nrpe won't connect - contradictory messages in log

[Richard Remington]

Dear Whit,

This URL might come in handy. It's where I keep my notes on issues I have with NRPE on various platforms. It's not very extensive yet but shows a number of possible solutions to the SSL handshake deal.

http://handyswitches.org/index.php?title=nrpe#TROUBLESHOOTING

Regards,

Richard Remington
Unix Administrator

Whit Blauvelt wrote:
> Hi,
> 
> This is with nrpe-2.12, built from tar:
> 
> On the remote host:
> 
> daemon.log:Jul 28 13:22:42 system2 nrpe[7460]: Starting up daemon
> daemon.log:Jul 28 13:22:42 system2 nrpe[7460]: Listening for connections on port 5666 
> daemon.log:Jul 28 13:22:42 system2 nrpe[7460]: Allowing connections from: 127.0.0.1, 192.168.250.1
> daemon.log:Jul 28 13:22:52 system2 nrpe[7470]: Host 192.168.250.1 is not allowed to talk to us!
> daemon.log:Jul 28 13:27:46 system2 nrpe[8013]: Host 192.168.250.1 is not allowed to talk to us!
> 
> On the main nagios system:
> 
> root at system1:/opt/nagios/plugins# ./check_nrpe -H 192.168.250.2 -c check_swap
> CHECK_NRPE: Error - Could not complete SSL handshake.
> 
> root at system1:/opt/nagios/plugins# ./check_nrpe -n -H 192.168.250.2 -c check_swap
> CHECK_NRPE: Error receiving data from daemon.
> 
> I'm see other discussions here that suggest there could have been a
> compile-time problem with the SSL libraries. I'll check that. Even if turns
> out so, should that effect connecting without SSL, as in the last example?
> These two boxes are connected by direct cable, no need to encrypt. And
> they're exchanging other traffic constantly on this link, so it's known
> good.
> 
> What's with the contradiction between "Allowing connections from: 127.0.0.1,
> 192.168.250.1" and "Host 192.168.250.1 is not allowed to talk to us!"? It
> seems on the surface like that second message is wrong - that host
> 192.168.250.1 obviously _is_ allowed to "talk to us," but the transaction's
> failing on another level. Is there a bug here in the choice of error message
> to present?
> 
> Thanks,
> Whit
> 
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
> trial. Simplify your report design, integration and deployment - and focus on 
> what you do best, core application coding. Discover what's new with 
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
> 
> 


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null