NRPE SSL Error

[Rob Moss]

What I meant was:  On the nagios server, log in as the 'nagios' user, 
and run the command just as nagios might run it... for example:

/usr/local/nagios/libexec/check_nrpe -H some.host.somewhere.com -c 
check_disk

And see what happens.  Maybe your SSL libraries aren't in your ld.so 
path or something, or you have some other problem executing the NRPE 
plugin which will show up if you run the command yourself.

If that fails, then you may want to recompile NRPE and make sure you 
have the check_nrpe and the nrpe daemon copied onto both systems (you 
may have a mismatched copy, the client with SSL, the check program without).

Cheers
rob

Matt Wells wrote:

> I am able to run the command and get a perfect reply. 
> I get the nrpe[25392]: Error: Could not complete SSL handshake. 5 
> every 3 minutes on the second.
>
>     ----- Original Message -----
>     Subject: Re: [Nagios-users] NRPE SSL Error
>     From:  Rob Moss <robmossrm at aol.com>
>     To: Undisclosed reciepent
>     CC: "nagios-users at lists.sourceforge.net"
>     <nagios-users at lists.sourceforge.net>
>     Date: 09-09-2005 12:26
>
>
>     Matt Wells wrote:
>
>>     By default now it compiles with SSL enabled.. at least it said so
>>     in the configure file.
>>
>>         ----- Original Message -----
>>         Subject: Re: [Nagios-users] NRPE SSL Error
>>         From: martin hudec <corwin at aeternal.net>
>>         To: "Matt Wells" <chroot at wells.vg>
>>         CC: nagios-users at lists.sourceforge.net
>>         Date: 09-09-2005 11:51
>>
>>
>>         Hello,
>>
>>         On Fri, Sep 09, 2005 at 11:33:26AM -0700 or thereabouts, Matt
>>         Wells wrote:
>>         > Martin thank you for such a fast reply. I compiled the v2
>>         on the
>>         > server and copied the check_nrpe to the libexec dir. This
>>         is from
>>         > the same compile as the clients. Other than the check_nrpe
>>         does the
>>         > Nagios Server need anything else running that perhaps I've
>>         not run?
>>         > The clients have the /usr/local/nagios/nrpe -c
>>         > /usr/local/nagios/nrpe.cfg -d for the client.
>>         > The clients are in /usr/local/nagios and within this folder is
>>         > nrpe
>>         > nrpe.cfg
>>         > libexec/
>>         > libexec/check_lots_of_checks_here
>>
>>         Well I am actually interested in way how was nrpe compiled
>>         (you said
>>         that all nrpe are from the same compile), so look for compile
>>         options.. This was exactly what I was missing (to enable ssl
>>         during
>>         configuration before compilation).. I am using FreeBSD, so I used
>>         WITH_SSL=yes as compile option for nrpe port. So check your
>>         operating
>>         system and its package system for any configurable options
>>         for nrpe
>>         package.
>>
>>         I am leaving from work, so I won't be online until morning. I
>>         hope my
>>         few lines will actually do some help.
>>
>     Most of the SSL errors I get are related to the
>
>     allowed_hosts
>
>     option. Check that your Nagios server IP address is on that line
>     (separated by commas).
>
>     Also, on your nagios server, run the check_nrpe command as the
>     nagios user with exactly the same arguments as the Nagios server
>     would have and display the error to us.
>
>     Cheers.
>     rob.
>

-- 
Rob Moss
Unix   Systems    Admin
Hosting & DB Operations
Hammersmith, London, UK
Phone: +44 20 7348 8629

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20050909/8d3792b7/attachment.html>