config and monitor issues on updated W2k8r2

[albertaarts]

After applying recent windows updates to several 2008 and 2008 r2 servers i'm having issues with both the ncpa and nsclient. Either configuration fails or the servers are reporting false "host down" or service related issues. Can I get some help with this ?

[lmiltchev]

Can you show us the actual commands that you are running from the command line along with the output of them?

Also, post (the redacted) nsclient.log and ncpa_listener.log files on the forum.

[albertaarts]

i'm using the ncpa config wizard to attempt configuration but it fails and i cannot telnet to the node on 5693. the ncpa_listener log on the affected node is empty. this is one example of difficulties i have encountered recently after using this platform on server 2008 and 2008r2 for many years. thanks in advance.

[lmiltchev]

What is the version of the NCPA agent that you installed on these servers, and what document did you follow? Is the ncpalistener service running on the Windows machine? Is port 5693 open or blocked by a firewall?

Run the following command from the command line on the Nagios XI server and show the output:

Code: Select all

nmap <windows server ip> -p 5693

You should see 5693/tcp open. If you see "filtered", then you should check the firewall rules on the Windows server.

[lmiltchev]

One more thing - are c++ redistributable packages installed?

https://www.microsoft.com/en-us/downloa ... aspx?id=29

https://www.microsoft.com/en-us/downloa ... x?id=15336

If not, this may be the reason why the ncpa listener is not starting.

Can you show us the win32service_ncpalistener.log? It should be in the same folder as ncpa_listener.log.

[albertaarts]

nmap_crazyhorse.png

thanks for responding.

the nmap results with the firewall on ("filtered") and off ("closed") are attached. the firewall port exceptions appear to be there and i've tested with the firewall off before with the same result.

i installed the c++ packages without a change in result

i had been using ncpa v 1.8.1 for a while. when this problem came up i tried using a newer version, 2.1.5. it's worth mentioning that the only information i put in either is the token characters.

[albertaarts]

also, there was no win32service.ncpalistener.log in that directory.

[lmiltchev]

also, there was no win32service.ncpalistener.log in that directory.

The "win32service.ncpalistener.log" was in the same folder as ncpa_listener.log on my Windows box, however I found out by our developers that it could also be in the main directory. Can you search for this log and upload it to the forum?

the firewall port exceptions appear to be there and i've tested with the firewall off before with the same result.

Usually "filtered" means that firewall is blocking port 5693. Is it possible that there is another firewall in between? The output changes from "filtered" to "closed" when you stop the Windows firewall, correct? It should say "open", unless the ncpa_listener service is not running for some reason, or there is something that is blocking it... It's hard to say without looking at the log.

You can try reinstalling NCPA, since you've added the c++ packages already. Make a backup of the ncpa.cfg file, especially if you have some custom commands. Uninstall completely NCPA, then install the latest version of the agent (2.1.5).

[albertaarts]

for some reason it seems to be working now. i removed multiple firewall exceptions for port 5693, uninstalled the ncpa and nslcient clients, restarted and installed the lastest ncpa client. now the nmap command returns "open" and the win32service.ncpalistener.log exists in c:\program files (.86)\nagios\ncpa\var\log. i will respond to this thread if i encounter the issue again. thanks for the help!

[lmiltchev]

I am glad your issue has been resolved!

We will keep the topic open for a while in case you have more questions/issues. In case the topic "auto-closes", feel free to start a new thread. Thank you!