Ratos gives "connection denied" error even when connected with wifi

[strange skiff]

So I'm setting up my ratos on my RPI (which is connected with ethernet) and it sends off a network wich you can connect to (as it should be). But after connecting and searching ratos.local, http://RatOS.local/configure or http://192.168.50.1/configure it just gives the "ERR_CONNECTION_REFUSED" error.

[shell lark]

Did you want to try a clean flash to be sure now and we can troubleshoot as we go?

[strange skiff]

yes ofc I'll use the rpi imager

sd card is formatted as FAT32 with clustersize of 2048bytes

[shell lark]

Cool when its done, let's try using your phone for the initial connection

We'll see if anything different happens haha (sometimes certificate issues and a bunch of other things can cause issues so I like to debug on several devices to narrow it down)

[strange skiff]

just adding this to be sure its done correctly

[strange skiff]

okay I'll give you a message when its done

[shell lark]

Easy, hopefully we can get it sorted!

[light idol]

a clean flash is a good place to start. Do you happen to have a monitor you can hook up to the rpi as it boots as well?

and while you're doing that a few pieces of information that could help:

• what wifi band are you connecting to when you're attempting wifi? (2.4?, 5?)
• is your wifi set to use smart band/Multi-Link (combines multiple bands under same SSID)
• is your wifi using WPA3 for password security?

For ethernet, questions are:

• is your router adding LAN ports to a different VLAN? (when you connect other devices using that ethernet cable can you ping them from your computer)

[shell lark]

@light idol to aid some things quickly:

I got @strange skiff to connect via ssh, test connection via ping from windows on the old flash

[light idol]

ssh via hostname or ip address?

[shell lark]

IP, ping couldn't locate hostname

[light idol]

was he on wifi or ethernet at the time?

[shell lark]

That's a good question, I think WiFi

192.168.50.1 was the IP

[light idol]

that was the IP of the ratos host?

[shell lark]

Yep

Ssh [email protected]

[light idol]

root?

[shell lark]

Yeah the user was wrong

I think

But it got the certificate/fp added as expected

[light idol]

normally the .1 is reserved for the gateway or DHCP server, and you'd also need root to log in to to that

[shell lark]

192.168.50.168 was the ipv4 I think

[light idol]

you should be using pi as the user for the ratos host regardless of what IP it's at

[shell lark]

Yeah I couldn't remember the user at the time haha, just wanted to check it could find it and port 22 was accessible from windows

[light idol]

there's no way he was establishing ssh connection to ratos host at 192.168.50.1

that was the router

[shell lark]

Ah, well that makes more sense, I thought it was weird the ipv4 wasn't used

[light idol]

that address is ipv4

[shell lark]

Figured you guys had done some magic in the routing

[shell lark]

I meant the adapter ip (via windows network property screen)

[light idol]

that sort of thing is impossible

[shell lark]

What is?

[light idol]

for a device IP to present itself over the IP of the gateway to another device on the same subnet

[shell lark]

Yes obviously it'd conflict with the DHCP

[light idol]

it would bring down DHCP altogether

[shell lark]

Haha I know, had a few devices on our workstation boards do this

[light idol]

not possible, they'd be unable to get a lease

[shell lark]

Correct, couldn't ever see the device

For reference was our workstation boards with the external management consoles. Didn't get DHCP lease, couldn't find it, had to manually change address using the bare metal

[strange skiff]

unfortunately I cant hook up my pi onto a screen

[strange skiff]

no my rpi is connected to an ethernet

never unplugged that

ok now I'll firstly connect to the ratos network via my phone

[shell lark]

Might want to hold out for @light idol

[light idol]

give it a shot. It will depend on the router. Some of them don't allow mDNS resolution between wired and wireless connections, but there's no harm in trying it to see what happens. Make sure you've waited a good 5 minutes after firing up the pi before we make the attempt though

[shell lark]

The 5min wait is a gooooood point

[light idol]

the first boot can take a while for the network manager to get configured, and then technically it will reboot itself a 2nd time so it can start up the network services in a different order and finish some of the final first boot stuff

[strange skiff]

ok I think it already passed the 5 min mark

[light idol]

yep, try http://ratos.local in your browser

[strange skiff]

its saying site not available (DNS_probe_finished_NXDOMAIN error)

[light idol]

in this case, since you're using a phone, there could also be issues where the browser you're using automatically blocks non-TLS addresses, so you my have to figure out how to disable that setting, or you'll have to get the IP address of your ratos host from your router's network list

yeah, that means your phone isn't resolving the .local part

[strange skiff]

atm its pretty hard to get the routers network lis

[light idol]

or at least your phones brwser

[strange skiff]

do I keep trying on my phone or should I switch back to my laptop?

