domain expiration

[ccheltenham]

What does it mean if you query the whois DB and get nothing back from it.

One of our URLs is simply "goship.com" which comes back with nothing from whois.

Its creating a domain expiration error in Nagios.

[dchurch]

I was unable to reproduce your issue; the "goship.com" domain for me says it expires in 255 days:

Code: Select all

$ /usr/local/nagios/libexec/check_domain.php -d goship.com
OK - Domain 'goship.com' will expire in 255 days (2022-01-27T19:12:33Z).

What is the full check command for that Domain Expiration service?

I'm wondering if your server is set up to query a different DNS server. What is the output from the following commands?

Code: Select all

cat /etc/resolv.conf
dig goship.com NS
whois goship.com

[ccheltenham]

I appreciate your help with this -

for my NagiosXI servers it cannot resolve the following -

nagios@nagiosXI.quad.local ~ $ whois goship.com
[Querying whois.verisign-grs.com]

nagios@nagiosXI.quad.local ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com

So i have a DNS issue for sure.
It appears a review of the DNS servers fixes this.



Thanks for your help

[ccheltenham]

One thing that does happen is the whois keeps failing no matter what DNS i use.

nagios@nagiosXI.quad.local ~ $ whois goship.com
[Querying whois.verisign-grs.com]

Is there another authority I can use and where is verisign configured on Nagios.
I can find it in ICANN and Verisign Who is

nagios@nagiosXI.quad.local ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com
Error running whois: nagios@nagiosXI.quad.local ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com

nagios@nagiosXI.quad.local ~ $ whois goship.com
[Querying whois.verisign-grs.com]
[Unable to connect to remote host]

nagios@nagiosXI.quad.local ~ $ ping webwhois.verisign.com
PING webwhois.verisign.com (216.87.134.26) 56(84) bytes of data.
64 bytes from 216.87.134.26 (216.87.134.26): icmp_seq=1 ttl=44 time=68.3 ms
64 bytes from 216.87.134.26 (216.87.134.26): icmp_seq=2 ttl=44 time=69.4 ms
64 bytes from 216.87.134.26 (216.87.134.26): icmp_seq=3 ttl=44 time=71.1 ms

--- webwhois.verisign.com ping statistics ---
9 packets transmitted, 9 received, 0% packet loss, time 10199ms
rtt min/avg/max/mdev = 66.708/69.790/75.260/2.314 ms

[ccheltenham]

nagios@nagiosXI.quad.local ~ $ ping webwhois.verisign.com
PING webwhois.verisign.com (199.16.84.26) 56(84) bytes of data.
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=1 ttl=43 time=71.7 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=2 ttl=43 time=70.5 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=3 ttl=43 time=71.0 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=4 ttl=43 time=71.3 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=5 ttl=43 time=71.9 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=6 ttl=43 time=68.3 ms
64 bytes from 199.16.84.26 (199.16.84.26): icmp_seq=7 ttl=43 time=75.5 ms
^C
--- webwhois.verisign.com ping statistics ---
7 packets transmitted, 7 received, 0% packet loss, time 8185ms
rtt min/avg/max/mdev = 68.340/71.513/75.529/2.004 ms
nagios@nagiosXI.quad.local ~ $ /usr/local/nagios/libexec/check_domain.php -d goship.com -s webwhois.verisign.com
Error running whois: nagios@nagiosXI.quad.local ~ $

[dchurch]

The whois server the "whois" command goes to for information comes from the DNS "NS" record, which you can view using the "dig" command:

Code: Select all

# query your default DNS server
dig goship.com NS
# query Google's DNS server
dig @8.8.8.8 goship.com NS

Please post the output from these commands. Perhaps this can help us with debugging.

Try using "-s whois.verisign-grs.com" in your check command:

Code: Select all

/usr/local/nagios/libexec/check_domain.php -s whois.verisign-grs.com -d goship.com

$ whois goship.com
[Querying whois.verisign-grs.com]

This is very strange output for the "whois" command. Perhaps you're using a custom whois command. What's the output from the following commands?

Code: Select all

type -a whois
whois --version

[ccheltenham]

ccheltenham@nagiosXI.quad.local ~ $ whois --version
jwhois version 4.0, Copyright (C) 1999-2007 Free Software Foundation, Inc.
This program is free software with ABSOLUTELY NO WARRANTY; you may
redistribute it under the terms of the GNU General Public License.

ccheltenham@nagiosXI.quad.local ~ $

[dchurch]

Which Linux distro are you using? Did you install jwhois manually?

[ccheltenham]

RHEL 7.9.2009

[ccheltenham]

What are the permissions supposed to be in this dir -
nagios@nagiosXI.quad.local /usr/local/nagios/libexec $ ll
total 10676
-rwsrwxr-x 1 root nagios 177560 Jun 22 2020 check_apt
-rwsrwxr-x. 1 root nagios 6897 Nov 13 2018 check_asterisk.pl
-rwsrwxr-x. 1 root nagios 4173 Jan 20 10:27 check_bl
-rwsrwxr-x. 1 root nagios 2287 Jan 20 10:27 check_bpi.php
-rwsrwxr-x 1 root nagios 2342 Jun 22 2020 check_breeze

not sure if this changed on me.