Nagios Support Forum

@BrunoLosse1, Lets try the following. Remove the following line from the ini file that I gave you and restart the nsclient service.

allowed ciphers = ALL:!MD5:@STRENGTH

Then run this again:

cd /usr/local/nagios/libexec
./check_nrpe -H <host ip adddress>

Same error.
Is there any other file I need to edit? Either at the Nagios server or Windows?

@BrunoLosse1, Possibly. Please run the following command(forcing v2 packets) from the nagios XI server:

./check_nrpe -2 -H <nrpe host ip adddress>

And also this one:

./check_nrpe -n -H <nrpe host ip adddress>

npolovenko wrote:@BrunoLosse1, Possibly. Please run the following command(forcing v2 packets) from the nagios XI server:

./check_nrpe -2 -H <nrpe host ip adddress>

And also this one:

./check_nrpe -n -H <nrpe host ip adddress>

Here's the results:

administrator@GEUL3BNAGPAS01:/usr/local/nagios/libexec$ ./check_nrpe -2 -H 10.63.248.105
CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 10.63.248.105: 1

administrator@GEUL3BNAGPAS01:/usr/local/nagios/libexec$ ./check_nrpe -n -H 10.63.248.105
CHECK_NRPE: Receive header underflow - only 0 bytes received (4 expected).

@BrunoLosse1, Are IP addresses NATed on your network? Please upload the most recent nsclient.log file from the windows server.

npolovenko wrote:@BrunoLosse1, Are IP addresses NATed on your network? Please upload the most recent nsclient.log file from the windows server.

No, we don't use NAT.

@BrunoLosse1, I can see a different kind of error in the log this time. Please change:

cache allowed hosts = 1

to

cache allowed hosts = 0

Then restart the nslcient and let me know if the problem goes away.

@npolovenko, got the same error.

I found this article https://forums.nsclient.org/t/nagios-ch ... te/4218/15 do you think it might help me? I was following the steps here https://support.nagios.com/kb/article.php?id=519, but got an error.

@BrunoLosse1, You don't need to use custom SSL serts, for now.

In the [/settings/NRPE/server] section of the ini file please add the following line:

ssl options =

And delete this line:

allowed ciphers = ALL:!MD5:@STRENGTH

Then restart the NSClient service.

Run these commands from the Nagios server:

cd /usr/local/nagios/libexec
./check_nrpe -H <host ip adddress>