snmpd not starting

lshelton65gta
lshelton65gta used Ask the Experts™
on
Good Afternoon,

I've been struggling with a snmp issue on a CentOS 4.8 machine for several days.  I've installed snmp (yum install net-snmp), but it refuses to start.  Running "service snmpd start" appears to have started the process, but running service snmpd status" results in "snmpd dead but subsys locked".  Looking in /var/log/messages only has the "snmp started" entry.

I've spent a lot of time on Google and one of the things I have tried is running "snmpd -f -Le.  This results in "snmpd: symbol lookup error: /usr/lib/libnetsnmp.so.5: undefined symbol: RAND_bytes".

I've tried uninstalling and reinstalling snmp, but no luck.  I've also removed the resulting /var/lock and /var/run files.

Any help on this would be greatly appreciated.

Thank you,
Lewis
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2017

Commented:
you need to install all snmp components of which net-snmp is one.
run rpm -qa | grep -i snmp
do you have net-snmp-libs net-snmp-utils installed?

Author

Commented:
Arnold,

The libs get installed with net-snmp.  I've installed the utils and also the devel.  Same results.

Thanks,
Lewis
Distinguished Expert 2017

Commented:
I have not used 4 in a while, and not sure what the issue is when you start it.
What is the output in /var/log/messages when you start it with the default options?
Do you have /etc/snmp/snmpd.conf file?
Do you have iptables running and if so did you setup a rule to allow UDP port 161 to pass?
Become a CompTIA Certified Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

Author

Commented:
Arnold,
The only entry in /var/log/messages is that snmp was started.  For testing, just using the snmpd.conf file that is created when installing snmp.  No iptables.  

Thanks,
Lewis
Most Valuable Expert 2013
Top Expert 2013

Commented:
Seems that you're missing OpenSSL!
wmp

Author

Commented:
WMP,

OpenSSL is installed.  Running "yum search openssl |grep ssl" shows the following.

xmlsec1.i386                             1.2.6-3.1              installed      
openssl-devel.i586                       0.9.7a-43.17.el4_8.5   installed      
xmlsec1-openssl.i386                     1.2.6-3.1              installed      
pyOpenSSL.i386                           0.6-1.p23              installed      
perl-Crypt-SSLeay.i386                   0.51-5                 installed      
openssl.i686                             0.9.7a-43.17.el4_8.5   installed  

Thanks,
Lewis
Most Valuable Expert 2013
Top Expert 2013

Commented:
Well,
it could be that OpenSSL is searched in the wrong place by snmpd
What do you get with
ldd /usr/sbin/snmpd  
(particularly lokk for libcrypto - is it where snmpd expects it to be)?
wmp
 

Author

Commented:
WMP,
The results are below.
        libnetsnmpagent.so.5 => /usr/lib/libnetsnmpagent.so.5 (0x00ea0000)
        libnetsnmpmibs.so.5 => /usr/lib/libnetsnmpmibs.so.5 (0x00cba000)
        libnetsnmphelpers.so.5 => /usr/lib/libnetsnmphelpers.so.5 (0x00602000)
        libwrap.so.0 => /lib/libwrap.so.0 (0x00829000)
        libnetsnmp.so.5 => /usr/lib/libnetsnmp.so.5 (0x001cd000)
        libsensors.so.3 => /usr/lib/libsensors.so.3 (0x00111000)
        librpm-4.3.so => /usr/lib/librpm-4.3.so (0x008f2000)
        librpmdb-4.3.so => /usr/lib/librpmdb-4.3.so (0x00266000)
        libselinux.so.1 => /lib/libselinux.so.1 (0x005cd000)
        librpmio-4.3.so => /usr/lib/librpmio-4.3.so (0x00145000)
        libbeecrypt.so.6 => /usr/lib/libbeecrypt.so.6 (0x0076a000)
        libdl.so.2 => /lib/libdl.so.2 (0x0019c000)
        librt.so.1 => /lib/tls/librt.so.1 (0x00f31000)
        libpthread.so.0 => /lib/tls/libpthread.so.0 (0x001a0000)
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x007b5000)
        libbz2.so.1 => /usr/lib/libbz2.so.1 (0x00ed4000)
        libz.so.1 => /usr/lib/libz.so.1 (0x00fc2000)
        libcrypto.so.4 => /usr/lib/libcrypto.so.4 (0x00350000)
        libelf.so.1 => /usr/lib/libelf.so.1 (0x00678000)
        libm.so.6 => /lib/tls/libm.so.6 (0x00c30000)
        libc.so.6 => /lib/tls/libc.so.6 (0x00381000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x006e8000)
        /lib/ld-linux.so.2 (0x00c0e000)

