NSClient - ERROR: Invalid password. [Nagios 3.23]

[mangirdas]

Code: Select all

root@expserver:~# /usr/lib/nagios/plugins/check_nt -H 192.168.3.252 -p 12489 -v USEDDISKSPACE -d SHOWALL -l c -s D28Ak37AS
c:\ - total: 35.45 Gb - used: 11.56 Gb (33%) - free 23.89 Gb (67%) | 'c:\ Used Space'=11.56Gb;0.00;0.00;0.00;35.45
root@expserver:~#

Everything looks fine

Without -s

Code: Select all

root@expserver:~# /usr/lib/nagios/plugins/check_nt -H 192.168.3.252 -p 12489 -v USEDDISKSPACE -d SHOWALL -l c
NSClient - ERROR: Invalid password.

[hsmith]

Which check isn't working right? With the command you ran about we confirmed that you have connectivity and this is working. Now it's time to look at the service check and see what we have going on as far as syntax.

[mangirdas]

All checks have problems

Code: Select all

C:\ Drive Space
UNKNOWN	2015-10-02 11:04:39	0d 11h 26m 50s	4/4	NSClient - ERROR: Invalid password. 
CPU Load
UNKNOWN	2015-10-02 11:04:37	0d 11h 49m 0s	4/4	NSClient - ERROR: Invalid password. 
D:\ Drive Space
UNKNOWN	2015-10-02 11:04:38	0d 11h 26m 50s	4/4	NSClient - ERROR: Invalid password. 
Kerio
UNKNOWN	2015-10-02 11:04:37	0d 11h 26m 56s	4/4	NSClient - ERROR: Invalid password. 
Slave
UNKNOWN	2015-10-02 11:04:38	0d 11h 26m 51s	4/4	NSClient - ERROR: Invalid password. 
Uptime
UNKNOWN	2015-10-02 11:04:39	0d 11h 49m 33s	4/4	NSClient - ERROR: Invalid password. 

but I am using this command: not check_nt , but check_nrpe

Code: Select all

define command{
   command_name   checkmem16
   command_line   /usr/lib/nagios/plugins/check_nrpe -t 60 -H 192.168.3.252 -c checkMem -a MaxWarn=95% MaxCrit=99% type=physical
   }
   

[hsmith]

Can you post the service definition for those checks?

[mangirdas]

I found something strange. I used command:

Code: Select all

root@expserver:~#  /usr/lib/nagios/plugins/check_nrpe -H 192.168.3.252 -n -u -p 5666 -t 60 -c -a MaxWarn=95% MaxCrit=99% type=physical
CHECK_NRPE: Received 0 bytes from daemon.  Check the remote server logs for error messages.

and logs came different:

Code: Select all

2015-10-05 07:45:49: e:c:\build\nscp\include\socket/connection.hpp:236: Failed to establish secure connection: unknown protocol

previous logs was:

Code: Select all

2015-10-05 07:41:29: e:..\..\..\..\nscp\modules\NSClientServer\NSClientServer.cpp:254: Invalid password (123456).
2015-10-05 07:41:31: e:..\..\..\..\nscp\modules\NSClientServer\NSClientServer.cpp:254: Invalid password (123456).
2015-10-05 07:41:31: e:..\..\..\..\nscp\modules\NSClientServer\NSClientServer.cpp:254: Invalid password (123456).

and if you can see I made check without checkMem, so it is something wrong wih NSCclient

[jdalrymple]

There is a lot of confusion here. Regarding check_nt:

Code: Select all

root@expserver:~# /usr/lib/nagios/plugins/check_nt -H 192.168.3.252 -p 12489 -v USEDDISKSPACE -d SHOWALL -l c -s D28Ak37AS
c:\ - total: 35.45 Gb - used: 11.56 Gb (33%) - free 23.89 Gb (67%) | 'c:\ Used Space'=11.56Gb;0.00;0.00;0.00;35.45
root@expserver:~#

Everything looks fine
Without -s

Code: Select all

root@expserver:~# /usr/lib/nagios/plugins/check_nt -H 192.168.3.252 -p 12489 -v USEDDISKSPACE -d SHOWALL -l c
NSClient - ERROR: Invalid password.

check_nt simply doesn't work without a password. It has to be defined. I don't see the problem here. We need to see your command definition for "check_nt2" if you're still having issues.

