ssl handshake error

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
avandemore
Posts: 1597
Joined: Tue Sep 27, 2016 4:57 pm

Re: ssl handshake error

Post by avandemore »

I linked to a document earlier in this thread: https://support.nagios.com/forum/viewto ... 00#p203107

Please use those instructions to install NRPE 3.0.1. You will needs to place the extracted files on a file systems which does not have the noexec option active.
Previous Nagios employee
Top
baber
Posts: 295
Joined: Wed Oct 21, 2015 4:39 am

Re: ssl handshake error

Post by baber »

avandemore wrote:I linked to a document earlier in this thread: https://support.nagios.com/forum/viewto ... 00#p203107

Please use those instructions to install NRPE 3.0.1. You will needs to place the extracted files on a file systems which does not have the noexec option active.

so thanks

but i use from that doc and type these commands but problem not solved

Code: Select all

cd  nrpe-3.0
./configure
make all
make install
make install-config

add this line to /etc/services

nrpe            5666/tcp                # NRPE

make install-init
service xinetd restart
finally when type :

Code: Select all

netstat -at | egrep "nrpe|5666"
this error appear

Code: Select all

getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
tcp        0      0 *:nrpe                      *:*                         LISTEN      
tcp        0      0 *:nrpe                      *:*                         LISTEN      
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
getnameinfo failed
Last edited by avandemore on Tue Nov 29, 2016 2:40 pm, edited 1 time in total.
Reason: Please use code tags for output.
Top
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: ssl handshake error

Post by rkennedy »

Please show us the exact commands you typed along with what was returned on the Nagios portion.

As for the netstat problem, please run this netstat -np | grep 5666 to stop it from trying to resolve.
Former Nagios Employee
Top
baber
Posts: 295
Joined: Wed Oct 21, 2015 4:39 am

Re: ssl handshake error

Post by baber »

rkennedy wrote:Please show us the exact commands you typed along with what was returned on the Nagios portion.

As for the netstat problem, please run this netstat -np | grep 5666 to stop it from trying to resolve.

i have attached all commands with output

BR
Attachments
Commands.txt
(15.48 KiB) Downloaded 321 times
Top
avandemore
Posts: 1597
Joined: Tue Sep 27, 2016 4:57 pm

Re: ssl handshake error

Post by avandemore »

/usr/local/nagios/libexec/check_nrpe is installed by nagios-plugins, so that is the information in the document you need to be concerned about.

check_nrpe will not work correctly until ldd returns correct information. Example:

Code: Select all

[root@avandemore-centos7 mail]# ldd /usr/local/nagios/libexec/check_nrpe
        linux-vdso.so.1 =>  (0x00007fffbe199000)
        libssl.so.10 => /lib64/libssl.so.10 (0x00007fe0492e9000)
        libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007fe048f01000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x00007fe048ce7000)
        libc.so.6 => /lib64/libc.so.6 (0x00007fe048925000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fe0486d9000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fe0483f3000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007fe0481ef000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007fe047fbd000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007fe047db8000)
        libz.so.1 => /lib64/libz.so.1 (0x00007fe047ba2000)
        /lib64/ld-linux-x86-64.so.2 (0x00007fe049561000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007fe047993000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007fe04778e000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007fe047574000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fe047358000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fe047132000)
        libpcre.so.1 => /lib64/libpcre.so.1 (0x00007fe046ed1000)
        liblzma.so.5 => /lib64/liblzma.so.5 (0x00007fe046cac000)
What does ldd /usr/local/nagios/libexec/check_nrpe return for you now?
Previous Nagios employee
Top
baber
Posts: 295
Joined: Wed Oct 21, 2015 4:39 am

Re: ssl handshake error

Post by baber »

avandemore wrote:/usr/local/nagios/libexec/check_nrpe is installed by nagios-plugins, so that is the information in the document you need to be concerned about.

check_nrpe will not work correctly until ldd returns correct information. Example:

