Your exec line is wrong. It should read ;<div> </div><div><div> exec="/usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -i"</div> <div> arg0="/usr/local/nagios/bin/nrpe"</div><div> </div> <div class="gmail_quote">2009/7/9 Justin Amburn <<a href="mailto:Justin@marketlive.com">Justin@marketlive.com</a>> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div lang="EN-US" link="blue" vlink="blue"> <div> Thanks for replies, guys! I can run nrpe in global zones under SMF. I can even get nrpe in the non-global zones to run with the command: /usr/local/nagios/bin/nrpe –c /usr/local/nagios/etc/nrpe.cfg –i root@vz3haadp01# /usr/local/nagios/libexec/check_nrpe -H localhost NRPE v2.12 *BUT*, when I run it under SMF in the non-global zones I get the SSL handshake error. In the global zone this works just fine. It’s just the non-global that is causing me a headache. I’ve verified that the results from: inetadm -l svc:/network/nrpe/tcp:default the evil /etc/nsswitch.conf /etc/services crle ldd /var/svc/manifest/network/nrpe-tcp.xml Are the same between the global and the non-global. See, my ldd shows no errors: bash-3.00# ldd /usr/local/nagios/bin/nrpe libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7 libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7 libnsl.so.1 => /lib/libnsl.so.1 libsocket.so.1 => /lib/libsocket.so.1 libc.so.1 => /lib/libc.so.1 libmp.so.2 => /lib/libmp.so.2 libmd.so.1 => /lib/libmd.so.1 libscf.so.1 => /lib/libscf.so.1 libdoor.so.1 => /lib/libdoor.so.1 libuutil.so.1 => /lib/libuutil.so.1 libgen.so.1 => /lib/libgen.so.1 libssl_extra.so.0.9.7 => /usr/sfw/lib/libssl_extra.so.0.9.7 libcrypto_extra.so.0.9.7 => /usr/sfw/lib/libcrypto_extra.so.0.9.7 libm.so.2 => /lib/libm.so.2 I've kept adding and adding to the crle file: bash-3.00# crle Configuration file [version 4]: /var/ld/ld.config Default Library Path (ELF): /lib:/usr/lib:/usr/sfw/lib:/usr/local/lib Trusted Directories (ELF): /lib/secure:/usr/lib/secure (system default) Command line: crle -c /var/ld/ld.config -l /lib:/usr/lib:/usr/sfw/lib:/usr/local/lib BUT, since nrpe works in the non-global when not running under SMF, this seems to be strictly an SMF issue. Here's my manifest values for both the good and bad zones: bash-3.00# inetadm -l svc:/network/nrpe/tcp:default SCOPE NAME=VALUE name="nrpe" endpoint_type="stream" proto="tcp" isrpc=FALSE wait=FALSE exec="/usr/sfw/sbin/tcpd -c /usr/local/nagios/etc/nrpe.cfg -i" arg0="/usr/local/nagios/bin/nrpe" user="nagios" default bind_addr="" default bind_fail_max=-1 default bind_fail_interval=-1 default max_con_rate=-1 default max_copies=-1 default con_rate_offline=-1 default failrate_cnt=40 default failrate_interval=60 default inherit_env=TRUE default tcp_trace=FALSE tcp_wrappers=TRUE default connection_backlog=10 Also, in my /etc/nsswitch.conf all of the LDAP references have been removed. Every attribute is ‘files’. I’m out of ideas here! Does anyone see anything that I may be missing in the setup? Thanks! Justin Amburn <div> <div align="center" style="text-align:center"> <hr size="2" width="100%" align="center"> </div> From: Grant Byers [mailto:<a href="mailto:grant.byers@gmail.com" target="_blank">grant.byers@gmail.com</a>] Sent: Monday, July 06, 2009 8:05 PM To: Nagios Developers List Subject: Re: [Nagios-devel] Solaris 10: Running nrpe in a non-global zone </div><div><div></div><div class="h5"> I'm running NRPE in non-global Solaris 10 zones. Either configure & build with LDFLAGS="-R/usr/sfw/lib", or add /usr/sfw/lib to the runtime linker search path. See crle(1). <div> </div> <div> Regards, </div> <div> Grant <div> <div> 2009/7/7 Justin Amburn <<a href="mailto:Justin@marketlive.com" target="_blank">Justin@marketlive.com</a>> <div> Hi all, Does anyone know what custom tweaks need to happen to get nrpe running in non-global zones on a Solaris 10 box? It’s working good in the global zone, but I get the darned SSL handshake error inside the non-globals. I’m guessing this is an environment var or LD link issue. Any ideas? <a name="1225cd0f532e2922_12251f63e84a00e1_">Thanks,</a> Justin Amburn </div> ------------------------------------------------------------------------------ _______________________________________________ Nagios-devel mailing list <a href="mailto:Nagios-devel@lists.sourceforge.net" target="_blank">Nagios-devel@lists.sourceforge.net</a> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-devel" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-devel</a> </div> </div> </div> </div></div></div> </div> ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: <a href="http://p.sf.net/sfu/Challenge" target="_blank">http://p.sf.net/sfu/Challenge</a> _______________________________________________ Nagios-devel mailing list <a href="mailto:Nagios-devel@lists.sourceforge.net">Nagios-devel@lists.sourceforge.net</a> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-devel" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-devel</a> </blockquote></div> </div>