[light idol]

your laptop

phone is really difficult since it can tranparently switch between wifi and data

[strange skiff]

ok phone is unconnected to the ratos network and the laptop is connected now

[light idol]

and NXDOMAIN indicates it wasn't even trying to use your wifi network adapter to resolve

[strange skiff]

http://ratos.local also doesnt work on laptop

same nxdomain error

[light idol]

wait...

you're saying you are connecting the PI to ethernet, but then you're connecting your phone and laptop to the ratos wifi network?

[strange skiff]

the http://192.168.50.1/configure gives ERR_CONNECTION_REFUSED error

[light idol]

disconnect your laptop from the ratos wifi netwok, and reconnect it to your router's network

[strange skiff]

yes my pi is connected to my router via an ethernet cable and then I connect to ratos wifi via my laptop as followed

[light idol]

then go to http://RatOS.local/configure

[strange skiff]

this is my current setup

[strange skiff]

unfortunately it still doesnt work

[shell lark]

Connect laptop to router wifi

[light idol]

the whole point of connecting to the ratos wifi network is so that you can configure the network manager service on the pi

if you connect to ethernet, it will automatically configure that service when it boots, so you skip that step entirely

[strange skiff]

no even with the wifi switched it still doesnt work

[light idol]

what you're getting now is that mDNS isn't working yet, so ratos.local won't resolve, and for this you need the IP address of the pi on your routers network

[strange skiff]

if I use http://192.168.50.1/configure it gives another error tho ERR_CONNECTION_TIMED_OUT

[light idol]

that's because that address is only valid on the ratos wifi network

since you're connecting the pi to ethernet, you will never use that address

[shell lark]

Can we try removing the Ethernet and trying from laptop to pi?

Since I don't think we've actually done that on this thread yet

[strange skiff]

ok so I remove the ethernet from the pi and unplug the power, and replug the power back in afther 5 sec?

[light idol]

no

just unplug ethernet from the pi without powering off

then connect your laptop to ratos network

then go to http://192.168.50.1/configure

[strange skiff]

Ok now its giving ERR_CONNECTION_REFUSED

[light idol]

is your laptop on a VPN?

[strange skiff]

Nope double checked that

[light idol]

and it didn't auto-switch to a different wifi signal when it found out the ratos network didn't have internet access?

[strange skiff]

No I turned off the auto switch

[light idol]

is http://ratos.local accessible?

does your laptop have dual wifi radios?

[strange skiff]

That one gives "DNS_PROBE_NO_INTERNET"

[strange skiff]

I dont know for certain, but i think not

[light idol]

i'm thinking that your network properties aren't using 192.168.50.1 for DNS

for the ratos wifi network connection properties

either that or your browser is blocking the connection due to unsafe, and you need to override it

unfortunately i havea meeting in 3 minutes and I'm going to be busy for the next 4 hours, so i can't continue to help until later

[strange skiff]

Ill try another browser but qi think its not the browser blocking it bcs you would see it in chrome

[light idol]

yeah, it would have the safety symbol in the address bar

[wild sedge]

Can you connect both Pi and laptop to the modem with cable? I am beginning to think this modem doesn't allow local access between devices over WiFi so even if we get the WiFi to connect it may still be an issue unless this is a different modem then when you were in the dorm

[light idol]

I had that thought too

also, if it's a school issued laptop, there could be a GPO that sets the DNS server for all network adapters

[strange skiff]

No problem I really apriciate your help and effort atm 🙂

[light idol]

there's a really hacky approach you can take here

[strange skiff]