Code: Select all

[root@avandemore-centos7 mail]# ldd /usr/local/nagios/libexec/check_nrpe
        linux-vdso.so.1 =>  (0x00007fffbe199000)
        libssl.so.10 => /lib64/libssl.so.10 (0x00007fe0492e9000)
        libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007fe048f01000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x00007fe048ce7000)
        libc.so.6 => /lib64/libc.so.6 (0x00007fe048925000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fe0486d9000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fe0483f3000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007fe0481ef000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007fe047fbd000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007fe047db8000)
        libz.so.1 => /lib64/libz.so.1 (0x00007fe047ba2000)
        /lib64/ld-linux-x86-64.so.2 (0x00007fe049561000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007fe047993000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007fe04778e000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007fe047574000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fe047358000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fe047132000)
        libpcre.so.1 => /lib64/libpcre.so.1 (0x00007fe046ed1000)
        liblzma.so.5 => /lib64/liblzma.so.5 (0x00007fe046cac000)
What does ldd /usr/local/nagios/libexec/check_nrpe return for you now?
this is output of command:

Code: Select all

ldd /usr/local/nagios/libexec/check_nrpe
        linux-vdso.so.1 =>  (0x00007fff71dff000)
        libssl.so.10 => /usr/lib64/libssl.so.10 (0x000000323ca00000)
        libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x0000003237a00000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x000000323c600000)
        libc.so.6 => /lib64/libc.so.6 (0x000000322c200000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x000000323a200000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x0000003238200000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x0000003237200000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x0000003238a00000)
        libdl.so.2 => /lib64/libdl.so.2 (0x000000322be00000)
        libz.so.1 => /lib64/libz.so.1 (0x000000322da00000)
        /lib64/ld-linux-x86-64.so.2 (0x000000322ba00000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x0000003237600000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x0000003238600000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x000000322e200000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x000000322c600000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x000000322d600000)

i think don't have these 2 packages

libpcre.so.1 => /lib64/libpcre.so.1 (0x00007fe046ed1000)
liblzma.so.5 => /lib64/liblzma.so.5 (0x00007fe046cac000)

but my problem is nagios is installed on redhat 6.2 Os and my nagios server don't have access to internet i have to install packages offline

what do i have to do ?

BR
Top
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:
Contact dwhitfield

Re: ssl handshake error

Post by dwhitfield »

Those packages don't appear to be necessary on Cent6

Code: Select all

[root@centos6x64 ~]# ldd /usr/local/nagios/libexec/check_nrpe
        linux-vdso.so.1 =>  (0x00007ffef7491000)
        libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007f4dd4f01000)
        libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00007f4dd4b1d000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x00007f4dd4903000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f4dd456f000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f4dd432b000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f4dd4043000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f4dd3e3f000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f4dd3c13000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f4dd3a0e000)
        libz.so.1 => /lib64/libz.so.1 (0x00007f4dd37f8000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f4dd517a000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f4dd35ed000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f4dd33e9000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f4dd31cf000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f4dd2fb2000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f4dd2d92000)
Let's take a step back. This is a "server --> host" NRPE setup, not a "server --> passthrough --> Host" setup, correct? Is there any reason you can't use check_by_ssh? The check_by_ssh plugin will be more secure (but it does introduce more load). I suggest this because I know working through all of this on a system without Internet is a pain. https://assets.nagios.com/downloads/nag ... ng_SSH.pdf is for XI, but the mechanics are still the same.

Could you clarify the version of Red Hat you are using and where? You've mentioned 6.2, 6.4, and 6.8 in the thread. I'm not aware of any specific issues with specific versions, but if we are going to dig into that, we need to know what we are working with.
Top
baber
Posts: 295
Joined: Wed Oct 21, 2015 4:39 am

