Https check with SSO: "Could not connect to xxx within specified timeout: 10 seconds"

CMK version: 2.4.0p16.cee
OS version: Rocky Linux 9.7

Error message: Could not connect to xxx within specified timeout: 10 seconds

Hi,

I need help with a webservice https check. Basically it worked in the past, but since we changed to use SSO (with keycloak in the background) on this server since a few days, the https check does not work anymore, and I don’t know how to correct this. This is the failed check:

image

this is the current http service check setting:

and here is my check on the cmd-line:

SAL@lnzcheckmk01:\[\~/lib/nagios/plugins\]> ./check_httpv2 --url https://lnzgrafana01.research.silicon-austria.com --method GET --onredirect critical --debug-content --debug-headers --verbose
HTTP headers:
{
“server”: “nginx/1.14.1”,
“date”: “Wed, 14 Jan 2026 08:53:36 GMT”,
“content-type”: “text/html; charset=utf-8”,
“content-length”: “29”,
“cache-control”: “no-store”,
“location”: “/login”,
“x-content-type-options”: “nosniff”,
“x-frame-options”: “deny”,
“x-xss-protection”: “1; mode=block”,
}
Page content:
[Found](/login).

Stopped on redirect to: https://lnzgrafana01.research.silicon-austria.com/login (!!), Version: HTTP/2.0, Status: 302 Found | response_time=0.018653845s;;;0;10 time_http_headers=0.018440188s;;;; time_http_body=0.000213657s;;;; response_size=29B;;;0;
URL to test: https://lnzgrafana01.research.silicon-austria.com/
Stopped on redirect to: https://lnzgrafana01.research.silicon-austria.com/login (!!)
Method: GET
Version: HTTP/2.0
Status: 302 Found
Response time: 0.019 seconds
Page size: 29 Bytes
User agent: checkmk-active-httpv2/2.4.0
SAL@lnzcheckmk01:\[\~/lib/nagios/plugins\]>

Any ideas how make the check work again? Thanks.

I don’t know if this is the best solution, but I corrected the fail in the http check settings:
image

if you are fine with just knowing that your server sent the redirect as a result (which is a live sign, it doesn’t tell you anything about the application health, but at least networking is fine and the webserver basically runs) then your solution is fine :slight_smile:

yes, at this point I just want to check - is the webserver alive or reachable, without any more details.

1 Like