https://github.com/osquery/osquery logo
Title
v

VishnuVardhan

06/01/2020, 4:00 PM
I followed the doc https://github.com/kolide/fleet/blob/master/docs/infrastructure/fleet-on-centos.md and installed kolide on one of my centos server. Kolide fleet and osquery are running on the same server. But when i try to enroll the host to the fleet server, i get the below error messages. Any help on this? When generating the cert, i used the hostname of the server which is running fleet+osquery in my case as the CN name and matched the same in --tls_hostname= flag. Did i miss something? any help on why the client is not enrolled to the server?
z

zwass

06/01/2020, 4:01 PM
Connection timed out
probably means requests to that hostname are not being routed to that server.
v

VishnuVardhan

06/01/2020, 4:03 PM
But here, i am trying to enroll a localhost. Kolide fleet is running on the same host as osqueryd.
z

zwass

06/01/2020, 4:04 PM
I'm guessing you didn't redact localhost in the above screenshot?
v

VishnuVardhan

06/01/2020, 4:06 PM
the redacted text is the ip address of the server running fleet.
z

zwass

06/01/2020, 4:06 PM
Can you
curl redacted:8080
?
v

VishnuVardhan

06/01/2020, 4:19 PM
i get a gateway timeout error when i do curl as well
z

zwass

06/01/2020, 4:21 PM
Then the Fleet server is definitely not listening on the interface you are trying to route to.
v

VishnuVardhan

06/01/2020, 4:22 PM
Thanks @zwass Will check it out and get back.