It is another modem then my dorm for sure, as for cables I'll check if I have a spare ethernet

[light idol]

you could power off the pi, mount the root partition, and manually edit the network manager details, then put the sd card back in the pi, boot it up, and you would hopefully be good to go

i can help you with that later this afternoon if no one else can before then

[strange skiff]

Its not a school laptop for sure

[light idol]

but if your network admin doesn't allow machine to machine connections, nothing will work unless you get a local switch installed

and if I was a network admin for a dorm wifi network, I definitely wouldn't allow that

[strange skiff]

Well ive got a swictch modem here so we can try that this evening

[wild sedge]

It's the WiFi suplicant file as RatOS doesn't use network manager

[strange skiff]

Nono a year ago I had my vcore at my dorm, but now I moved it to my home

And the router/network provider at home is a basic paid provider

[shell lark]

Technically if you were able to ensure the phone doesn't switch WiFi, try the phone again making sure the pi isn't connected to the Ethernet

Just to be safe, can isolate everything else other than those two devices

[light idol]

The part that is odd to me is that you are unable to establish a connection even when using the raspberry pi as your Wi-Fi AP

[strange skiff]

And would unplugging end replugging the main router do something?

[shell lark]

And ping to 50.1 works

[strange skiff]

I always do that if something doesnt want to connect via wifi

[shell lark]

Not for the WiFi test with the phone

As it'll connect phone to the pi

[light idol]

I forgot about the Wi-Fi hotspot part when you were telling me about logging in to the 50.1 address earlier

Got to run, sorry

[shell lark]

Plenty of fun later haha 😉

[strange skiff]

Np good luck with your meeting

[shell lark]

I'm hoping the phone with WiFi to the pi hotspot works

[light idol]

I think your problem is your local switch

[strange skiff]

hat do you mean with that

[shell lark]

Am I correct in thinking the wifi hotspot to phone eliminates the switch out the equation? As it should initially fetch the config page

[shell lark]

Just connect phone to ratos hotspot

[strange skiff]

That I should connect my phone to ratos and check http...

[shell lark]

Make sure no Ethernet is connected

Just phones WiFi to pi WiFi

[light idol]

If you were able to SSH into the pie earlier when connected to its hotspot, that would indicate that your local switch is blocking traffic between devices on http ports

[strange skiff]

Ok and then turn on personal hotspot on phone?

[shell lark]

Don't turn on hotspot

Just connect to the ratos hotspot.

[shell lark]

Yeah that's the thought as 22 worked seemingly

[strange skiff]

ok and now?

[shell lark]

Goto http://ratos.local/configure on phone browser

[strange skiff]

pi is connected to phone and laptop not

[shell lark]

Yep

Make sure laptop WiFi isn't connected to pi too

Just to be safe

Technically, as chief mentioned, your phone should now try to resolve ratos.local

(hopefully through the pi)

[strange skiff]

dammed my phone doesnt want to connect (DNS_probe_finished_no_internet error)

[shell lark]

Okay go-to phone network connection settings

Check what it says the IP is

[strange skiff]

IPv4 is 192.168.50.153

so the last number has changed

[shell lark]

Kk go-to try http://192.168.50.153/configure

(on phone)

Also try http://192.168.50.1/configure

(on phone)

[strange skiff]

both http says ERR_connection_refused

[shell lark]

Cool same as the laptop now

Timezone issue maybe?

It's concerning as im not sure if we even set the WiFi settings via the SD card it'll make a difference

Something seems odd

The pi and ratos seem to be doing its thing correctly enough to broadcast the ssid

[strange skiff]

would It help to try connecting with another rasberry pi? I can get another (even with another sd card) in 40 minutes

[shell lark]

At this stage anything is helpful

It's a good sign the laptop and phone now give the error though

As they're now 1:1 (relatively lol)

[strange skiff]

yeah isnt their a file on the sd card where you can manually typ the wifi you want to connect and password?

[shell lark]

Yeah

[strange skiff]

yeah Its kinda a tricky one I'm going to get the other pi

[shell lark]

That'll rule out some things, it's more so weird that the both devices show the same error.

