ago

I have tried both.


From: Travis Glenn Hansen @.> Sent: Wednesday, December 22, 2021 12:15 PM To: travisghansen/hass-opnsense @.> Cc: Cory Mckee @.>; Author @.> Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

Always with ip or have you been using hostname?

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-999837266&data=04%7C01%7Ccory%403suns.org%7C4e3851404c194fd8db0808d9c587c78c%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758009239597799%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2BL5b9NHqgekVWeU7RjlO7SaeaE9aJIXc0pwmLEigdwk%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTETMZBIFDSBVOYPQ4Y3USIWVRANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7C4e3851404c194fd8db0808d9c587c78c%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758009239597799%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=pNpG1ZTUv6N5ATHp%2B%2BSTLJJOckR9QVcuoqKQPQDpXBY%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

travisghansen commented 2 years ago

Can you try using curl to access the opnsense url from the hass machine console?

3suns-org commented 2 years ago

Sure but how do i run commands from the machine? I am at an Home assistant command line but that seems like the wrong place.


From: Travis Glenn Hansen @.> Sent: Wednesday, December 22, 2021 12:35 PM To: travisghansen/hass-opnsense @.> Cc: Cory Mckee @.>; Author @.> Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

Can you try using curl to access the opnsense url from the hass machine console?

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-999862267&data=04%7C01%7Ccory%403suns.org%7C67086e29383747e5f47008d9c58a938c%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758021252609949%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=DXzjwmWPCOd06vOLJEzqtTX5jJT8j5l%2FYRtakYhA9dU%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTES6OR6YVSEBXLFWT5DUSIZATANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7C67086e29383747e5f47008d9c58a938c%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758021252609949%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=xydHz8N59xgsuKfo0ovuggIvbadMf04JJt%2F56aE914A%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

travisghansen commented 2 years ago

curl -v ‘<url>’

3suns-org commented 2 years ago

I think I am in the wrong window

FATA[0000] Error while executing rootCmd: unknown command "curl" for "ha"

Did you mean this? core


From: Travis Glenn Hansen @.> Sent: Wednesday, December 22, 2021 12:52 PM To: travisghansen/hass-opnsense @.> Cc: Cory Mckee @.>; Author @.> Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

curl -v ‘

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-999873427&data=04%7C01%7Ccory%403suns.org%7C91a7453e69f14ac0f0d008d9c58d03c4%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758031712301158%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=5d%2B%2BsApfYRgSwU5WgSDl7VnvRDLGf2036XeHk4hGOs8%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTEWVI2TOHWHPDXOD7TDUSI3CBANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7C91a7453e69f14ac0f0d008d9c58d03c4%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758031712301158%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=wYAIZZDvJqfYuTxzzqagD%2BKDDznMvQMJibYlyHzpow8%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

travisghansen commented 2 years ago

I’m not entirely sure how to get to a standard shell with hass os :(

3suns-org commented 2 years ago

Sadly we are in the same boat.


From: Travis Glenn Hansen @.***> Sent: Wednesday, December 22, 2021 2:15 PM To: travisghansen/hass-opnsense Cc: Cory Mckee; Author Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

I’m not entirely sure how to get to a standard shell with hass os :(

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-999912660&data=04%7C01%7Ccory%403suns.org%7C2151f750b3d24f50638908d9c59894e0%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758081387485129%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=5E3Pht0LTkV3f%2F2k8U%2FGnGk7RBdtzWJyI4u4fz2OFds%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTESQK45R3FIHEBZULILUSJEYRANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7C2151f750b3d24f50638908d9c59894e0%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758081387485129%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Pd49rmvVGuYgqzolT9p8wZikeWc7r0FReNmeLyRVILw%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

alexdelprete commented 2 years ago

You need to install the SSH & Web Terminal addon from the addons store: https://github.com/hassio-addons/addon-ssh

image

3suns-org commented 2 years ago

That seemed to work

[cid:6411c94a-f7d1-4c26-b956-2fe040c69179]


From: Alessandro Del Prete @.> Sent: Wednesday, December 22, 2021 3:53 PM To: travisghansen/hass-opnsense @.> Cc: Cory Mckee @.>; Author @.> Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

You need to install the SSH & Web Terminal addon from the addons store: https://github.com/hassio-addons/addon-sshhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fhassio-addons%2Faddon-ssh&data=04%7C01%7Ccory%403suns.org%7C4491862feeda4a929b5d08d9c5a634d0%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758139920600210%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=9Z1c07pAgAgiDvs8AJf0FZI%2BqJV2ny6G%2BMZZXWBBJaA%3D&reserved=0

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-999946277&data=04%7C01%7Ccory%403suns.org%7C4491862feeda4a929b5d08d9c5a634d0%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758139920600210%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=mo88iH7wujkVRm4v9n7iXqIo42ZKqCZmY321OOrR05A%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTER3SWJBANZ62R2BANLUSJQGJANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7C4491862feeda4a929b5d08d9c5a634d0%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637758139920600210%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=3ieT5CNdI9YTCcFnqObRRWPpJ%2B1fysLdmHY5pXN8HXE%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

alexdelprete commented 2 years ago

That seemed to work

What worked?

