Verify the DataBase settings are valid Error

[aalaridRF]

Hello, I'm on version1.1.103 of Expedition and I am unable to remediate this error: "Your database is listening for incomming connections from only '127.0.0.1:3306' (IP:port)
Remediation: Verify you have proper settings for database connections. (see ML gets stuck at "Pending" )'

When I select their recommended remediation instructions and try to follow the steps, /etc/mysql/my.cnf file doesn't have the field for bind-address at all and I checked all the other db files and couldn't find it either. How can I go about getting this resolved? What is supposed to be set?

Thanks

[lychiang]

Hi @aalaridRF Try restart the mysql service by issuing below commands:

sudo service mysql restart

[aalaridRF]

I tried a restart and a full stop/start of mysql and still no difference. Here's what shows up in the my.cnf through vi:

[lychiang]

@aalaridRF  Please try to change the IP address to 127.0.0.1 and click on save.  when you navigate to other tab and come back , it should show the expedition real IP in the field instead of the 127.0.0.1. 

 

[aalaridRF]

Changed to the loopback address, saved, and then switched tabs. Came back and it changed back to the real IP that it was before. Still shows the same error on the Dashboard after rescanning. Tried opening the my.cnf again and now I get this screen: 

Even tried restarting the mysql service again.

[aalaridRF]

Is there anything else I can try? Just updated to the latest beta and still no change.

[azuniga]

Hello @aalaridRF 

Once you change it to 127.0.0.1 go ahead and hit the save button located at the bottom right of the page. Most likely you may not have done that so it can save the new updated IP address.

[aalaridRF]

Thanks for the post. Save was definitely clicked, got the Data Saved popup afterwards but when I change tabs and click back into Settings > M.Learning the IP has reverted to the previous IP. Is there anywhere else I need to change the IP?

[azuniga]

Are you reaching expedition with a NAT'd IP address? If so reference the IP address prior to being NAT'd, alter it to the IP address of the expedition server and see if anything changes. That IP address should be located within the CLI "ifconfig | grep inet".

[aalaridRF]

IP address isn't NAT'd, it is the same IP I get when I run the ifconfig. I see both the assigned IP and the 127.0.0.1 listed for inet.

[azuniga]

Hello @aalaridRF 

When you log into your expedition server what IP address does it show at the top?

[LukasB]

Hello,

I am on version 1.2.70 and I have same error message:

Your database is listening for incomming connections from only '' (IP:port)
Remediation: Verify you have proper settings for database connections. (see ML gets stuck at "Pending" )

But according to the mysql it is ok.

However, if I try to import config from CISCO, it is freezed on "initializing".

[lychiang]

Hi @LukasB Please verify if the agent is up and running, you can go to dashboard and it should show you agent status , if it's down, trying to restart it . 

[marianneogorman]

anyone figure out how to fix this error?

[dpuigdomenec]

Hi @marianneogorman 

Try to locate file /etc/mysql/mariadb.conf.d/50-server.cnf and comment line bind-address.Then restart the mysql service.

If the issue persists please send and email to fwmigrate@paloaltonetworks.com

Hope this helps,

David