Tactical RMM port 4222 is not open on your RMM

[multispeed]

Hi!,

I've just installed tactical RMM and up to a certain point it works. When i install add a agent (in this case windows) it gives me the following error. (image) https://ibb.co/2NqMh3k

And indeed when i browse to the http://46.249.50.206:4222 or https://46.249.50.206.4222 these both are not functional. And neither is https://api.patch.wijzijnmerlin.nl/ which i linked during the installation in the dns for api step. I already disabled the complete firewall trying to fix this issue. And both the frontend https://patch.wijzijnmerlin.nl/ as the meshcentral https://rmm.patch.wijzijnmerlin.nl/ are working.

When i start the agent installer, the client shows up in the meshcentral, but doesn't in the tactical rmm (my guess is because of the api port 4222 error.

[dinger1986]

did you open the ports at the start using ufw?

[multispeed]

Does it work now then?

If you do sudo systemctl start nats then sudo systemctl status nats is it running?

You must have put in patch.yourdomain.com rather than yourdomain.com at the start of the script.

If that's showing ok should be able to install an agent.

No it did not, so i am doing a last install and make sure the domain name is correct.

[multispeed]

do not edit the nats-rmm.conf file, that file is dynamically generated frequently so any changes you make there will be lost

the error you're getting is cuz nats is problem already running in systemd and you tried to run it manually without stopping the server so don't worry about that

yea sounds like you put patch.wijzijnmerlin.nl during install when asked for root domain, instead of wijzijnmerlin.nl

go ahead and wipe and reinstall one more time and should work

Unfortunately that did not work, the django admin url is unreachable. Reinstalled a debian 10 without any extra options, and didn't enable ufw yet.

Somehow the listening port 4222 is in use. When i systemctl status nats it seems to be running though. I can telnet to localhost on port 4222.

tactical@patch:~$ nats-server -DVV -c /rmm/api/tacticalrmm/nats-rmm.conf
[29260] 2021/04/22 11:32:40.474445 [INF] Starting nats-server
[29260] 2021/04/22 11:32:40.474531 [INF] Version: 2.2.0
[29260] 2021/04/22 11:32:40.474543 [INF] Git: [0e3c723]
[29260] 2021/04/22 11:32:40.474555 [DBG] Go build: go1.16.2
[29260] 2021/04/22 11:32:40.474564 [INF] Name: NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK
[29260] 2021/04/22 11:32:40.474574 [INF] ID: NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK
[29260] 2021/04/22 11:32:40.474586 [WRN] Plaintext passwords detected, use nkeys or bcrypt
[29260] 2021/04/22 11:32:40.474597 [INF] Using configuration file: /rmm/api/tacticalrmm/nats-rmm.conf
[29260] 2021/04/22 11:32:40.474628 [DBG] Created system account: "$SYS"
[29260] 2021/04/22 11:32:40.475464 [TRC] SYSTEM - <<- [SUB $SYS._INBOX.W05PAbJC. 2]
[29260] 2021/04/22 11:32:40.475525 [TRC] SYSTEM - <<- [SUB $SYS.SERVER.ACCOUNT..CONNS 3]
[29260] 2021/04/22 11:32:40.475555 [TRC] SYSTEM - <<- [SUB $SYS.INBOX.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK 4]
[29260] 2021/04/22 11:32:40.475580 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT.NSUBS 5]
[29260] 2021/04/22 11:32:40.475605 [TRC] SYSTEM - <<- [SUB $SYS.SERVER..STATSZ 6]
[29260] 2021/04/22 11:32:40.475630 [TRC] SYSTEM - <<- [SUB $SYS.SERVER..SHUTDOWN 7]
[29260] 2021/04/22 11:32:40.475653 [TRC] SYSTEM - <<- [SUB $SYS.ACCOUNT..CLAIMS.UPDATE 8]
[29260] 2021/04/22 11:32:40.475678 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT..CLAIMS.UPDATE 9]
[29260] 2021/04/22 11:32:40.475701 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING 10]
[29260] 2021/04/22 11:32:40.475735 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.VARZ 11]
[29260] 2021/04/22 11:32:40.475761 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.VARZ 12]
[29260] 2021/04/22 11:32:40.475784 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.ROUTEZ 13]
[29260] 2021/04/22 11:32:40.475807 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.ROUTEZ 14]
[29260] 2021/04/22 11:32:40.475830 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.GATEWAYZ 15]
[29260] 2021/04/22 11:32:40.475858 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.GATEWAYZ 16]
[29260] 2021/04/22 11:32:40.475882 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.LEAFZ 17]
[29260] 2021/04/22 11:32:40.475909 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.LEAFZ 18]
[29260] 2021/04/22 11:32:40.475932 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.JSZ 19]
[29260] 2021/04/22 11:32:40.475955 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.JSZ 20]
[29260] 2021/04/22 11:32:40.475984 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.STATSZ 21]
[29260] 2021/04/22 11:32:40.476009 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.STATSZ 22]
[29260] 2021/04/22 11:32:40.476032 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.SUBSZ 23]
[29260] 2021/04/22 11:32:40.476055 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.SUBSZ 24]
[29260] 2021/04/22 11:32:40.476079 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.CONNZ 25]
[29260] 2021/04/22 11:32:40.476101 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.CONNZ 26]
[29260] 2021/04/22 11:32:40.476135 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.NBUKONNDUFHVDQA33XS45XY5USN7QFL6NQVZ6VYDHSBA2CBV4I7255YK.ACCOUNTZ 27]
[29260] 2021/04/22 11:32:40.476161 [TRC] SYSTEM - <<- [SUB $SYS.REQ.SERVER.PING.ACCOUNTZ 28]
[29260] 2021/04/22 11:32:40.476229 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT..JSZ 29]
[29260] 2021/04/22 11:32:40.476259 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT..INFO 30]
[29260] 2021/04/22 11:32:40.476287 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT..CONNS 31]
[29260] 2021/04/22 11:32:40.476311 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT..SUBSZ 32]
[29260] 2021/04/22 11:32:40.476333 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT..CONNZ 33]
[29260] 2021/04/22 11:32:40.476354 [TRC] SYSTEM - <<- [SUB $SYS.REQ.ACCOUNT..LEAFZ 34]
[29260] 2021/04/22 11:32:40.476378 [TRC] SYSTEM - <<- [SUB $SYS.ACCOUNT..LEAFNODE.CONNECT 35]
[29260] 2021/04/22 11:32:40.476402 [TRC] SYSTEM - <<- [SUB $SYS.LATENCY.M2.W05PAbJC 36]
[29260] 2021/04/22 11:32:40.476425 [TRC] SYSTEM - <<- [SUB $SYS.DEBUG.SUBSCRIBERS 37]
[29260] 2021/04/22 11:32:40.477288 [FTL] Error listening on port: 0.0.0.0:4222, "listen tcp 0.0.0.0:4222: bind: address already in use"*

