check_nrpe fails, SSL handshake error

[John Downs]

I'm having the exact same problem as Michael.  Only I'm running Solaris 8
and no tcp wrappers.
I have also tried runing nrpe without inetd with the same results. My
question to you nrpe gurus is:
Do i need to set the suid bit on nrpe?
And should I see nrpe running in the background on any or all of the
options for running. At present I don't.

-john

----- Original Message ----- 
From: "Michael Tucker" <mtucker at airmail.net>
To: <nagios-users at lists.sourceforge.net>
Sent: Friday, December 19, 2003 5:56 PM
Subject: [Nagios-users] check_nrpe fails, SSL handshake error


> Howdy:
>
> I've searched the archives but didn't find a solution to my problem. I
> almost hate to ask this, because it seems very basic, but I just can't
> figure it out.
>
> Here's my situation. Perhaps I'm describing too much, but I figure it's
> better to describe too much than too little if I hope to get a helpful
> reply.
>
>   * * *
>
> I'm trying to set up a simple nagios configuration for the first time.
> I have a central server and a distributed server which should
> communicate with each other using nsca/send_nsca. I have a host to be
> monitored which should communicate with the distributed server using
> nrpe/check_nrpe. This is all on Solaris 9 (SPARC), on both servers and
> the host to be monitored.
>
> It's a "clean" install of Solaris 9 plus the current patch cluster,
> plus the following packages downloaded from sunfreeware.com: freetype,
> gcc, jpeg, libpng, mhash, zlib and openssl. I've downloaded and
> compiled the following programs: gd, libmcrypt, mcrypt, nagios,
> nagios-plugins, nrpe and nsca.
>
> Everything seemed to compile ok using gcc. The packages that depend on
> ssl (or whatever) knew about them at compile time (at least, according
> to the output from the ./configure scripts).
>
> On the host to be monitored, I've installed nrpe and a simple nrpe.cfg
> file, and edited /etc/inetd.conf and /etc/services as follows:
>
> /etc/inetd.conf:
> nrpe stream tcp nowait nagios /usr/sfw/sbin/tcpd /usr/local/nagios/bin/
> nrpe -c /usr/local/nagios/bin/nrpe.cfg -i
>
> /etc/services:
> nrpe 5666/tcp # NRPE (Nagios remote plugin executor)
>
> nrpe.cfg (default file, except for the following):
> command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10
> command[check_load]=/usr/local/nagios/libexec/check_load -w 15,10,5 -c
> 30,25,20
>
> On the distributed server, I've installed the check_nrpe plugin.
>
>   * * *
>
> Ok, here's the problem. When I try to run check_nrpe on the distributed
> server, I get this error:
>
> # ./check_nrpe -H {IP of host to monitor} -c check_load
> CHECK_NRPE: Error - Could not complete SSL handshake.
>
>   * * *
>
> What am I missing? What have I left out? (I just know that I'm going to
> say "D'oh!" when someone points out something simple, but I just can't
> see it.)
>
> Thanks,
> Michael
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
> Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>



-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null