NRPE Chceks fail on Windows 2016 Server

[me@work55]

Nagios 3.2.3 Core
Windows 2016 Datacenter Server
NSclient 0.5.1044

In my Nsclient I have this

Code: Select all

; External scripts - A list of scripts available to run from the CheckExternalScripts module. Syntax is: `command=script arguments`
[/settings/external scripts/scripts]

 Check Windows Updates
Check_Updates = cscript.exe //T:30 //NoLogo scripts\\nm-check-available-updates.vbs

I run this from the Nagios server
./check_nrpe -H 132.238.3.109 -c check_updates -t 30
CHECK_NRPE: Socket timeout after 30 seconds.

I have changed the -t to higher number still same results.

I have a windows 2012 server running nsclient version 4.1.73

The same check works fine no issues

So I copied the nsclient.ini file from that server placed it on the windows 2016 server then restarted the nscp service

ran the command and got this error

./check_nrpe -H 132.238.3.109 -c check_updates -t 30
CHECK_NRPE: Error - Could not complete SSL handshake.


Any ideas?

thank you
Tom

[npolovenko]

Hello, @mework55. Can you make sure that Nagios Core ip address is listed in the allowed hosts section in the nsclient.ini file?Also, please upload the nsclient.log file here so we can examine it.

[me@work55]

Hello

Yes I have the Nagios server ip address in my nsclient file I had the dns name and I changed it to the ip address no change.

I attached the log

[tgriep]

I an seeing a this error that shows the NRPE Server is not loading
2017-12-15 10:55:45: error:B:\master\x64\dist\modules\NRPEServer\module.cpp:37: Exception in Failed to load NRPEServer: : resolve: No such host is known
2017-12-15 10:55:45: error:c:\source\master\service\NSClient++.cpp:651: Plugin refused to load: NRPEServer

One of the things I found to cause that error is a misconfiguration in the allowed hosts option.
Can you verify the setting or post the whole nsclient.ini file so we can view it?"

[me@work55]

Thank you

Posted

[tgriep]

Try disabling the host caching by changing the following from

Code: Select all

cache allowed hosts = true

to

Code: Select all

cache allowed hosts = false

And remove the following option

Code: Select all

bind to = UNKNOWN

Also, change this option from

Code: Select all

ssl options = no-sslv2,no-sslv3

to

Code: Select all

ssl options =

Save the file and restart NSClient++ and see if the errors are gone from the nsclient.log file and check to see if you can connect to the server.

If not, I recommend removing the NSClient++ agent and deleting the folder it was installed in and installing the latest stable 0.4.x version of the NSClient++ agent.

[me@work55]

Thank you

It now works

this can be locked