[Pkg-nagios-devel] Bug#764603: Bug#764603: nagios-plugins-basic: The nagios plugin rgrep does not recognize KoD packages from the ntpserver

[Jan Wagner]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

tags 764603 + unreproducible moreinfo
thanks

Hi Leo,

thanks for reporting the issue.

Am 09.10.2014 um 16:21 schrieb leo weppelman:
> After hardening the ntp configuration, I noticed that the nagios
> check was no longer functioning. The line I added to ntp.conf was: 
> restrict default limited kod nomodify notrap nopeer noquery
> 
> The culprit turned out to be the 'kod' option in the restrict
> line.

The default in /etc/ntp.conf on wheezy is:

restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery

> The nagios check does not understand the contents of the 'KoD'
> package and only reports that the server stratum is 0. Which is
> part of the KoD packet.

On wheezy I adjusted the ntp.conf like you said:

$ grep limit /etc/ntp.conf | grep -v ^#
restrict -4 default kod notrap nomodify nopeer noquery limited
restrict -6 default kod notrap nomodify nopeer noquery limited

Checking with check_ntp_time binary from the soon to be released next
upstream:

$ /usr/lib/nagios/plugins/check_ntp_time -H localhost
NTP OK: Offset -0,0002338594495
secs|offset=-0,000234s;60,000000;120,000000;
$ dpkg -l | grep monitoring-plugins-basic
ii  monitoring-plugins-basic
2.0+git20141006-1~2~bpo70+1     i386         Plugins for nagios
compatible monitoring systems (basic)

Even with the check_ntp_time binary from the 1.4.16-1 it seems to work:

$ /tmp/check_ntp_time -H localhost
NTP OK: Offset 4,751665983e-06 secs|offset=0,000005s;60,000000;120,000000;
$ /tmp/check_ntp_time -V
check_ntp_time v1.4.16 (nagios-plugins 1.4.16)

Unfortunately I can reproduce your problem. Maybe you can test my
latest packages for wheezy (see http://ftp.cyconet.org/instructions
for installing experimental monitoring-plugins packages from my
wheezy-backports repository). Even you can describe a bit more
specific your environment to reproduce this issue.

Many thanks, Jan.
- -- 
Never write mail to <waja at spamfalle.info>, you have been warned!
- -----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT d-- s+: a C+++ UL++++ P+ L+++ E--- W+++ N+++ o++ K++ w--- O M V-
PS PE Y++
PGP++ t-- 5 X R tv- b+ DI D+ G++ e++ h---- r+++ y++++
- ------END GEEK CODE BLOCK------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=xkAA
-----END PGP SIGNATURE-----