KEMP102 - Failed to Remove Kemp LoadMaster Allowlist Entry
Agent error code #KEMP102 indicates that Knocknoc could read the global ACL but the call to remove an address from the allowlist failed.
This typically happens when a grant expires and Knocknoc tries to revoke access. The address remaining in the allowlist after expiry means access is not being withdrawn as expected, so this error is worth resolving promptly.
Common causes include:
- The user account can read but not modify the global ACL (see #KEMP002)
- The LoadMaster returned a transient error while applying the change
Steps to Resolve
Confirm Write Permissions
- In the LoadMaster WUI, go to System Administration > User Management
- Confirm the service user has All Permissions
- Save and retry
Remove an Entry Manually
- From a host that can reach the LoadMaster, run:
curl -sk -u '<username>:<password>' 'https://<loadmaster-host>/access/aclcontrol?del=white&addr=<test-ip>&apiformat=json' - A successful call confirms the user can modify the allowlist
- If the entry persists, check the LoadMaster's global ACL directly under System Configuration > Access Control