Regarding check_nrpe (only used for your memory check):

Code: Select all

root@expserver:~#  /usr/lib/nagios/plugins/check_nrpe -H 192.168.3.252 -n -u -p 5666 -t 60 -c -a MaxWarn=95% MaxCrit=99% type=physical
CHECK_NRPE: Received 0 bytes from daemon.  Check the remote server logs for error messages.

This is because of the -n flag. Note that check_nrpe DOES NOT use the -s flag, so the above command looks OK other than the -n. Show us the exact output when you run the literal command /usr/lib/nagios/plugins/check_nrpe -t 60 -H 192.168.3.252 -c checkMem -a MaxWarn=95% MaxCrit=99% type=physical from the Nagios server command line.

[mangirdas]

Ok, so I tried this command:

Code: Select all

root@expserver:~# /usr/lib/nagios/plugins/check_nrpe -t 60 -H 192.168.3.252 -n checkMem -a MaxWarn=95% MaxCrit=99% type=physical
CHECK_NRPE: Received 0 bytes from daemon.  Check the remote server logs for error messages.

My error:

Code: Select all

2015-10-06 08:41:54: e:c:\build\nscp\include\socket/connection.hpp:236: Failed to establish secure connection: unknown protocol

My check_nt2! commands:

Code: Select all

###############################################################################
# WINDOWS.CFG - SAMPLE CONFIG FILE FOR MONITORING A WINDOWS MACHINE
#
# Last Modified: 05-20-2015
#
# NOTES: This config file assumes that you are using the sample configuration
#	 files that get installed with the Nagios quickstart guide.
#
###############################################################################




###############################################################################
###############################################################################
#
# HOST DEFINITIONS
#
###############################################################################
###############################################################################

# Define a host for the Windows machine we'll be monitoring
# Change the host_name, alias, and address to fit your situation

define host{
	use		windows-server	; Inherit default values from a template
	host_name	Naugarduko_Gateway	; The name we're giving to this host
	alias		Naugardukas	; A longer name associated with the host
	address		192.168.3.252	; IP address of the host
	}




###############################################################################
###############################################################################
#
# HOST GROUP DEFINITIONS
#
###############################################################################
###############################################################################


# Define a hostgroup for Windows machines
# All hosts that use the windows-server template will automatically be a member of this group



###############################################################################
###############################################################################
#
# SERVICE DEFINITIONS
#
###############################################################################
###############################################################################





# Create a service for monitoring the uptime of the server
# Change the host_name to match the name of the host you defined above

define service{
	use			generic-service
	host_name		Naugarduko_Gateway
	service_description	Uptime
	check_command		check_nt2!UPTIME
	}



# Create a service for monitoring CPU load
# Change the host_name to match the name of the host you defined above

define service{
	use			generic-service
	host_name		Naugarduko_Gateway
	service_description	CPU Load
	check_command		check_nt2!CPULOAD!-l 5,80,90
	notes_url http://192.168.3.6/nagiosgraph/cgi-bin/show.cgi?host=Naugarduko_Gateway&service=CPU%20Load&db=5%20min%20avg%20Load%2Ccrit&db=5%20min%20avg%20Load%2Cdata&db=5%20min%20avg%20Load%2Cmax&db=5%20min%20avg%20Load%2Cmin&db=5%20min%20avg%20Load%2Cwarn&period=day,week,month,year&expand_period=day,week,month,year 
	}



# Create a service for monitoring memory usage
# Change the host_name to match the name of the host you defined above

define service{
	use			generic-service
	host_name		Naugarduko_Gateway
	service_description	Memory Usage
	check_command		checkmem16
	notes_url http://192.168.3.6/nagiosgraph/cgi-bin/show.cgi?host=Naugarduko_Gateway&service=Memory%20Usage&db=physical%20memory%20%25%2Ccrit&db=physical%20memory%20%25%2Cdata&db=physical%20memory%20%25%2Cwarn&db=physical%20memory%2Ccrit&db=physical%20memory%2Cdata&db=physical%20memory%2Cmax&db=physical%20memory%2Cmin&db=physical%20memory%2Cwarn&period=day,week,month,year&expand_period=day,week,month,year
	}



