Hi I am trying to get nabox to work with | NetApp | Page 1

dense belfry Nov 9, 2022, 3:41 PM

#

hi @pseudo lotus sounds like you might be using an old version of Harvest, perhaps 1.X? That is no longer supported. Can you give Harvest 2 a try? It monitors 7mode clusters too. https://github.com/NetApp/harvest

pseudo lotus Nov 9, 2022, 3:44 PM

#

Hi Chris, It looks like I am using a harvest2 version
)nabox-harvest2| 172.18.0.9 - - [09/Nov/2022 14:34:12] "GET /harvest2/1.0/systems HTTP/1.1" 200 - (

dense belfry Nov 9, 2022, 3:46 PM

#

I guessed 1.6 because Harvest does not have a zapi.py but perhaps that is coming from nabox, which uses python. @toxic shuttle can you help. One other idea @pseudo lotus have you followed these 7mode steps? https://netapp.github.io/harvest/prepare-7mode-clusters/

toxic shuttle Nov 9, 2022, 3:47 PM

#

You are probably using an old 7-mode. you need a fairly recent 8.2P level

#

but yes double check the ssl settings, and disables sslv3 etc

#

OMG there is an actual website for Harvest ! 😄

pseudo lotus Nov 9, 2022, 3:48 PM

#

I followed the instructions on the nabox website...
Arf I knew it, we are trying to monitor this old netapp instance in order to get a brand new one
@toxic shuttle can we switch in French ?

#

Where can I disable sslv3 ?

toxic shuttle Nov 9, 2022, 3:54 PM

#

Sure I'll DM you

#

@dense belfry As long as we have options tls.enable it's good or is there a minimum patch level ?

#

I also wonder if we need to disable sslv3 etc

dense belfry Nov 9, 2022, 4:10 PM

#

the most up to the date documentation I have is https://netapp.github.io/harvest/prepare-7mode-clusters/ Since SSL is very much a moving target, it would not surprise me if Go/Python have moved ahead of what an old cluster supports. What's the error from zapi.py? Might be a good idea to check curl too

toxic shuttle Nov 14, 2022, 1:15 PM

#

So it seems ONTAP doesn't support TLS 1.2 and that's probably the reason (8.2.3P6). Do we support HTTP (without S) in Harvest ?

dense belfry Nov 14, 2022, 1:15 PM

#

we do not, let me check. I believe we support a min version though

toxic shuttle Nov 14, 2022, 1:16 PM

#

there is a options.tls in the system, but not sure if that's 1.1 or less

dense belfry Nov 14, 2022, 1:17 PM

#

IMPORTANT 7-mode filers that are not on the latest release of ONTAP may experience TLS connection issues with errors like tls: server selected unsupported protocol version 301 This is caused by a change in Go 1.18. The default for TLS client connections was changed to TLS 1.2 in Go 1.18. Please upgrade your 7-mode filers (recommended) or set tls_min_version: tls10 in your harvest.yml poller section. See #1007 for more details.

#

from the changelog, maybe that will work?

#Hi I am trying to get nabox to work with