Disable SSH Polling/Connection to Devices

Started by Kriptoker, June 06, 2022, 08:59:52 PM

Previous topic - Next topic

Kriptoker

Hello,
I recently updated to v4.1.333, and I am having some issues with some servers and their connection status. I have some servers that are going 'offline' due to them blocking the NetXMS Server. After some diagnostics, it appears that the servers are blocking the conneciton due to the NetXMS server trying to SSH to them. Is there a way to completely disable the SSH polling/connectivity check in the entire NetXMS environment, so that NetXMS will stop trying to SSH to the servers?

Victor Kirhenshtein

There is a bug that NetXMS server attempts to access SSH even with empty credentials. It will be fixed in upcoming patch release.

Also, if you are not using SSH, make sure that ssh.nsm is not loaded on server's local agent.

Another option is to use NXSL configuration poll hook to disable SSH on each node by calling

$node->enableSsh(false);


Best regards,
Victor

Kriptoker

Great, thank you for the info.

As far as disabling the ssh.nsm local agent, that would be by removing that line 'SubAgent = ssh.nsm' from /etc/nxagentd.conf correct?

Victor Kirhenshtein

Quote from: Kriptoker on June 07, 2022, 06:13:44 PM
As far as disabling the ssh.nsm local agent, that would be by removing that line 'SubAgent = ssh.nsm' from /etc/nxagentd.conf correct?

Correct.

Kriptoker

Hello,

Just checking in to see if this has been patched yet. I looked at the last couple patch releases but did not see a specific reference for SSH issues (did not know if maybe its referenced as something else in the patch notes).

Victor Kirhenshtein

Hi,

looks like I forgot to update change log with this fix. However, it was fixed as part of this commit: https://github.com/netxms/netxms/commit/80c79d73d7e4b358769b35bd034cbe921f6b39a1 and included into 4.1.377.

Best regards,
Victor

Kriptoker