Thanks,
Lewis
Most Valuable Expert 2013
Top Expert 2013

Commented:
That's just strange. What gives
ldd -r /usr/sbin/snmpd ?
Also, you could run ldconfig to rebuild the cache and links.
And, do you find RAND_bytes with
strings /usr/lib/libcrypto.so.4 | grep RAND ?
wmp

Author

Commented:
Results of ldd -r /usr/sbin/snmpd:

 libnetsnmpagent.so.5 => /usr/lib/libnetsnmpagent.so.5 (0x00ccf000)
        libnetsnmpmibs.so.5 => /usr/lib/libnetsnmpmibs.so.5 (0x00b17000)
        libnetsnmphelpers.so.5 => /usr/lib/libnetsnmphelpers.so.5 (0x00247000)
        libwrap.so.0 => /lib/libwrap.so.0 (0x00cb2000)
        libnetsnmp.so.5 => /usr/lib/libnetsnmp.so.5 (0x00f14000)
        libsensors.so.3 => /usr/lib/libsensors.so.3 (0x00111000)
        librpm-4.3.so => /usr/lib/librpm-4.3.so (0x002cd000)
        librpmdb-4.3.so => /usr/lib/librpmdb-4.3.so (0x00145000)
        libselinux.so.1 => /lib/libselinux.so.1 (0x009b8000)
        librpmio-4.3.so => /usr/lib/librpmio-4.3.so (0x005d1000)
        libbeecrypt.so.6 => /usr/lib/libbeecrypt.so.6 (0x0028e000)
        libdl.so.2 => /lib/libdl.so.2 (0x00d12000)
        librt.so.1 => /lib/tls/librt.so.1 (0x00426000)
        libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00e3b000)
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x00c84000)
        libbz2.so.1 => /usr/lib/libbz2.so.1 (0x0040b000)
        libz.so.1 => /usr/lib/libz.so.1 (0x00a2d000)
        libcrypto.so.4 => /usr/lib/libcrypto.so.4 (0x0025b000)
        libelf.so.1 => /usr/lib/libelf.so.1 (0x00ec9000)
        libm.so.6 => /lib/tls/libm.so.6 (0x00dc7000)
        libc.so.6 => /lib/tls/libc.so.6 (0x0043a000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x006ed000)
        /lib/ld-linux.so.2 (0x008bb000)
undefined symbol: EVP_DigestInit        (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_DigestFinal       (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_DigestFinal_ex    (/usr/lib/libnetsnmp.so.5)
undefined symbol: AES_set_encrypt_key   (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_md5       (/usr/lib/libnetsnmp.so.5)
undefined symbol: HMAC  (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_MD_CTX_cleanup    (/usr/lib/libnetsnmp.so.5)
undefined symbol: SSLeay        (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_sha1      (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_MD_CTX_init       (/usr/lib/libnetsnmp.so.5)
undefined symbol: EVP_DigestUpdate      (/usr/lib/libnetsnmp.so.5)
undefined symbol: RAND_bytes    (/usr/lib/libnetsnmp.so.5)
undefined symbol: DES_cbc_encrypt       (/usr/lib/libnetsnmp.so.5)
undefined symbol: DES_ncbc_encrypt      (/usr/lib/libnetsnmp.so.5)
undefined symbol: DES_key_sched (/usr/lib/libnetsnmp.so.5)
undefined symbol: AES_cfb128_encrypt    (/usr/lib/libnetsnmp.so.5)

ldconfig has been run multiple times over the last couple of days.

No results from strings  /usr/lib/libcrypto.so.4 | grep RAND

Thanks,
Lewis
Most Valuable Expert 2013
Top Expert 2013
Commented:
OK, all your missing symbols are (should be) in libcrypto.
We actually must assume that this libcrypto is not what it claims to be.
How about reinstalling OpenSSL?

Author

Commented:
I thought of that, but there are so many dependancies on openssl (438).  If I do a yum remove open ssl is comes back and asks if it's ok to remove 428 packages.

Am I doing it right?
Most Valuable Expert 2013
Top Expert 2013

Commented:
Well, you're far more familiar with yum than I am.
Isn't there a possibility to do a forced reinstall of the current version, without deinstalling beforehand?
I didn't find such a thing in yum, but as I said, I don't use it ...
But please, don't remove dependent sotware. If you must deinstall, try to find a way to leave other installed software intact!
 

Author

Commented:
I succumed and am reinstalling from scratch.

Thanks for your help.

Lewis

Author

Commented:
He nailed it that it was SSL.  The problem was that you can't really uninstall ssl without nuking the system.  We ended up re-installing from scratch.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial