Icinga2 cert failed, master_host parameter deprecated

Icinga 2
1

Hi all,

i just came back to my icinga after 2 weeks seeing all services failed unfortunately. I checked the connection and indeed the service is not running anymore on the client. Trying to reinstall (with ticket & icinga2 setup wizard) gives me the following:

Running command 'icinga2.exe node setup --master_host .......28.176,5665 --endpoint mmu127.rsint.net,10.0.28.....,5665 --accept-config --accept-commands --ticket "123456789" --trustedcert "C:\Users\blanz\AppData\Local\Temp\tmpF2E4.tmp" --cn "MUV30463.rsint.net" --zone "MUV30463.rsint.net" --disable-confd' produced the following output:
warning/cli: The 'master_host' parameter has been deprecated. Use 'parent_host' instead.
information/cli: Requesting certificate with ticket '123456789'.
information/cli: Verifying parent host connection information: host '......28.176', port '5665'.
information/cli: Using the following CN (defaults to FQDN): 'MUV30463.rsint.net'.
information/cli: Created backup file 'C:\ProgramData\icinga2\var\lib\icinga2/certs//MUV30463.rsint.net.key.orig'.
information/cli: Created backup file 'C:\ProgramData\icinga2\var\lib\icinga2/certs//MUV30463.rsint.net.crt.orig'.
information/base: Writing private key to 'C:\ProgramData\icinga2\var\lib\icinga2/certs//MUV30463.rsint.net.key'.
information/base: Writing X509 certificate to 'C:\ProgramData\icinga2\var\lib\icinga2/certs//MUV30463.rsint.net.crt'.
information/cli: Verifying trusted certificate file 'C:\Users\blanz\AppData\Local\Temp\tmpF2E4.tmp'.
information/cli: Requesting a signed certificate from the parent Icinga node.
information/cli: Writing CA certificate to file 'C:\ProgramData\icinga2\var\lib\icinga2/certs//ca.crt'.
critical/cli: !!! Invalid ticket for CN 'MUV30463.rsint.net'.
critical/cli: Failed to fetch signed certificate from parent Icinga node '......28.176, 5665'. Please try again.

(I edited the IPs and ticket, dont know if its necessary but my company is very strict :roll_eyes: )

Steps I tried so far:

  • delete hostgroups etc I added the last time.
  • delete config completely from client & reinstall the wizard -> same problem.

So i think the problem has to be on my server, right? Do I have to upgrade it?
not sure what to do about it - found no solutions about the “deprecated master_host” online - is it a zone problem? Cant remember that i played around with zones since the inital installation.

EDIT: if i check my config via $icinga2 daemon -C i get the following:

[2019-10-01 10:37:20 +0200] information/cli: Icinga application loader (version: r2.10.4-1)
[2019-10-01 10:37:20 +0200] information/cli: Loading configuration file(s).
[2019-10-01 10:37:20 +0200] information/ConfigItem: Committing config item(s).
[2019-10-01 10:37:20 +0200] information/ApiListener: My API identity: mmu127.rsint.net
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 63 Services.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 InfluxdbWriter.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 LivestatusListener.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 IcingaApplication.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 8 Hosts.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 FileLogger.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 NotificationComponent.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 HostGroup.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 ApiListener.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 PerfdataWriter.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 CheckerComponent.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 11 Zones.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 ExternalCommandListener.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 9 Endpoints.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 ApiUser.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 1 IdoMysqlConnection.
[2019-10-01 10:37:20 +0200] information/ConfigItem: Instantiated 226 CheckCommands.
[2019-10-01 10:37:20 +0200] information/ScriptGlobal: Dumping variables to file '/var/cache/icinga2/icinga2.vars'
[2019-10-01 10:37:20 +0200] information/cli: Finished validating the configuration file(s).

Any hint is appreciated, thanks!

2

I am getting the same issue… any Idea?

3

It could be a problem with case sensitivity, if you’ve created the ticket for the lowercase hostname but now the host going for uppercase Windows FQDNs.

Cheers,
Michael

4

Thanks Michael for the swift answer. I managed to solve the issue. :+1:
Actually I got the same error message “The ‘master_host’ parameter has been deprecated. Use ‘parent_host’ instead.” while I was installing the Icinga2 agent on a windows machine.
since the environment was built by another colleague I had no idea what/who was my master host. It seems like I pointed to the wrong node but I ended up trying the other (second) node and it worked fine and the agent installed successfully.
thanks again.

1 Like