topic Re: SLPD service - Show a list of host and if the service is on or off in VMware PowerCLI Discussions

SLPD service - Show a list of host and if the service is on or off

mbabu1 — Mon, 06 Feb 2023 20:38:11 GMT

Hi LUCD

I am trying to find a script which will show the chkconfig --list | grep slpd for each host in my vcenter. I have 130 hosts and at the moment I can only do this by logging onto each host which is time consuming.

Please help

Thanks

Re: SLPD service - Show a list of host and if the service is on or off

LucD — Mon, 06 Feb 2023 21:00:05 GMT

Have a look at Re: PowerCLI - Workaround for OpenSLP security vul... - VMware Technology Network VMTN

Re: SLPD service - Show a list of host and if the service is on or off

mbabu1 — Tue, 07 Feb 2023 08:51:53 GMT

Thank you LucD,

I have gone through the above link and the scripts actually carry out the fix. All I want is an output to show a list of all my hosts in the vCenter with the slpd service name and if its on or off. I can only run the chkconfig --list | grep slpd at host level, like to run this on all hosts at once have an output on csv.

I hope that helps and thanks for your help in advance.

Re: SLPD service - Show a list of host and if the service is on or off

LucD — Tue, 07 Feb 2023 09:14:39 GMT

Ok, I see.
The following will only list the status of the SLPD service on all ESXi nodes.

Note, the code does assume that the root credentials on all ESXi nodes are the same

$user = 'root' $pswd = 'VMware1!' $cmdsub = @' chkconfig --list | grep slpd; '@ $secPswd = ConvertTo-SecureString -String $pswd -AsPlainText -Force $cred = New-Object System.Management.Automation.PSCredential ($user, $secPswd) Get-VMHost -PipelineVariable esx | ForEach-Object -Process { Get-VMHostService -VMHost $esx | Where-Object { $_.Key -eq 'TSM-SSH' } | Start-VMHostService -Confirm:$false | Out-Null $session = New-SSHSession -ComputerName $esx.Name -Credential $cred -AcceptKey Invoke-SSHCommand -SSHSession $session -Command $cmdSub | Select-Object @{N = 'VMHost'; E = { $esx.Name } }, @{N = 'SLPD'; E = { $_.Output } } Remove-SSHSession -SSHSession $session | Out-Null Get-VMHostService -VMHost $esx | Where-Object { $_.Key -eq 'TSM-SSH' } | Stop-VMHostService -Confirm:$false | Out-Null }

Re: SLPD service - Show a list of host and if the service is on or off

mbabu1 — Tue, 07 Feb 2023 14:20:44 GMT

AMAZING.....you are a LEGEND...! Worked like a dream

Re: SLPD service - Show a list of host and if the service is on or off

mvattigunta — Tue, 07 Feb 2023 14:39:07 GMT

I tested the above script in my lab. There are 3 esxi hosts in my lab and SLPD service stopped for 2 hosts and running on 1 host. However, the output showing SLPD off only.

I've attached a screenshot for the host where SLPD running. Could you please have a look.

Re: SLPD service - Show a list of host and if the service is on or off

LucD — Tue, 07 Feb 2023 15:43:00 GMT

What I think happened is the following.
The chkconfig --list command shows the persistent status of the service.
The /etc/init.d/slpd status shows the current status.

The code should in fact list the 2 options, current status and the persistent config.

Something like this

$user = 'root' $pswd = 'VMware1!' $cmdsub1 = @' /etc/init.d/slpd status; '@ $cmdsub2 = @' chkconfig --list | grep slpd; '@ $secPswd = ConvertTo-SecureString -String $pswd -AsPlainText -Force $cred = New-Object System.Management.Automation.PSCredential ($user, $secPswd) Get-VMHost -PipelineVariable esx | ForEach-Object -Process { Get-VMHostService -VMHost $esx | Where-Object { $_.Key -eq 'TSM-SSH' } | Start-VMHostService -Confirm:$false | Out-Null $session = New-SSHSession -ComputerName $esx.Name -Credential $cred -AcceptKey $current = Invoke-SSHCommand -SSHSession $session -Command $cmdSub1 $persistent = Invoke-SSHCommand -SSHSession $session -Command $cmdSub2 New-Object -TypeName PSObject -Property ([ordered]@{ VMHost = $esx.Name Current = $current.Output[0] Persistent = $persistent.Output[0] }) Remove-SSHSession -SSHSession $session | Out-Null Get-VMHostService -VMHost $esx | Where-Object { $_.Key -eq 'TSM-SSH' } | Stop-VMHostService -Confirm:$false | Out-Null }

To stop the service and change the persistent setting, the original thread I pointed to does that

Re: SLPD service - Show a list of host and if the service is on or off

mvattigunta — Tue, 07 Feb 2023 16:24:05 GMT

Excellent LucD. Both checks (persistent and current status) providing the result now. Appreciate your support.

Re: SLPD service - Show a list of host and if the service is on or off

prasanna22kumar — Wed, 08 Feb 2023 11:08:19 GMT

Hi Lucd,

Thanks for reply, But when i run above script..I get error attached.

Regards,

Kumar.

Re: SLPD service - Show a list of host and if the service is on or off

LucD — Wed, 08 Feb 2023 11:13:49 GMT

Looks like the SSH session (New-SSHSession) was not established.

Re: SLPD service - Show a list of host and if the service is on or off

prasanna22kumar — Wed, 08 Feb 2023 11:21:26 GMT

HI Lucd,

If i manually enable SSH and run the below script to verify the SLP status, SSH gets disabled. So it's not able open new SSH session

$cmdsub1 = @'
/etc/init.d/slpd status;
'@
$cmdsub2 = @'
chkconfig --list | grep slpd;
'@

$secPswd = ConvertTo-SecureString -String $pswd -AsPlainText -Force
$cred = New-Object System.Management.Automation.PSCredential ($user, $secPswd)

Get-VMHost -PipelineVariable esx |
ForEach-Object -Process {
Get-VMHostService -VMHost $esx | Where-Object { $_.Key -eq 'TSM-SSH' } | Start-VMHostService -Confirm:$false | Out-Null

$session = New-SSHSession -ComputerName $esx.Name -Credential $cred -AcceptKey

$current = Invoke-SSHCommand -SSHSession $session -Command $cmdSub1
$persistent = Invoke-SSHCommand -SSHSession $session -Command $cmdSub2
New-Object -TypeName PSObject -Property ([ordered]@{
VMHost = $esx.Name
Current = $current.Output[0]
Persistent = $persistent.Output[0]
})

Remove-SSHSession -SSHSession $session | Out-Null

Get-VMHostService -VMHost $esx | Where-Object { $_.Key -eq 'TSM-SSH' } | Stop-VMHostService -Confirm:$false | Out-Null
}

Regards,

Kumar

Re: SLPD service - Show a list of host and if the service is on or off

LucD — Wed, 08 Feb 2023 11:54:48 GMT

That code disables the SSH service at the end.
But does New-SshSession actually work?
What is returned when you do

New-SSHSession -ComputerName MyEsx -Credential $cred -AcceptKey -Verbose

Does the ESXi firewall allow SSH traffic?
Check with

Get-VMHostFireWallException -VMhost MyEsx -Name 'SSH *'

Is the SSH session timeout set too short?
Check with

Get-AdvancedSetting -Entity MyEsx -Name 'UserVars.ESXiShellTimeOut'