**tactical@patch:~$ sudo systemctl status nats
● nats.service - NATS Server
Loaded: loaded (/etc/systemd/system/nats.service; enabled; vendor preset: enabled)
Active: active (running) since Thu 2021-04-22 11:30:51 CEST; 3min 43s ago
Main PID: 28818 (nats-server)
Tasks: 6 (limit: 2345)
Memory: 12.2M
CGroup: /system.slice/nats.service
└─28818 /usr/local/bin/nats-server -c /rmm/api/tacticalrmm/nats-rmm.conf

Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.272087 [INF] Starting nats-server
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.272209 [INF] Version: 2.2.0
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.272225 [INF] Git: [0e3c723]
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.272237 [INF] Name: NAVJGNL6XWZISTFAQWNRMB3QW624CVOB4QHC2LRRYWW7D42QOKWQTRUY
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.272248 [INF] ID: NAVJGNL6XWZISTFAQWNRMB3QW624CVOB4QHC2LRRYWW7D42QOKWQTRUY
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.272262 [WRN] Plaintext passwords detected, use nkeys or bcrypt
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.272274 [INF] Using configuration file: /rmm/api/tacticalrmm/nats-rmm.conf
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.276808 [INF] Listening for client connections on 0.0.0.0:4222
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.276828 [INF] TLS required for client connections
Apr 22 11:30:51 patch nats-server[28818]: [28818] 2021/04/22 11:30:51.277460 [INF] Server is ready**

[wh1te909]

the only reason i had you run nats-server -DVV -c /rmm/api/tacticalrmm/nats-rmm.conf was because originally, the systemd service was not running and so I wanted to run it manually to see debug logging. now that's its running successfully though you don't need to run that command anymore. the address is already in use because it's running already, you're basically trying to run it twice now which is why you're getting that already in use message

so at this point all looks good, assuming there were no errors during install and no edge firewalls are in place then you should be good to go
the django admin url is disabled by default, please check the docs for how to enable it

[multispeed]

the only reason i had you run nats-server -DVV -c /rmm/api/tacticalrmm/nats-rmm.conf was because originally, the systemd service was not running and so I wanted to run it manually to see debug logging. now that's its running successfully though you don't need to run that command anymore. the address is already in use because it's running already, you're basically trying to run it twice now which is why you're getting that already in use message

so at this point all looks good, assuming there were no errors during install and no edge firewalls are in place then you should be good to go
the django admin url is disabled by default, please check the docs for how to enable it

You're absolutely right, sorry for my ignorance. And thank you for the explanation and patience.

[multispeed]

It's all running smoothly now, thank you again for the feedback

[dinger1986]

Cool was thinking that would be next.

[kmbasha]

Hi there,

Myself, have the same issue. Any resolution to the problem? anyone has found any solution to it?

regards

[dinger1986]

has it worked at all yet?

1. Install type? (Standard/Docker)
   Did you deviate IN ANY WAY from these instructions? https://docs.tacticalrmm.com/install_server/
   Did you deviate IN ANY WAY from these instructions? https://docs.tacticalrmm.com/install_docker/
2. Where is the server? (VPS/onprem)
3. New/old install? Rough age of TRMM server (days/weeks/months)?

Server Install Specific questions:
4. What OS/version is TRMM installed on.
5. Using a real domain?
6. Did letsencrypt finalize and work
7. Have you looked at the troubleshooting steps? https://docs.tacticalrmm.com/troubleshooting/
8. What kind of ssl certs? Let's Encrypt, or purchased (you're not trying to make self-signed work right?)
9. Check Expiry date of your certificates in the browser (at https://rmm.example.com/ )

Network Troubleshooting
10. Are you using a proxy?
11. Are you a wizard? See https://docs.tacticalrmm.com/unsupported_guidelines/
If so, what's in the network between agent and server?

Agent Troubleshooting
12. Is there ANY 3rd party Antivirus installed on the computer?
13. Is there any network based filtering/AV filtering?

Asking yourself questions like: When did it go from working to broken? What changed during that time? This will help you.