Link to home
Start Free TrialLog in
Avatar of lshelton65gta
lshelton65gta

asked on

snmpd not starting

Good Afternoon,

I've been struggling with a snmp issue on a CentOS 4.8 machine for several days.  I've installed snmp (yum install net-snmp), but it refuses to start.  Running "service snmpd start" appears to have started the process, but running service snmpd status" results in "snmpd dead but subsys locked".  Looking in /var/log/messages only has the "snmp started" entry.

I've spent a lot of time on Google and one of the things I have tried is running "snmpd -f -Le.  This results in "snmpd: symbol lookup error: /usr/lib/libnetsnmp.so.5: undefined symbol: RAND_bytes".

I've tried uninstalling and reinstalling snmp, but no luck.  I've also removed the resulting /var/lock and /var/run files.

Any help on this would be greatly appreciated.

Thank you,
Lewis
Avatar of arnold
arnold
Flag of United States of America image

you need to install all snmp components of which net-snmp is one.
run rpm -qa | grep -i snmp
do you have net-snmp-libs net-snmp-utils installed?

Avatar of lshelton65gta
lshelton65gta

ASKER

Arnold,

The libs get installed with net-snmp.  I've installed the utils and also the devel.  Same results.

Thanks,
Lewis
I have not used 4 in a while, and not sure what the issue is when you start it.
What is the output in /var/log/messages when you start it with the default options?
Do you have /etc/snmp/snmpd.conf file?
Do you have iptables running and if so did you setup a rule to allow UDP port 161 to pass?
Arnold,
The only entry in /var/log/messages is that snmp was started.  For testing, just using the snmpd.conf file that is created when installing snmp.  No iptables.  

Thanks,
Lewis
Seems that you're missing OpenSSL!
wmp
WMP,

OpenSSL is installed.  Running "yum search openssl |grep ssl" shows the following.

xmlsec1.i386                             1.2.6-3.1              installed      
openssl-devel.i586                       0.9.7a-43.17.el4_8.5   installed      
xmlsec1-openssl.i386                     1.2.6-3.1              installed      
pyOpenSSL.i386                           0.6-1.p23              installed      
perl-Crypt-SSLeay.i386                   0.51-5                 installed      
openssl.i686                             0.9.7a-43.17.el4_8.5   installed  

Thanks,
Lewis
Well,
it could be that OpenSSL is searched in the wrong place by snmpd
What do you get with
ldd /usr/sbin/snmpd  
(particularly lokk for libcrypto - is it where snmpd expects it to be)?
wmp
 
WMP,
The results are below.
        libnetsnmpagent.so.5 => /usr/lib/libnetsnmpagent.so.5 (0x00ea0000)
        libnetsnmpmibs.so.5 => /usr/lib/libnetsnmpmibs.so.5 (0x00cba000)
        libnetsnmphelpers.so.5 => /usr/lib/libnetsnmphelpers.so.5 (0x00602000)
        libwrap.so.0 => /lib/libwrap.so.0 (0x00829000)
        libnetsnmp.so.5 => /usr/lib/libnetsnmp.so.5 (0x001cd000)
        libsensors.so.3 => /usr/lib/libsensors.so.3 (0x00111000)
        librpm-4.3.so => /usr/lib/librpm-4.3.so (0x008f2000)
        librpmdb-4.3.so => /usr/lib/librpmdb-4.3.so (0x00266000)
        libselinux.so.1 => /lib/libselinux.so.1 (0x005cd000)
        librpmio-4.3.so => /usr/lib/librpmio-4.3.so (0x00145000)
        libbeecrypt.so.6 => /usr/lib/libbeecrypt.so.6 (0x0076a000)
        libdl.so.2 => /lib/libdl.so.2 (0x0019c000)
        librt.so.1 => /lib/tls/librt.so.1 (0x00f31000)
        libpthread.so.0 => /lib/tls/libpthread.so.0 (0x001a0000)
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x007b5000)
        libbz2.so.1 => /usr/lib/libbz2.so.1 (0x00ed4000)
        libz.so.1 => /usr/lib/libz.so.1 (0x00fc2000)
        libcrypto.so.4 => /usr/lib/libcrypto.so.4 (0x00350000)
        libelf.so.1 => /usr/lib/libelf.so.1 (0x00678000)
        libm.so.6 => /lib/tls/libm.so.6 (0x00c30000)
        libc.so.6 => /lib/tls/libc.so.6 (0x00381000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x006e8000)
        /lib/ld-linux.so.2 (0x00c0e000)