Re: ssl handshake error

Post by baber »

dwhitfield wrote:Those packages don't appear to be necessary on Cent6

Code: Select all

[root@centos6x64 ~]# ldd /usr/local/nagios/libexec/check_nrpe
        linux-vdso.so.1 =>  (0x00007ffef7491000)
        libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007f4dd4f01000)
        libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00007f4dd4b1d000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x00007f4dd4903000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f4dd456f000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f4dd432b000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f4dd4043000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f4dd3e3f000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f4dd3c13000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f4dd3a0e000)
        libz.so.1 => /lib64/libz.so.1 (0x00007f4dd37f8000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f4dd517a000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f4dd35ed000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f4dd33e9000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f4dd31cf000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f4dd2fb2000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f4dd2d92000)
Let's take a step back. This is a "server --> host" NRPE setup, not a "server --> passthrough --> Host" setup, correct? Is there any reason you can't use check_by_ssh? The check_by_ssh plugin will be more secure (but it does introduce more load). I suggest this because I know working through all of this on a system without Internet is a pain. https://assets.nagios.com/downloads/nag ... ng_SSH.pdf is for XI, but the mechanics are still the same.

Could you clarify the version of Red Hat you are using and where? You've mentioned 6.2, 6.4, and 6.8 in the thread. I'm not aware of any specific issues with specific versions, but if we are going to dig into that, we need to know what we are working with.

so thanks

my means was nagios server is installed on Red Hat Enterprise Linux Server release 6.2 (Santiago)

and that server i want to add nagios is Red Hat Enterprise Linux Server release 6.8 (Santiago)

excuseme the correct output this is :

Code: Select all

ldd /usr/local/nagios/libexec/check_nrpe
        linux-vdso.so.1 =>  (0x00007ffc1cb59000)
        libssl.so.10 => /usr/lib64/libssl.so.10 (0x0000003b48400000)
        libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x0000003b42800000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x0000003b49400000)
        libc.so.6 => /lib64/libc.so.6 (0x0000003b37000000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x0000003b47400000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x0000003b46400000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x0000003b45400000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x0000003b46c00000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x0000003b38c00000)
        libdl.so.2 => /lib64/libdl.so.2 (0x0000003b36c00000)
        libz.so.1 => /lib64/libz.so.1 (0x0000003b37c00000)
        /lib64/ld-linux-x86-64.so.2 (0x0000003b36800000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x0000003b46800000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x0000003b45c00000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x0000003b37400000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x0000003b38800000)

i don't have centos all of my os are redhat
now what do i have to do ?
will my problem solve?
Top
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:
Contact dwhitfield

Re: ssl handshake error

Post by dwhitfield »

CentOS and Red Hat should have package compatibility, so that's probably not the issue. AV sent you the package list for Cent/Red Hat 7, so that's why I sent the ones I had on 6...just to clarify that you didn't need the two you asked about.

You have two servers in our situation, so I think check_by_ssh should work for you. Do you just want to use NRPE because that is what you are using on your other servers? Did you look at https://assets.nagios.com/downloads/nag ... ng_SSH.pdf? We seem to be hitting a roadblock with NRPE, so I just want to be sure that's the only method that is going to work for you. http://www.techrepublic.com/blog/linux- ... sh-plugin/ gives a third-party view about check_by_ssh.
Top
baber
Posts: 295
Joined: Wed Oct 21, 2015 4:39 am

Re: ssl handshake error

Post by baber »

dwhitfield wrote:CentOS and Red Hat should have package compatibility, so that's probably not the issue. AV sent you the package list for Cent/Red Hat 7, so that's why I sent the ones I had on 6...just to clarify that you didn't need the two you asked about.

You have two servers in our situation, so I think check_by_ssh should work for you. Do you just want to use NRPE because that is what you are using on your other servers? Did you look at https://assets.nagios.com/downloads/nag ... ng_SSH.pdf? We seem to be hitting a roadblock with NRPE, so I just want to be sure that's the only method that is going to work for you. http://www.techrepublic.com/blog/linux- ... sh-plugin/ gives a third-party view about check_by_ssh.
So thanks

But i am so confused because i have added about 140 virtual machines (linux) with different version of redhat 4.2 , 6.4) to nagios server
And use nrpe for all of them why nrpe not work on this version of redhat(6.4)?

Is your means use check_by_ssh instead of check_nrpe for monitor this server?

BR
Top
Locked

Return to “Open Source Nagios Projects”