Skepko
January 13, 2025, 2:03pm
1
Hello,
Last few months in event view I see error message from Icinga2 and in C:\ProgramData\Microsoft\Windows\WER\ReportQueue crash reports from icinga service crash.
I see this with several OS types, 2019, 2022. The icinga2 itself works fine, but I am curious about the cause of the crash. I will also upload the notifications from eventview.
Component Version Available
agent 2.14.2 2.14.2RESTApi.txt (1.6 KB)Framework.txt (3.2 KB)
cstein
January 31, 2025, 9:19am
2
opened 10:04AM - 04 Dec 24 UTC
Bug
Investigation
We With CVE-2024-49369, we have updated all window servers to the latest icinga-… powershell-framework (1.12.3) and Icinga Client (2.14.3). Now we notice that different servers get a timeout every now and then during the simple check "Invoke-IcingaCheckTimeSync".
We tested 2 different servers (Windows 2019 with the same function).
For one of them, the check runs through within 2-3 seconds and for the other, the check takes at least 20 seconds until the timeouts (30 seconds).
This is what the event log says:
`warning/Process: Killing process group 6444 ('C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -ExecutionPolicy ByPass -C "try { Use-Icinga -Minimal; } catch { Write-Output 'The Icinga PowerShell Framework is either not installed on the system or not configured properly. Please check https://icinga.com/docs/windows for further details'; Write-Output 'Error:' $($_.Exception.Message)Components:`r`n$( Get-Module -ListAvailable 'icinga-powershell-*' )`r`n'Module-Path:'`r`n$($Env:PSModulePath); exit 3; }; Exit-IcingaExecutePlugin -Command 'Invoke-IcingaCheckTimeSync' " -Server '***.***.***.***' -Warning -1s:1s -Critical -2s:2s -Verbosity 2') after timeout of 30 seconds`
Before the update, these problems never existed. Now I hope that you can find something, because we don't have a approach.
Thank you
Greeting
Sascha
Just as reference. For the moment there is no solution in sight, as the reason is not known and requires more research.
Skepko
February 7, 2025, 10:53am
3
@cstein Thank you for the reply, i hoop its will be resolved somedays.