Thanks,
Lewis
That's just strange. What gives
ldd -r /usr/sbin/snmpd ?
Also, you could run ldconfig to rebuild the cache and links.
And, do you find RAND_bytes with
strings /usr/lib/libcrypto.so.4 | grep RAND ?
wmp
Results of ldd -r /usr/sbin/snmpd:

 libnetsnmpagent.so.5 => /usr/lib/libnetsnmpagent.so.5 (0x00ccf000)
        libnetsnmpmibs.so.5 => /usr/lib/libnetsnmpmibs.so.5 (0x00b17000)
        libnetsnmphelpers.so.5 => /usr/lib/libnetsnmphelpers.so.5 (0x00247000)
        libwrap.so.0 => /lib/libwrap.so.0 (0x00cb2000)
        libnetsnmp.so.5 => /usr/lib/libnetsnmp.so.5 (0x00f14000)
        libsensors.so.3 => /usr/lib/libsensors.so.3 (0x00111000)
        librpm-4.3.so => /usr/lib/librpm-4.3.so (0x002cd000)
        librpmdb-4.3.so => /usr/lib/librpmdb-4.3.so (0x00145000)
        libselinux.so.1 => /lib/libselinux.so.1 (0x009b8000)
        librpmio-4.3.so => /usr/lib/librpmio-4.3.so (0x005d1000)
        libbeecrypt.so.6 => /usr/lib/libbeecrypt.so.6 (0x0028e000)
        libdl.so.2 => /lib/libdl.so.2 (0x00d12000)
        librt.so.1 => /lib/tls/librt.so.1 (0x00426000)
        libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00e3b000)
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x00c84000)
        libbz2.so.1 => /usr/lib/libbz2.so.1 (0x0040b000)
        libz.so.1 => /usr/lib/libz.so.1 (0x00a2d000)
        libcrypto.so.4 => /usr/lib/libcrypto.so.4 (0x0025b000)
        libelf.so.1 => /usr/lib/libelf.so.1 (0x00ec9000)
        libm.so.6 => /lib/tls/libm.so.6 (0x00dc7000)
        libc.so.6 => /lib/tls/libc.so.6 (0x0043a000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x006ed000)
        /lib/ld-linux.so.2 (0x008bb000)
undefined symbol: EVP_DigestInit        (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_DigestFinal       (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_DigestFinal_ex    (/usr/lib/libnetsnmp.so.5)
undefined symbol: AES_set_encrypt_key   (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_md5       (/usr/lib/libnetsnmp.so.5)
undefined symbol: HMAC  (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_MD_CTX_cleanup    (/usr/lib/libnetsnmp.so.5)
undefined symbol: SSLeay        (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_sha1      (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_MD_CTX_init       (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_DigestUpdate      (/usr/lib/libnetsnmp.so.5)
undefined symbol: RAND_bytes    (/usr/lib/libnetsnmp.so.5)
undefined symbol: DES_cbc_encrypt       (/usr/lib/libnetsnmp.so.5)
undefined symbol: DES_ncbc_encrypt      (/usr/lib/libnetsnmp.so.5)
undefined symbol: DES_key_sched (/usr/lib/libnetsnmp.so.5)
undefined symbol: AES_cfb128_encrypt    (/usr/lib/libnetsnmp.so.5)

ldconfig has been run multiple times over the last couple of days.

No results from strings  /usr/lib/libcrypto.so.4 | grep RAND

Thanks,
Lewis
ASKER CERTIFIED SOLUTION
Avatar of woolmilkporc
woolmilkporc
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I thought of that, but there are so many dependancies on openssl (438).  If I do a yum remove open ssl is comes back and asks if it's ok to remove 428 packages.

Am I doing it right?
Well, you're far more familiar with yum than I am.
Isn't there a possibility to do a forced reinstall of the current version, without deinstalling beforehand?
I didn't find such a thing in yum, but as I said, I don't use it ...
But please, don't remove dependent sotware. If you must deinstall, try to find a way to leave other installed software intact!
 
I succumed and am reinstalling from scratch.

Thanks for your help.

Lewis
He nailed it that it was SSL.  The problem was that you can't really uninstall ssl without nuking the system.  We ended up re-installing from scratch.