I get these errors sometimes when the time zone is out on my devices, but that's a real shot in the dark

[shell lark]

Yep grab the other one and we'll try that, failing that we'll try the card

Found this as well:
https://www.answeroverflow.com/m/1199775450860368016

Check power to the pi just to be safe.

Also how to do the SD card method with supplicant file

https://www.answeroverflow.com/m/1094972702718173245

Make sure the country and timezone are set correctly in the imager if it's set there, or your devices are set correctly too with time

(phone, laptop)

[strange skiff]

I'm just thinking about the options is it usefull to test te connection from another router?

[shell lark]

Not really if the phone and laptop both have the same connection

[strange skiff]

bcs my other pi is laying at another home, so maby I can test the connection from there

[shell lark]

It's connecting okay it seems

Just you're not getting the web server

So the webserver ip and port (http is 80) are not being used correctly by the phone

The server will communicate directly with your phone when you connect phone to ratos hotspot

[strange skiff]

I'll read it afther I get the other pi, I'm now in my car

[shell lark]

(eliminating any routers for this step)

[shell lark]

Easy dude, no rush I'm training models all day so take your time lol

We'll try sshing if all else fails and then checking if we can get access to the URL, also a few other things like ports etc

[strange skiff]

Okay I'm back with another pi and sd card, and I even have a second screen to read the pi

[shell lark]

Fantastic

[strange skiff]

ok everything is set up. do I firstly go further with the original RPI or should I try the other rpi?

both are same models (model 4b)

[shell lark]

Try the new one

Same deal, use laptop or phone wifi adapter to connect to hotspot

(ratos hotspot)

[strange skiff]

well guess I'm not lucky today, the pi is not going on

it was from an old ender 3 octoprint setup but for some reason it doesnt turn on when plugged in

[shell lark]

Haha these things happen

Same power supply?

[strange skiff]

yup and when I insert the psu into the other rpi it works

[shell lark]

Yeah that'd be something weird on the other pi. No worries, it should work with the other one

[strange skiff]

idk how its broken bcs 2 months ago it worked and I did nothing else with it

[shell lark]

When you do the flash, is there a time zone or country that gets set? I ask because I used balenaetcher and there's no OS config stuff, but generally if you didn't apply any customization on the image it should be set by ratos

[shell lark]

Not sure on that one, if it's got 5v on the 5v pin and ground you should have power, other wise that pi is broked

[strange skiff]

well do I reflash the sd card again? I also have balenaetcher but it always gave me an error afther validating

[shell lark]

Probably no point reflashing imo

[strange skiff]

okay I'll leave it be

[shell lark]

Let's try the sd card method

[strange skiff]

okay so I insert the sd card into my laptop and search for the file?

[shell lark]

Link should be just above

https://www.answeroverflow.com/m/1094972702718173245

Let's try ssh

@strange skiff go-to your laptop, connect the laptop WiFi to the ratos hotspot

Goto command prompt and type ipconfig -all

[strange skiff]

okay give me a sec the pi is booting up again. do I connect my second screen onto it?

[shell lark]

Yep

Forgot the second screen was there

There's some folks saying rpi imager can ruin the supplicant file

We'll have to try balena etcher as well just in case

I had to extract the actual image from the .xz file using balena etcher I think

And I didn't get an error after that

[strange skiff]

well also forget about that. the screen seems not to connect with the pi (tried both ports). connecting with laptop still works

[strange skiff]

ok I'll try this now

Okay it gives me this

[shell lark]

Cool

Ssh [email protected]

Use raspberry as the password

[strange skiff]

Unknown error nice

Retrying also doesnt work

[shell lark]

Sometimes security stuff on the ssh connection end prevents repeated attempts

[shell lark]

Interesting

Kk shut down the pi and put sd card in computer and we'll have to track down the supplicant file on disk

etc/wpa_supplicant/wpa_supplicant.conf when on pi, through ssh

boot/ratos-wpa-supplicant.txt via SD

[strange skiff]

hmhh strange the only thing I found is this one

[shell lark]

Everything is looking like it's something to do with the rpi imager

[shell lark]

boot/ratos-wpa-supplicant.txt?

