NSCA, mcrypt and Solaris 10 x86

Alloo, Vincent v-alloo at ti.com
Mon Nov 5 09:50:26 CET 2007


Thomas,
Thanks for your answer. Unfortunately, mcrypt was compiled from scratch
(without problems). I have the same error with all algorithms.

Did anyone have a NSCA setup running on Solaris 10 x86 platform with
encryption?

Regards,

Vincent Alloo
TI France Design Systems Operations Manager
Europe and Middle East IT Services
Texas Instruments France

E-Mail: v-alloo at ti.com
Phone: +33 4 93 22 26 97
Mobile: +33 6 82 13 00 80
-----Original Message-----
From: Thomas Guyot-Sionnest [mailto:dermoth at aei.ca] 
Sent: Sunday, November 04, 2007 10:23 PM
To: Alloo, Vincent
Cc: Nagios Users mailinglist
Subject: Re: [Nagios-users] NSCA, mcrypt and Solaris 10 x86

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 30/10/07 01:10 PM, Alloo, Vincent wrote:
> Hello,
> 
>  
> 
> I have an issue with NSCA on Solaris 10 x86 machine (SunOS svxnagios02
> 5.10 Generic_120012-14 i86pc i386 i86pc):
> 
>  
> 
> On a Linux RH4 machine, no issue:
> 
> % printf "toto\t0\tcomment\n" | /apps/nagios/libexec/send_nsca -H
> monitoring -c /db/sysadmin/nagios/send_nsca.cfg
> 
> 1 data packet(s) sent to host successfully.
> 
>  
> 
> On a Solaris 10 x86 machine:
> 
> --SSH-- > printf "toto\t0\tcomment\n" | /apps/nagios/libexec/send_nsca
> -H monitoring -c /db/sysadmin/nagios/send_nsca.cfg
> 
> Error: Failed to initialize encryption libraries for method 14
> 
> Segmentation fault
> 
>  
> 
> If I select decryption_method=0 or 1, it works fine.
> 
>  
> 
> The error message I have is:
> 
>  
> 
> Oct 30 17:54:36 svxnagios02 send_nsca[22865]: [ID 334271 user.error]
> Could not open mcrypt algorithm 'rijndael-128' with mode 'cfb'

I'd guess your Solaris Mcrypt library doesn't have the Rijndael
algorithm compiled in. The easiest way to fix would be to find an algo
supported on all your servers. You can also uninstall Mcrypt and compile
it from scratch, making sure it compiles in all the algorithms you need.

Any method over 2 should be secure enough.

Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHLjgp6dZ+Kt5BchYRAnpkAJ9hG1PxSH581t99ANfl8ymRf6nRsgCeNuV5
fD8qmyxk8e95pVrECIUrKAw=
=pcS9
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list