Multiserver Config

Discussion in 'Installation/Configuration' started by tecnotuy, Feb 5, 2011.

  1. tecnotuy

    tecnotuy New Member

    :( hello, when I am forming the ispconfig in the seviers one for one and do they give me error of conecion in the database?????

    MySQL master server hostname []: web.example.tld

    MySQL master server root username [root]:

    MySQL master server root password []: Mypasswordroot

    MySQL master server database name [dbispconfig]:

    Unable to connect to mysql server ***********
    MySQL master server hostname []:

    please help me,,,,,
     
  2. falko

    falko Super Moderator Howtoforge Staff

    What are the outputs of
    Code:
    netstat -tap
    and
    Code:
    iptables -L
    on the master?
     
  3. tecnotuy

    tecnotuy New Member

    webservicio:~# netstat -tap
    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 *:mysql *:* LISTEN 2006/mysqld
    tcp 0 0 *:39594 *:* LISTEN 1720/rpc.statd
    tcp 0 0 *:sunrpc *:* LISTEN 1707/portmap
    tcp 0 0 *:ftp *:* LISTEN 2423/pure-ftpd (SER
    tcp 0 0 *:ssh *:* LISTEN 1929/sshd
    tcp 0 0 localhost:smtp *:* LISTEN 2396/exim4
    tcp 0 0 webservicio.sytes.n:ssh 192.168.0.108:xtel ESTABLISHED 2563/0
    tcp6 0 0 [::]:http-alt [::]:* LISTEN 2478/apache2
    tcp6 0 0 [::]:www [::]:* LISTEN 2478/apache2
    tcp6 0 0 [::]:tproxy [::]:* LISTEN 2478/apache2
    tcp6 0 0 [::]:ftp [::]:* LISTEN 2423/pure-ftpd (SER
    tcp6 0 0 [::]:ssh [::]:* LISTEN 1929/sshd
    tcp6 0 0 [::]:https [::]:* LISTEN 2478/apac

    webservicio:~# iptables -L
    Chain INPUT (policy ACCEPT)
    target prot opt source destination
    fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh

    Chain FORWARD (policy ACCEPT)
    target prot opt source destination

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination

    Chain fail2ban-ssh (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    In the Master Server, thank Falko
     
  4. falko

    falko Super Moderator Howtoforge Staff

    Looks ok. Does web.example.tld point to the master server (i.e., did you create a DNS record that points to the master server)?
     
  5. dotslasher

    dotslasher New Member

    sorry to resurrect this old thread but I'm having the same issue.

    Running the latest versions on both servers.
    I have a dns record that points to my master server. I've added the IP + hostname Mysql permissions on the Master server for the slave.

    The slave can ping the master.

    Code:
    tcp        0      0 *:mysql                 *:*                     LISTEN      17844/mysqld
    
    
    When trying to install I get the following:
    
    tcp        0      0 xxxx.xxxx:mysql *:*                     LISTEN      25594/mysqld
    tcp        0      1 xxxx.xxxx:43015 xxxx.xxxx.xxxx:mysql SYN_SENT    25774/php
    
    s# iptables -L
    Chain INPUT (policy ACCEPT)
    target     prot opt source               destination
    fail2ban-ssh  tcp  --  anywhere             anywhere            multiport dports ssh
    fail2ban-dovecot-pop3imap  tcp  --  anywhere             anywhere            multiport dports pop3,pop3s,imap2,imaps
    
    Chain FORWARD (policy ACCEPT)
    target     prot opt source               destination
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination
    
    Chain fail2ban-dovecot-pop3imap (1 references)
    target     prot opt source               destination
    RETURN     all  --  anywhere             anywhere
    
    Chain fail2ban-pureftpd (0 references)
    target     prot opt source               destination
    
    Chain fail2ban-ssh (1 references)
    target     prot opt source               destination
    RETURN     all  --  anywhere             anywhere
    
    Chain fail2ban-ssh-ddos (0 references)
    target     prot opt source               destination
    I want to add that I can ssh but not telnet (3306) to the master server. So mysql -h is not connecting either.
     
    Last edited: Feb 24, 2012
  6. falko

    falko Super Moderator Howtoforge Staff

    Not sure which of the above netstat outputs is correct, so can you please post the output of
    Code:
    netstat -tap | grep mysql
    from the MAster again?
     
  7. dotslasher

    dotslasher New Member

    from the master:

    Code:
    # netstat -tap | grep mysql
    tcp        0      0 *:mysql                 *:*                     LISTEN      2812/mysqld
    tcp        0      0 localhost:mysql         localhost:48119         ESTABLISHED 2812/mysqld
    tcp        0      0 localhost:48119         localhost:mysql         ESTABLISHED 16880/amavisd (ch1-
    
     
  8. falko

    falko Super Moderator Howtoforge Staff

    Looks good.

