IBM Support

QRadar: Error "Connection refused Trying other mirror." when trying to install an rpm.

Troubleshooting


Problem

When the administrator tries to install or upgrade an rpm package in the Console, by using this yum command they receive the following error:
 
yum install <packet_name>.rpm 

[Errno 14] curl#7 - "Failed connect to <IP address>:<Port>; Connection refused"
Trying other mirror.

https://<IP address>:<Port>/yum_rpms/repodata/repomd.xml: 
yum-config-manager --save --setopt=mantl-rpms.skip_if_unavailable=true
failure: repodata/repomd.xml from mantl-rpms: [Errno 256] No more mirrors to try.
Note: The IP address (or FQDN) and port on the error changes depending on the repository configuration on each environment.
The error is displayed no matter what rpm package the administrator tries to install or upgrade (DSM or PROTOCOL).

Cause

The main cause for this error is the presence of an invalid repository configuration in /etc/yum.repos.d/. The console is not able to connect to the IP address or FQDN specified in the repository file.

Diagnosing The Problem

  1. Log in to the QRadar Console CLI as the root user.
  2. Download a supported rpm from IBM Fix Central.
    Note: QRadar is not intended as a multi-user, general-purpose server. No repository configuration or unsupported rpm must be installed to the Console.
    For more information about this topic, see the Third-party software on QRadar appliances.
  3. Attempt to install the rpm package. The installation fails with error:
    [Errno 14] curl#7 - "Failed connect to 127.0.0.1:12345; Connection refused"
    Note: This message means that the device is not able to connect to the IP address 127.0.0.1 using the port 12345.
  4. Use the cat command to find the conflicting repository in the /etc/yum.repos.d/ directory.
    cat /etc/yum.repos.d/*.repo
  5. Search for the repository file with the IP address and port that is displayed in the error. In this example, the IP address and port are 127.0.0.1:12345.
    # cat /etc/yum.repos.d/*.repo
    [myrpms-rpms] name=mantl-rpms
    baseurl=https://127.0.0.1:12345/yum_rpms
    enabled=1
    <...>

Resolving The Problem

To fix the issue, the file containing the wrong information must be removed from the /etc/yum.repos.d/ folder after that the rpm can be installed without any error.
  1. Log in to the QRadar Console CLI as the root user.
  2. Removed the conflicting repository file.
    1. Create the backup directory.
      mkdir -p /store/IBM_Support/
    2. Back up the current files.
      cp -fv /etc/yum.repos.d/* /store/IBM_Support/ 
    3. Remove the conflicting repository file.
      ​rm -fv /etc/yum.repos.d/mantl-rpms.repo
      Note: In this technote, mantl-rpms.repo is the conflicting file. The administrator must use the file name reported on their systems.​
  3. Install the rpm package in the Console.
    yum -y install <rpm package>
Result
The supported rpm package is now installed successfully. If the rpm installation still fails, contact QRadar Support for assistance.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwsyAAA","label":"Admin Tasks"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions"}]

Document Information

Modified date:
09 May 2022

UID

ibm16562999