That's correct

[strange skiff]

okay and then put my wifi username and pasword here?

[shell lark]

Yeah

Is there country settings in there?

[strange skiff]

yes

[shell lark]

Is it correct

[strange skiff]

ok just to be sure I need to put in the things into 1 and remove the hastags right?

note: my wifi is secured

[shell lark]

Just the network for the wpa/wpa2

Remove the hashtags from network, ssid, psk, terminating bracket

Then after that, save it if course, put into pi and power pi on

Hopefully you'll be able to find ratos.local then when you connect the laptop WiFi back to the normal WiFi for your house

[strange skiff]

double checked the save and its on there

[shell lark]

I do that too haha

If this doesn't work we'll try balena etcher

[strange skiff]

when I'm connected to my home wifi and try ratos.local it still doesnt work (DNS_PROBE_FINISHED_NXDOMAIN again)

[shell lark]

That's all good, it's if it's on the network that we need to work out

Try pinging 192.168.50.1

[strange skiff]

do I use the latest version of balena or do I use an older version?

[shell lark]

(check other address with ipconfig -all)

[shell lark]

I recently used the latest

I had to unzip the .xz

Then use that with balena

[strange skiff]

I heard the latest version didnt really worked

[strange skiff]

ok I'll install the latest while looking for the config

[shell lark]

(I used Linux balena etcher)

But it should be okay

[strange skiff]

wait did you download the whole github codes or just this one

[shell lark]

That one

Xz is a compression type

Open with WinRAR

[strange skiff]

ok wait do I firstly try pinging the rpi with the current sd card or do I go on with the xz file?

[shell lark]

Mmmm you can try pinging it to get the actual device ip, but honestly if just go through with balena

That way we can be sure it's all good from the get go

I'm gonna have to head to the beach soon with the dog, should be good for 5-10 min more

[strange skiff]

ok just did pinging test and it seems to respond

[shell lark]

Perfect

Try http://192.168.50.186/configure

[strange skiff]

still doesnt work ok balena it is

[strange skiff]

ok np

[shell lark]

Also:
Http://192.168.50.186:3000/configure

Also http://192.168.50.1:3000/configure just in case

[strange skiff]

oh its kinda too late sorry

[shell lark]

Haha all good

Go through with balena

[strange skiff]

I have a feeling the balena will do the trick

[shell lark]

Yeah man, I'll be back in an hr or so, will check the status when back in haha

Don't forget to unzip the xz

[wild sedge]

Your laptop now plugged into the modem with a cable as well as the Pi? Seems like you're running into domain isolation security

[strange skiff]

so I opened the file with winrar and Im packing it out. then I should put that file onto the sd card with balena and then it should work right?

[shell lark]

Yep

[strange skiff]

Ok I'll try that enjoy the walk with your doge

[shell lark]

Yeah some weird security thing I think is being caused by rpi imager

[shell lark]

Easy dude, good luck!

[strange skiff]

havent tried that one yet, but firstly I'll reflash again using balena etcher

[strange skiff]

goddam it finally worked

conclusion: don't use rpi imager even when balena doesn't work the first time

Big thanks to you all! I wouldn't have figured it out without y'all

[shell lark]

Yoohoooooo

I think something happens to the supplicant file or some of those files with rpi imager.

It's an interesting issue however, I'm going to do some digging when I get some free time, knowing exactly why and what it changes should be found

[wild sedge]

That shouldn't have stopped Ethernet though

[shell lark]

Yeah so the issue must be some change elsewhere then between the two imagers.

Weird it works with some peoples rpi imager and some folks have these issues

[misty mantle]

Im coming in late to this, and only skimmed, but I've heard from others that the rpi imager is okay as long as you don't change any of the defaults, and to use balena etcher 1.18 or earlier.

[shell lark]

So potentially a previous default config change on the rpi imager app then that transfers to the new image?

[strange skiff]

its possible to use the latest balena etcher to flash your sd, but you firstly need to unpack your img.xz file

[trim reef]

Thank you for marking this question as solved!

Learn more

https://answeroverflow.com