    Can you try to connect to the Master MySQL from the slave from the command line?

    Code:
    mysql -h web.example.tld -u root -p
    and

    Code:
    mysql -h <ip_address_of_master> -u root -p
     
  9. dotslasher

    dotslasher New Member

    doesn't work. I cannot connect to the remote mysql server. I've even tried adding the user on the slave and connect from the Master -> slave.

    On the Slave -> master -> After several minutes: ERROR 2003 (HY000): Can't connect to MySQL server on 'IP address here' (110)
    On the Master -> Slave -> ERROR 2003 (HY000): Can't connect to MySQL server on 'IP address here' (110)
     
  10. falko

    falko Super Moderator Howtoforge Staff

    Strange. But you can connect to MySQL on the Master itself, right?
     
  11. dotslasher

    dotslasher New Member

    yes I can login to mysql on the master no problems at all.
     
  12. falko

    falko Super Moderator Howtoforge Staff

    I have no idea what's wrong... :(
     
  13. dotslasher

    dotslasher New Member

    could it be that something is blocking the remote connection to/from the slave server on the mysql port?
     
  14. falko

    falko Super Moderator Howtoforge Staff

    Looks like that - maybe some sort of firewall, or your hoster blocks port 3306...
     
  15. dotslasher

    dotslasher New Member

    the master is a dedicated box and the slave is a vps. I'll go check with the vps hosting company and I'll let you know.
     
  16. lufka8

    lufka8 New Member

    Unable to connect to mysql server

    Hi all,
    I have issue with similar/same thing, I setting up already 2 testing machines ( 2 DNS servers on local network - master and slave ) and I can't connect to mysql database - from slave 192.168.0.105 as reach2.reachnet.co.uk to master 192.168.0.108 reach1.reachnet.co.uk - gave same same error - unable connect to mysql server. I can connect to master database using hostname and ip address master server, from slave to master I can connect only using IP address, but not using hostname.

    netstat -tap

    Active Internet connections (servers and established)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 *:mysql *:* LISTEN 1727/mysqld
    tcp 0 0 *:sunrpc *:* LISTEN 775/portmap
    tcp 0 0 *:ftp *:* LISTEN 1878/pure-ftpd (SER
    tcp 0 0 reach1.reachnet.:domain *:* LISTEN 1075/named
    tcp 0 0 localhost.locald:domain *:* LISTEN 1075/named
    tcp 0 0 *:ssh *:* LISTEN 1886/sshd
    tcp 0 0 *:smtp *:* LISTEN 2169/master
    tcp 0 0 localhost.localdoma:953 *:* LISTEN 1075/named
    tcp 0 0 *:47331 *:* LISTEN 793/rpc.statd
    tcp 0 0 localhost.localdo:10024 *:* LISTEN 1202/amavisd (maste
    tcp 0 0 localhost.localdo:10025 *:* LISTEN 2169/master
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54205 ESTABLISHED 1727/mysqld
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54206 ESTABLISHED 1727/mysqld
    tcp 0 0 reach1.reachnet.c:56202 reach1.reachnet.c:mysql ESTABLISHED 31675/mysql
    tcp 0 0 reach1.reachnet.c:mysql reach1.reachnet.c:56202 ESTABLISHED 1727/mysqld
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54207 ESTABLISHED 1727/mysqld
    tcp 58 0 localhost.localdo:48922 localhost.localdo:10025 CLOSE_WAIT 1566/amavisd (ch1-a
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54209 ESTABLISHED 1727/mysqld
    tcp 0 52 reach1.reachnet.co.:ssh 192.168.0.102:52824 ESTABLISHED 2405/0
    tcp6 0 0 [::]:pop3 [::]:* LISTEN 1517/couriertcpd
    tcp6 0 0 [::]:imap2 [::]:* LISTEN 1496/couriertcpd
    tcp6 0 0 [::]:http-alt [::]:* LISTEN 1214/apache2
    tcp6 0 0 [::]:www [::]:* LISTEN 1214/apache2
    tcp6 0 0 [::]:tproxy [::]:* LISTEN 1214/apache2
    tcp6 0 0 [::]:ftp [::]:* LISTEN 1878/pure-ftpd (SER
    tcp6 0 0 [::]:domain [::]:* LISTEN 1075/named
    tcp6 0 0 [::]:ssh [::]:* LISTEN 1886/sshd
    tcp6 0 0 ip6-localhost:953 [::]:* LISTEN 1075/named
    tcp6 0 0 [::]:https [::]:* LISTEN 1214/apache2
    tcp6 0 0 [::]:imaps [::]:* LISTEN 1520/couriertcpd
    tcp6 0 0 [::]:pop3s [::]:* LISTEN 1538/couriertcpd


