Nagios Support Forum

Posted: **Tue Jul 30, 2013 4:24 pm**

Hello,

I am getting “UNKNOWN: No handler for that command” error in Nagios system. All the service is working fine expect check_ad.
Locally I am getting response. Please find the details for the same.

Nsc.ini file setting:-
[NRPE Client Handlers]
command[checkDC]=C:\Nagios++\scripts\check_ad.exe -d -v

Command setting in Nagios system:-
command_name checkDC
command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -p $ARG1$ -c checkDC -a ShowAll

Command response from local windows server:-
C:\Nagios++\scripts>check_ad.exe -d -v
AD CRITICAL: Services OK, Replications CRITICAL, Advertising OK, FSMO Check OK,
RID Manager OK, Machine Account OK, KCC Event OK, FRS Event OK, FRS Sysvol OK

Thanks,
Imran Khan.

Posted: **Tue Jul 30, 2013 5:03 pm**

imran_khan,

What modules have you enabled in the NSC.ini file.

Check the following...

[modules]
NRPEListener.dll
NSClientListener.dll
CheckExternalScripts.dll

Thanks,

-Yancy

Posted: **Tue Jul 30, 2013 5:06 pm**

Hello,

Please find the modules details.

[modules]
FileLogger.dll
CheckSystem.dll
CheckDisk.dll
NSClientListener.dll
NRPEListener.dll
CheckEventLog.dll
CheckHelpers.dll
CheckWMI.dll
CheckExternalScripts.dll

Thanks,
Imran Khan.

Posted: **Tue Jul 30, 2013 8:38 pm**

this looks incorrect

[NRPE Client Handlers]
command[checkDC]=C:\Nagios++\scripts\check_ad.exe -d -v

remove

Code: Select all

command[checkDC]=C:\Nagios++\scripts\check_ad.exe -d -v

place check_ad.exe in C:\Program Files\NSClient++\scripts

Then add the following to [External Scripts] section

Code: Select all

[External Scripts]
checkDC=scripts\check_ad.exe -d -v

restart NSClient++

Posted: **Wed Jul 31, 2013 11:57 am**

Hello,

Thanks. I have made the changes as per your instruction. I am getting error “FSMO Check No result” when ran this command locally. Also getting the same error in Nagios system as well. Service FSMO is working fine, so why I am getting this error. Please suggest me.

C:\Nagios++\scripts>check_ad.exe -d -v
AD CRITICAL: Services OK, Replications OK, Advertising OK, FSMO Check No result,
RID Manager OK, Machine Account OK, KCC Event OK, FRS Event OK, FRS Sysvol OK

Status Information: AD CRITICAL: Services OK, Replications OK, Advertising OK, FSMO Check No result, RID Manager OK, Machine Account OK, KCC Event OK, FRS Event OK, FRS Sysvol OK

Thanks,
Imran Khan.

Posted: **Wed Jul 31, 2013 1:02 pm**

imran_khan,

can you run dcdiag from the command line and post the results.

Code: Select all

dcdiag

-Yancy

Posted: **Wed Jul 31, 2013 1:35 pm**

Hello,

It is not showing any fail services. Please find the output of dcdiag command.
Please check and remove it from the post thread.

Code: Select all

----------------------------------------------------
Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   * Verifying that the local machine xyz, is a Directory Server. 
   Home Server = xyz

   * Connecting to directory service on server xyz.

   * Identified AD Forest. 
   Collecting AD specific global data 
   * Collecting site info.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=example,DC=net,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded 
   Iterating through the sites 
   Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net
   Getting ISTG and options for the site
   * Identifying all servers.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=example,DC=net,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers 
   Getting information for the server CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net 
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   * Identifying all NC cross-refs.

   * Found 1 DC(s). Testing 1 of them.

   Done gathering initial info.


Doing initial required tests

   
   Testing server: Default-First-Site-Name\xyz

      Starting test: Connectivity

         * Active Directory LDAP Services Check
         Determining IP4 connectivity 
         * Active Directory RPC Services Check
         ......................... xyz passed test Connectivity



Doing primary tests

   
   Testing server: Default-First-Site-Name\xyz

      Starting test: Advertising

         The DC xyz is advertising itself as a DC and having a DS.
         The DC xyz is advertising as an LDAP server
         The DC xyz is advertising as having a writeable directory
         The DC xyz is advertising as a Key Distribution Center
         The DC xyz is advertising as a time server
         The DS xyz is advertising as a GC.
         ......................... xyz passed test Advertising

      Test omitted by user request: CheckSecurityError

      Test omitted by user request: CutoffServers

      Starting test: FrsEvent

         * The File Replication Service Event log test 
         Skip the test because the server is running DFSR.