3suns-org commented 2 years ago

Running the curl command


From: Alessandro Del Prete @.***> Sent: Thursday, December 23, 2021 5:07 PM To: travisghansen/hass-opnsense Cc: Cory Mckee; Author Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

That seemed to work

What worked?

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-1000593173&data=04%7C01%7Ccory%403suns.org%7Ca2e02d29696b4c7a1c8d08d9c679ce95%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637759048740102058%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ozIo54f2l74BAsu0wl237yspjqgTuslulWNeMMUAT0Y%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTETGEYDLSR5SEWEM7BLUSPBWLANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7Ca2e02d29696b4c7a1c8d08d9c679ce95%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637759048740102058%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=QE4quHVC%2BS%2BrFYpgrFOOjp0VPW7KuIftdIV%2FQ1Z144Y%3D&reserved=0. Triage notifications on the go with GitHub Mobile for iOShttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7Ccory%403suns.org%7Ca2e02d29696b4c7a1c8d08d9c679ce95%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637759048740102058%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=e7ohvcgndV7kPNr9qVY6%2FNCwSSCjepaSKcNJsQsJ0p8%3D&reserved=0 or Androidhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7Ccory%403suns.org%7Ca2e02d29696b4c7a1c8d08d9c679ce95%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637759048740102058%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Xev3WSdH6BQwQmmSgwa0BaMxLr%2F%2FIsB8WK3r6wJOwlU%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

alexdelprete commented 2 years ago

Can you show the output?

3suns-org commented 2 years ago

Sorry I did but it looks like it didn't make it. Uploading again. image

alexdelprete commented 2 years ago

Certificate issue.

Can you try curl on the other system you said the integration works with? Please report the output of that.

3suns-org commented 2 years ago

Looks identical to me

image

travisghansen commented 2 years ago

In the integration did uncheck ‘verify ssl certificate’ when trying to add the server?

3suns-org commented 2 years ago

Yes


From: Travis Glenn Hansen @.***> Sent: Saturday, December 25, 2021 1:27 PM To: travisghansen/hass-opnsense Cc: Cory Mckee; Author Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

In the integration did uncheck ‘verify ssl certificate’ when trying to add the server?

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-1001073775&data=04%7C01%7Ccory%403suns.org%7C7330ef9cc8c44868c71208d9c7ed65ed%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760644710754922%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Fu4oc5D0Ye5I%2BsfhWZiWLwgPTgpiayCwL8xcI0ASt7g%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTERPAVUAYHUUXRHUZLDUSYZNHANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7C7330ef9cc8c44868c71208d9c7ed65ed%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760644710754922%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=VKqrWI6SDb4O%2FE7JADJxegbIz3GDNgt3JZYsgPmhBfo%3D&reserved=0. Triage notifications on the go with GitHub Mobile for iOShttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7Ccory%403suns.org%7C7330ef9cc8c44868c71208d9c7ed65ed%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760644710754922%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=NUcf4TBtqZW5aeKTTnJumGUUpqioHo8hJ2s1CC3B1%2F8%3D&reserved=0 or Androidhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7Ccory%403suns.org%7C7330ef9cc8c44868c71208d9c7ed65ed%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760644710754922%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=858TuS3qXeyxjGHFJumeMUcQc4uXzkeqlsuokspwvL8%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

travisghansen commented 2 years ago

Run the curl command again but add -k and send the output as well.

3suns-org commented 2 years ago

192.168.2.3 is successful device and 192.168.2.2 is unsuccessful device

image

image

travisghansen commented 2 years ago

Yeah that’s pretty crazy :( I’m not sure what advice to give at this point. The failure is a pretty low level failure but seems to only be happening running in python and not generally for the node.

Does your username and/or password have any crazy characters in it?

3suns-org commented 2 years ago

Nothing crazy in the user name and password and they are the same between the working and non working devices.


From: Travis Glenn Hansen @.***> Sent: Saturday, December 25, 2021 2:11 PM To: travisghansen/hass-opnsense Cc: Cory Mckee; Author Subject: Re: [travisghansen/hass-opnsense] Unable to register new server (Issue #19)

Yeah that’s pretty crazy :( I’m not sure what advice to give at this point. The failure is a pretty low level failure but seems to only be happening running in python and not generally for the node.

Does your username and/or password have any crazy characters in it?