    and iptables -L

    Chain INPUT (policy DROP)
    target prot opt source destination
    fail2ban-courierimaps tcp -- anywhere anywhere multiport dports imaps
    fail2ban-sasl tcp -- anywhere anywhere multiport dports smtp
    fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
    fail2ban-pureftpd tcp -- anywhere anywhere multiport dports ftp
    fail2ban-courierpop3s tcp -- anywhere anywhere multiport dports pop3s
    fail2ban-courierpop3 tcp -- anywhere anywhere multiport dports pop3
    fail2ban-courierimap tcp -- anywhere anywhere multiport dports imap2
    DROP tcp -- anywhere loopback/8
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    ACCEPT all -- anywhere anywhere
    DROP all -- base-address.mcast.net/4 anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    PUB_IN all -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain FORWARD (policy DROP)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
    DROP all -- anywhere anywhere

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere
    PUB_OUT all -- anywhere anywhere

    Chain INT_IN (0 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain INT_OUT (0 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere
    ACCEPT all -- anywhere anywhere

    Chain PAROLE (15 references)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere

    Chain PUB_IN (5 references)
    target prot opt source destination
    ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
    ACCEPT icmp -- anywhere anywhere icmp echo-reply
    ACCEPT icmp -- anywhere anywhere icmp time-exceeded
    ACCEPT icmp -- anywhere anywhere icmp echo-request
    PAROLE tcp -- anywhere anywhere tcp dpt:ftp-data
    PAROLE tcp -- anywhere anywhere tcp dpt:ftp
    PAROLE tcp -- anywhere anywhere tcp dpt:ssh
    PAROLE tcp -- anywhere anywhere tcp dpt:smtp
    PAROLE tcp -- anywhere anywhere tcp dpt:domain
    PAROLE tcp -- anywhere anywhere tcp dpt:www
    PAROLE tcp -- anywhere anywhere tcp dpt:pop3
    PAROLE tcp -- anywhere anywhere tcp dpt:imap2
    PAROLE tcp -- anywhere anywhere tcp dpt:https
    PAROLE tcp -- anywhere anywhere tcp dpt:imaps
    PAROLE tcp -- anywhere anywhere tcp dpt:pop3s
    PAROLE tcp -- anywhere anywhere tcp dpt:mysql
    PAROLE tcp -- anywhere anywhere tcp dpt:http-alt
    PAROLE tcp -- anywhere anywhere tcp dpt:tproxy
    PAROLE tcp -- anywhere anywhere tcp dpt:webmin
    ACCEPT udp -- anywhere anywhere udp dpt:domain
    ACCEPT udp -- anywhere anywhere udp dpt:mysql
    DROP icmp -- anywhere anywhere
    DROP all -- anywhere anywhere

    Chain PUB_OUT (5 references)
    target prot opt source destination
    ACCEPT all -- anywhere anywhere

    Chain fail2ban-courierimap (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierimaps (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierpop3 (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-courierpop3s (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-pureftpd (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-sasl (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    Chain fail2ban-ssh (1 references)
    target prot opt source destination
    RETURN all -- anywhere anywhere

    and
    netstat -tap | grep mysql

    tcp 0 0 *:mysql *:* LISTEN 1727/mysqld
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54205 ESTABLISHED 1727/mysqld
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54206 ESTABLISHED 1727/mysqld
    tcp 0 0 reach1.reachnet.c:56202 reach1.reachnet.c:mysql ESTABLISHED 31675/mysql
    tcp 0 0 reach1.reachnet.c:mysql reach1.reachnet.c:56202 ESTABLISHED 1727/mysqld
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54207 ESTABLISHED 1727/mysqld
    tcp 0 0 reach1.reachnet.c:mysql 192.168.0.105:54209 ESTABLISHED 1727/mysqld

    both servers pinging itself hostname and ip addresses, but not pinging using hostname

    root@reach1:~# ping reach1.reachnet.co.uk
    PING reach1.reachnet.co.uk (192.168.0.108) 56(84) bytes of data.
    64 bytes from reach1.reachnet.co.uk (192.168.0.108): icmp_req=1 ttl=64 time=0.082 ms
    64 bytes from reach1.reachnet.co.uk (192.168.0.108): icmp_req=2 ttl=64 time=0.065 ms
    64 bytes from reach1.reachnet.co.uk (192.168.0.108): icmp_req=3 ttl=64 time=0.065 ms

    root@reach1:~# ping reach2.reachnet.co.uk
    ping: unknown host reach2.reachnet.co.uk

    dns records/dns zone needs to be created on master server on ispconfig panel?

    If yes, please tell me step by step.

    Many thanks for any help
     
  17. till

    till Super Moderator Staff Member ISPConfig Developer

    The problem is that you did not configure the /etc/hosts files on both servers correctly as described in the multiserver installation guide. Please reread the guide and then configure the hosts files as described there.
     

Share This Page