Graphite Permission denied

Icinga Modules
#1

I have it all working, metrics are being ingested to my graphite host.

I did a test from the icinga2 host with CURL and I am certain I can connect.

The place where the graph is supposed to be in Icinga says “Failed to connect to X.X.X.X: Permission denied”

Appreciate any help

#2

Hello @jlombardo!

Please provide a screenshot or logs of the problem.

Best,
AK

#3

2430×1372 314 KB

That is a screenshot of what i’m seeing with some info redacted.

I’m finding no logs that indicate an issue. I am able to log into graphite and verify data exists and graphing works from the graphite console.

I am also able to do a wget from the icinga host to graphite without issue.

wget https://graphiteURL:PORT
–2021-04-08 14:18:13-- https://graphiteURL:PORT/
Resolving graphiteURL (graphiteURL)… IP
Connecting to graphiteURL (graphiteURL)|IP|:PORT… connected.
HTTP request sent, awaiting response… 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html’

[ <=>                                                                                                                                                ] 877         --.-K/s   in 0s

2021-04-08 14:18:13 (35.9 MB/s) - ‘index.html’ saved [877]

#4

@dgoetz Let me guess – SELinux is the problem?

#5

Maybe, as the port is not shown I do not know if it is a port normally assigned to http traffic.

semanage port -l will show you what type the port is labeled and then you can change the label, use a specific boolean or allow simply all connects for httpd by execution semanage boolean --modify --on httpd_can_network_connect.