— Reply to this email directly, view it on GitHubhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Ftravisghansen%2Fhass-opnsense%2Fissues%2F19%23issuecomment-1001077051&data=04%7C01%7Ccory%403suns.org%7C8bb54be028824164781008d9c7f37756%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760670779111184%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=xHqw3QXD5uTPt8rIV8ahcdGuyqo9MZBG6PEp8q2C2OM%3D&reserved=0, or unsubscribehttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAQ6PTEUHI7ZF774FDOLB4QTUSY6QDANCNFSM5KS2L4HA&data=04%7C01%7Ccory%403suns.org%7C8bb54be028824164781008d9c7f37756%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760670779111184%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=PvFiMBPHjP4yl8V4lsmhuxTP7TlTi2K1iKAVf4r%2F5sc%3D&reserved=0. Triage notifications on the go with GitHub Mobile for iOShttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapps.apple.com%2Fapp%2Fapple-store%2Fid1477376905%3Fct%3Dnotification-email%26mt%3D8%26pt%3D524675&data=04%7C01%7Ccory%403suns.org%7C8bb54be028824164781008d9c7f37756%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760670779111184%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=sZpd3YbO%2FBfpmvsSvacmmeWUJZga8kOmFMQtu5NOx%2Fw%3D&reserved=0 or Androidhttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid%3Dcom.github.android%26referrer%3Dutm_campaign%253Dnotification-email%2526utm_medium%253Demail%2526utm_source%253Dgithub&data=04%7C01%7Ccory%403suns.org%7C8bb54be028824164781008d9c7f37756%7C84a530851d4844d080c6d064abff8654%7C0%7C0%7C637760670779111184%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=pneJy80K1Z28sgQkqqExzaqArrjgIKynPmLbJLh0AK8%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

travisghansen commented 2 years ago

I'm at a loss. I don't think that error should even come into play when using IP address anyway..it's all a bit crazy :(

alexdelprete commented 2 years ago

Travis, maybe let him activate debug in logger for the component? So we can see some details at the python/component level.

travisghansen commented 2 years ago

Perhaps. It’s such a low level error though that I have doubts it will help. The error code is coming from c-level hostname resolution…it’s failing on pretty fundamental stuff that’s generally speaking well outside the scope of the integration.

alexdelprete commented 2 years ago

Did a quick search on the forum: there are a lot of cases, but all seem to point to network issues. Firewall rules blocking access, dhcp/mac address mismatch issues, etc.

Hard to debug for us, but it looks like a network problem to be addressed.

alexdelprete commented 2 years ago

Found this, pointing to a temporary reverse DNS lookup problem:

gaierror is "getaddrinfo error", and -3 is "EAI_AGAIN: The name server returned a temporary failure indication. Try again later." Your DNS is acting up. Catching socket.gaierror and retrying is a good solution.
travisghansen commented 2 years ago

Yeah in some circumstances a retry may make sense, but the user is getting the issue consistently indicating it’s not intermittent which makes it even more strange.

alexdelprete commented 2 years ago

192.168.2.3 is successful device and 192.168.2.2 is unsuccessful device

could you show us the settings of web gui in SYSTEMS:SETTINGS:ADMINISTRATION in OPNsense? I'm interested in particular to the DNS Rebind Check and HTTP_REFERER enforcement settings (check the green comments in the following screenshot).

image

alexdelprete commented 2 years ago

@travisghansen I recently switched to SSL for the GUI, and I noticed I had a lot of unavailable responses from the component, thinking about this issue we're discussing here, I reverted to HTTP again, no SSL, and all the unavailable responses have disappeared, the component is working much more reliably when querying the php plugin.

I think there might be some issues regarding the SSL connection...maybe those security options of OPNsense play a role with that, I'm leaving HTTP for now, also because it's on LAN, so I don't have big security concerns.

3suns-org commented 2 years ago

Settings are the same on both systems-

image

image .

Also I tried changing to HTTP and got the same error messages.

alexdelprete commented 2 years ago

If it can't connect in HTTP, there's some serious low-level issue on the networking side. I noticed some issues with HTTPS sometims returning unavailable status, but it can always connect. Your issue seems a different one.

3suns-org commented 2 years ago

The two systems in question are in an HA config and the primary device is the one I cant get to connect but all of the settings are identical because they are syncing.

alexdelprete commented 2 years ago

If it's a sort of cluster, why do you need to monitor both? is it active-active or active-passive?

3suns-org commented 2 years ago

Its active-passive and I can only monitor the passive node.

alexdelprete commented 2 years ago

got you. I wonder if the cluster configuration of OPNsense is doing some low-level stuff that interferes. I don't know how that works, never analyzed it.

travisghansen commented 2 years ago

This will be a great test if we can get you going :)

Is there a floating address for the current active node at 192.168.2.1?

3suns-org commented 2 years ago

There are no floating rules that call out that address. .1 is the virtual address that moves back and forth. .2 is the active and .3 is the passive. I have tried both the virtual and active addresses but have only been using the active address in all of my tests.

alexdelprete commented 2 years ago

And the problem is with the virtual address .1 or .2 ?