Correct set-up and config for icingadb-redis - `NOAUTH Authentication required.`

Icinga 2 Icinga DB
1

Having provided a password in /etc/icingadb-redis/icingadb-redis.conf and removed the # along with adding the password to /etc/icingadb/config.yml the following log entries appear.

This is after running sudo systemctl restart icingadb-redis icinga2 icingadb

Is there another location where the icingadb-redis password must be provided?

tail -f -n 2 /var/log/icinga2/icinga2.log

[2024-07-05 15:03:52 +0100] information/IcingaDB: Trying to connect to Redis server (async) on host '127.0.0.1:6380'
[2024-07-05 15:03:52 +0100] critical/IcingaDB: Cannot connect to 127.0.0.1:6380: NOAUTH Authentication required.

icinga2 feature list

Disabled features: command compatlog debuglog elasticsearch gelf graphite influxdb influxdb2 journald livestatus opentsdb perfdata syslog
Enabled features: api checker icingadb mainlog notification

icinga2 --version

icinga2 - The Icinga 2 network monitoring daemon (version: r2.14.2-1)

Copyright (c) 2012-2024 Icinga GmbH (https://icinga.com/)
License GPLv2+: GNU GPL version 2 or later <https://gnu.org/licenses/gpl2.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

System information:
  Platform: Fedora Linux
  Platform version: 40 (Cloud Edition)
  Kernel: Linux
  Kernel version: 6.9.7-200.fc40.x86_64
  Architecture: x86_64

Build information:
  Compiler: GNU 14.0.1
  Build host: unknown
  OpenSSL version: OpenSSL 3.2.1 30 Jan 2024

Application information:

General paths:
  Config directory: /etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /run/icinga2

Old paths (deprecated):
  Installation root: /usr
  Sysconf directory: /etc
  Run directory (base): /run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /run/icinga2/icinga2.pid

icinga2 daemon -C

[2024-07-05 14:51:57 +0100] information/cli: Icinga application loader (version: r2.14.2-1)
[2024-07-05 14:51:57 +0100] information/cli: Loading configuration file(s).
[2024-07-05 14:51:57 +0100] information/ConfigItem: Committing config item(s).
[2024-07-05 14:51:57 +0100] information/ApiListener: My API identity: heimdall.railriverroad.co.uk
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 2 NotificationCommands.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 12 Notifications.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 IcingaApplication.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 2 HostGroups.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 Host.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 Downtime.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 IcingaDB.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 FileLogger.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 3 Zones.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 CheckerComponent.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 User.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 Endpoint.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 ApiUser.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 ApiListener.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 NotificationComponent.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 246 CheckCommands.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 UserGroup.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 3 ServiceGroups.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 3 TimePeriods.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 1 ScheduledDowntime.
[2024-07-05 14:51:57 +0100] information/ConfigItem: Instantiated 11 Services.
[2024-07-05 14:51:57 +0100] information/ScriptGlobal: Dumping variables to file '/var/cache/icinga2/icinga2.vars'
[2024-07-05 14:51:57 +0100] information/cli: Finished validating the configuration file(s).
2

https://icinga.com/docs/icinga-2/latest/doc/09-object-types/#icingadb

/etc/icinga2/features-available/icingadb.conf

object IcingaDB "icingadb" {
  //host = "127.0.0.1"
  //port = 6380
  password = "xxx"
}

I think this is what you missed.
also restart icinga2 after this change

3

did you restart the redis server after modifying the config?

4

thank you both for the suggestions.

I managed to get this working but only but removing the password from Redis.
I think this is a bug, or at least an incompatibility betweeen Icinga / Redis versions.

If a requirepass is set in Redis then a User/Password must be provided by Icinga. Redis docs say " When the requirepass setting is enabled, Redis will refuse any query by unauthenticated clients. A client can authenticate itself by sending the AUTH command followed by the password." but as far as I can tell no user/pass combo can be set in Icinga.

I did not find the Icinga Redis set-up docs so cannot be confident any of this is correct.

5

In Icinga DB Web it looks likte this:

image
image943×602 23.3 KB

And here ist the documentation for the icinga2 daemon’s connection to Redis:

https://icinga.com/docs/icinga-db/latest/doc/03-Configuration/#redis-configuration