         ......................... xyz passed test FrsEvent

      Starting test: DFSREvent

         The DFS Replication Event Log. 
         ......................... xyz passed test DFSREvent

      Starting test: SysVolCheck

         * The File Replication Service SYSVOL ready test 
         File Replication Service's SYSVOL is ready 
         ......................... xyz passed test SysVolCheck

      Starting test: KccEvent

         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
         ......................... xyz passed test KccEvent

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net
         Role Domain Owner = CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net
         Role PDC Owner = CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net
         Role Rid Owner = CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net
         ......................... xyz passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         Checking machine account for DC xyz on DC xyz.
         * SPN found :LDAP/xyz.example.net/example.net
         * SPN found :LDAP/xyz.example.net
         * SPN found :LDAP/xyz
         * SPN found :LDAP/xyz.example.net/pqr
         * SPN found :LDAP/8198b45d-94f2-4fd9-915f-25c4489eb0c3._msdcs.example.net
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/8198b45d-94f2-4fd9-915f-25c4489eb0c3/example.net
         * SPN found :HOST/xyz.example.net/example.net
         * SPN found :HOST/xyz.example.net
         * SPN found :HOST/xyz
         * SPN found :HOST/xyz.example.net/pqr
         * SPN found :GC/xyz.example.net/example.net
         ......................... xyz passed test MachineAccount

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC xyz.
         * Security Permissions Check for

           DC=ForestDnsZones,DC=example,DC=net
            (NDNC,Version 3)
         * Security Permissions Check for

           DC=DomainDnsZones,DC=example,DC=net
            (NDNC,Version 3)
         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=example,DC=net
            (Schema,Version 3)
         * Security Permissions Check for

           CN=Configuration,DC=example,DC=net
            (Configuration,Version 3)
         * Security Permissions Check for

           DC=example,DC=net
            (Domain,Version 3)
         ......................... xyz passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check
         Verified share \\xyz\netlogon
         Verified share \\xyz\sysvol
         ......................... xyz passed test NetLogons

      Starting test: ObjectsReplicated

         xyz is in domain DC=example,DC=net
         Checking for CN=xyz,OU=Domain Controllers,DC=example,DC=net in domain DC=example,DC=net on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net in domain CN=Configuration,DC=example,DC=net on 1 servers
            Object is up-to-date on all servers.
         ......................... xyz passed test ObjectsReplicated

      Test omitted by user request: OutboundSecureChannels

      Starting test: Replications

         * Replications Check
         * Replication Latency Check
         ......................... xyz passed test Replications

      Starting test: RidManager

         * Available RID Pool for the Domain is 1601 to 1073741823
         * xyz.example.net is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 1101 to 1600
         * rIDPreviousAllocationPool is 1101 to 1600
         * rIDNextRID: 1108
         ......................... xyz passed test RidManager

      Starting test: Services

         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
         * Checking Service: DnsCache
         * Checking Service: DFSR
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... xyz passed test Services

      Starting test: SystemLog

         * The System Event log test
         Found no errors in "System" Event log in the last 60 minutes.
         ......................... xyz passed test SystemLog

      Test omitted by user request: Topology

      Test omitted by user request: VerifyEnterpriseReferences

      Starting test: VerifyReferences

         The system object reference (serverReference)

         CN=xyz,OU=Domain Controllers,DC=example,DC=net and

         backlink on

         CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net

         are correct. 
         The system object reference (serverReferenceBL)

         CN=xyz,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=example,DC=net

         and backlink on

         CN=NTDS Settings,CN=xyz,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=net

         are correct. 
         The system object reference (msDFSR-ComputerReferenceBL)

         CN=xyz,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=example,DC=net

         and backlink on

         CN=xyz,OU=Domain Controllers,DC=example,DC=net are

         correct. 
         ......................... xyz passed test VerifyReferences

      Test omitted by user request: VerifyReplicas

   
      Test omitted by user request: DNS

      Test omitted by user request: DNS

   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : example

      Starting test: CheckSDRefDom

         ......................... example passed test

         CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... example passed test

         CrossRefValidation

   
   Running enterprise tests on : example.net

      Test omitted by user request: DNS

      Test omitted by user request: DNS

      Starting test: LocatorCheck

         GC Name: \\xyz.example.net

         Locator Flags: 0xe00071fd
         PDC Name: \\xyz.example.net
         Locator Flags: 0xe00071fd
         Time Server Name: \\xyz.example.net
         Locator Flags: 0xe00071fd
         Preferred Time Server Name: \\xyz.example.net
         Locator Flags: 0xe00071fd
         KDC Name: \\xyz.example.net
         Locator Flags: 0xe00071fd
         ......................... example.net passed test

         LocatorCheck

      Starting test: Intersite

         Skipping site Default-First-Site-Name, this site is outside the scope

         provided by the command line arguments provided. 
         ......................... example.net passed test

         Intersite

Posted: **Wed Jul 31, 2013 1:47 pm**

imran_khan,

I don't see anything that says FsmoCheck is OK...

for example,

Code: Select all

Running enterprise tests on : neptune.net
   Starting test: Intersite
      ......................... neptune.net passed test Intersite
   Starting test: FsmoCheck
      ......................... neptune.net passed test FsmoCheck

Any idea why FsmoCheck isn't showing in dcdiag?

-Yancy

Posted: **Wed Jul 31, 2013 2:52 pm**

Hello,

Below FSMO roles are showing OK in dcdiag result. It will not show FSMO as a service in dcdiag result.

PDC
Rid
Infrastructure
Schema
Domain

Thanks,
Imran khan.

Posted: **Wed Jul 31, 2013 4:32 pm**

Hello,

Any solution or advice?

Thanks,
Imran Khan.

Nagios Support Forum

UNKNOWN: No handler for that command” error with check_ad

UNKNOWN: No handler for that command” error with check_ad

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a

Re: UNKNOWN: No handler for that command” error with check_a