CentOS - Feb 2019 - elasticsearch connection refused

On Tue, 2019-02-19 at 14:17 +0000, Laack, Andrea P
wrote:
> Selinux will not allow connections on other than default http ports.
> 
> semanage port -m -t http_port_t -p tcp 9200
It's not a web server port - elasticsearch is a database.

P.

On Tue, 2019-02-19 at 14:26 +0000, Pete Biggs wrote:
> On Tue, 2019-02-19 at 14:17 +0000, Laack, Andrea P wrote:
> > Selinux will not allow connections on other than default http ports.
> > 
> > semanage port -m -t http_port_t -p tcp 9200
> 
> It's not a web server port - elasticsearch is a database.
> 
Sorry, that was a bit abrupt - yes, it sort of looks like a web server.
Does selinux interpret it as such?

P.

We can either set selinux to permissive (not suggested) or open a port.  Writing
custom ports in selinux is not my specialty.

Andrea

-----Original Message-----
From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of Pete Biggs
Sent: Tuesday, February 19, 2019 8:33 AM
To: centos at centos.org
Subject: {EXTERNAL} Re: [CentOS] elasticsearch connection refused

On Tue, 2019-02-19 at 14:26 +0000, Pete Biggs wrote:
> On Tue, 2019-02-19 at 14:17 +0000, Laack, Andrea P wrote:
> > Selinux will not allow connections on other than default http ports.
> > 
> > semanage port -m -t http_port_t -p tcp 9200
> 
> It's not a web server port - elasticsearch is a database.
> 
Sorry, that was a bit abrupt - yes, it sort of looks like a web server.
Does selinux interpret it as such?

P.


_______________________________________________
CentOS mailing list
CentOS at centos.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.centos.org_mailman_listinfo_centos&d=DwICAg&c=qhent5lL-8Lans1hhN7NTGhSd0GBLfQfwUvzHj1D5tQ&r=U7-RwMM5aSl714ZiiWB9Ly-4UTAgbRqq8xuylndqN_8&m=hpCCu6UeoDY_mdXrHB6IcAKcmXm89oR8XkuzFvVEm6o&s=52XnrNGGFFM6EO5rMBPrSLXjT_tBYI0Utb87eic7aeI&e
**********************************************************************
The information contained in this e-mail may be privileged and/or confidential,
and protected from disclosure, and no waiver of any attorney-client, work
product, or other privilege is intended.  If you are the intended recipient,
further disclosures are prohibited without proper authorization. If you are not
the intended recipient (or have received this e-mail in error) please notify the
sender immediately and destroy this e-mail. Any unauthorized copying, disclosure
or distribution of the material in this e-mail is strictly forbidden and
possibly a violation of federal or state law and regulations. The sender and
Baylor Scott & White Health, and its affiliated entities, hereby expressly
reserve all privileges and confidentiality that might otherwise be waived as a
result of an erroneous or misdirected e-mail transmission. No employee or agent
is authorized to conclude any binding agreement on behalf of Baylor Scott &
White Health, or any affiliated entity, by e-mail without express written
confirmation by the CEO, the Senior Vice President of Supply Chain Services or
other duly authorized representative of Baylor Scott & White Health.

On 2019-02-19, Pete Biggs <pete at biggs.org.uk>
wrote:
> On Tue, 2019-02-19 at 14:26 +0000, Pete Biggs wrote:
>> 
>> It's not a web server port - elasticsearch is a database.
>
> Sorry, that was a bit abrupt - yes, it sort of looks like a web server.
It's a bit of both.  It is queryable like a database, but it answers
requests using HTTP methods.

--keith

-- 
kkeller at wombat.san-francisco.ca.us