Problem with NRPE

[Michael Tucker]

TIP #1 TO POSTERS:

A: Because it makes it hard to follow the discussion.
Q: What's wrong with posting your reply at the top of the message?

TIP #2 TO POSTERS:

Please trim your messages!

AND NOW, BACK TO THE DISCUSSION IN PROGRESS...

[Mauro wrote:]

> Hi all,
>  
> I compiled and installed nrpe on HP-UX server.
> I configurated it to use inetd modality.
>  
> When I check from my nagios machine HP-UX server for nrpe I get this 
> error:
>  
> [root at maurox libexec]# ./check_nrpe -H 172.16.200.15
> CHECK_NRPE: Error - Could not complete SSL handshake.
>  
> On HP-UX system syslog i get this entry:
>  
> Jan 12 14:57:59 virgo inetd[10472]: nrpe/tcp: Connection from 
> 172.16.200.200 at Mon Jan 12 14:57:59 2004
>  
> Could You help me to understand problem?
>  
>  
> Thank You
>  
> Mauro
>


[Karl Yost replied:]

> By default nrpe will compile with SSL enabled. Are you using SSL? If 
> you don't want to use SSL, then re-configure it with the option 
> --disable-ssl (check the doc as I am not 100% that is the right)

[Mauro replied:]

> I installed SSL on both server:
> NAGISO SERVER> rpm -q -a|grep -i ssl
> openssl-0.9.7a-23
> HP-UX server> swlist |grep -i ssl
>   openssl                       0.9.7c         openssl
>

Mauro, there is a problem with SSL in NRPE 2.0 (and OpenSSL 0.9.7). So 
far, we've heard from several users running different operating systems 
(Solaris 9, AIX 5.1, SUSE 9, Fedora 1, and now HP-UX) who are all 
having the same problem. If you're curious, look through the messages 
on this board since about December 19; search for "NRPE", "nrpe", "SSL" 
or "handshake" in the subject to find the right messages.

Given this body of evidence, it is almost certainly a bug in NRPE 2.0, 
but we haven't heard back from the author of NRPE yet.

In the mean time, go to your NRPE source directory and do this:
# make distclean
# ./configure --disable-ssl
# make all

Then copy the new (non-SSL) versions of nrpe and check_nrpe to their 
proper locations.

Yours,
Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/enriched
Size: 2917 bytes
Desc: not available
URL: <https://www.monitoring-lists.org/archive/users/attachments/20040112/bbb49f92/attachment.bin>