New install, cannot register client

Just installed onto a new server (following instructions at: Install Percona Monitoring and Management).
Logged into the UI, updated the password. The UI is working fine, but…

Getting this on all clients:

$ sudo pmm-admin config --server-insecure-tls --server-url=https://admin:<newpassword>@10.xxx.xxx.xxx:443
Checking local pmm-agent status...
pmm-agent is running.
Registering pmm-agent on PMM Server...
Failed to register pmm-agent on PMM Server: invalid username or password
Please check username and password.

I can telnet to the endpoint. I have opened the firewall on the client for port 42000 (we did this for running the old PMM on a different set of servers).
What else can I try?

1 Like

Can you log into the UI with those credentials? You can check syslog on the client side for more hints as to why it thinks the password is wrong.

There could also be hints in the PMM server (docker exec pmm-server tail /dev/logs/pmm-managed.log or grafana.log) as to what’s happening.

1 Like

The issue actually seems to be the firewall.
If I disable ufw on the pmm-server machine things work.
I have looked here Network - Percona Monitoring and Management and my ufw config should work:

To                         Action      From
--                         ------      ----
OpenSSH                    ALLOW       Anywhere                  
7771 on eth1               ALLOW       Anywhere                  
443                        ALLOW       Anywhere                  
80/tcp                     ALLOW       Anywhere                  
OpenSSH (v6)               ALLOW       Anywhere (v6)             
7771 (v6) on eth1          ALLOW       Anywhere (v6)             
443 (v6)                   ALLOW       Anywhere (v6)             
80/tcp (v6)                ALLOW       Anywhere (v6)             

But there are obviously other ports I need to open.

1 Like

Is this an ami or ovf? I have never seen this with docker…

1 Like

I am not sure what was wrong or what I did to fix it. But I uninstalled the pmm2-client from the machine, reinstalled, opened the firewall and now it connects.
Not a very useful thread for anyone else I am afraid!

1 Like