# Create a service for monitoring C:\ disk usage
# Change the host_name to match the name of the host you defined above

define service{
	use			generic-service
	host_name		Naugarduko_Gateway
	service_description	C:\ Drive Space
	check_command		check_nt2!USEDDISKSPACE!-l c -w 95 -c 97
	}

define service{
	use			generic-service
	host_name		Naugarduko_Gateway
	service_description	D:\ Drive Space
	check_command		check_nt2!USEDDISKSPACE!-l d -w 95 -c 97
		}




# Create a service for monitoring the W3SVC service
# Change the host_name to match the name of the host you defined above



# Create a service for monitoring the Explorer.exe process
# Change the host_name to match the name of the host you defined above

define service{
	use			generic-service
	host_name		Naugarduko_Gateway
	service_description	Slave
	check_command		check_nt2!PROCSTATE!-d SHOWALL -l Slave.exe
	}
define service{
	use			generic-service
	host_name		Naugarduko_Gateway
	service_description	Kerio
	check_command		check_nt2!PROCSTATE!-d SHOWALL -l WinRoute.exe
	}

[jdalrymple]

Please drop the -n as I indicated.

Regarding check_nrpe (only used for your memory check):

Code: Select all

        root@expserver:~#  /usr/lib/nagios/plugins/check_nrpe -H 192.168.3.252 -n -u -p 5666 -t 60 -c -a MaxWarn=95% MaxCrit=99% type=physical
        CHECK_NRPE: Received 0 bytes from daemon.  Check the remote server logs for error messages.

This is because of the -n flag.

root@expserver:~# /usr/lib/nagios/plugins/check_nrpe -t 60 -H 192.168.3.252 -n checkMem -a MaxWarn=95% MaxCrit=99% type=physical

[mangirdas]

Code: Select all

root@expserver:~# /usr/lib/nagios/plugins/check_nrpe -t 60 -H 192.168.3.252 checkMem -a MaxWarn=95% MaxCrit=99% type=physical
CHECK_NRPE: Error - Could not complete SSL handshake.

all my checks commands doesnt work than I delete -n

Code: Select all

root@expserver:~# /usr/lib/nagios/plugins/check_nrpe -H 192.168.3.252 -t 60
CHECK_NRPE: Error - Could not complete SSL handshake.

in client

Code: Select all

# If you want to fill this file with all avalible options run the following command:
#   nscp settings --generate --add-defaults --load-all
# If you want to activate a module and bring in all its options use:
#   nscp settings --activate-module <MODULE NAME> --add-defaults
# For details run: nscp settings --help


; Undocumented section
[/modules]

; CheckDisk - CheckDisk can check various file and disk related things. The current version has commands to check Size of hard drives and directories.
CheckDisk = 1

; Event log Checker. - Check for errors and warnings in the event log. This is only supported through NRPE so if you plan to use only NSClient this wont help you at all.
CheckEventLog = 1

; Check External Scripts - A simple wrapper to run external scripts and batch files.
CheckExternalScripts = 1

; Helper function - Various helper function to extend other checks. This is also only supported through NRPE.
CheckHelpers = 1

; Check NSCP - Checkes the state of the agent
CheckNSCP = 1

; CheckSystem - Various system related checks, such as CPU load, process state, service state memory usage and PDH counters.
CheckSystem = 1

; NRPE server - A simple server that listens for incoming NRPE connection and handles them.
NRPEServer = 1

; NSClient server - A simple server that listens for incoming NSClient (check_nt) connection and handles them. Although NRPE is the preferred method NSClient is fully supported and can be used for simplicity or for compatibility.
NSClientServer = 1


; Undocumented section
[/settings/default]

; ALLOWED HOSTS - A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges.
allowed hosts = 127.0.0.1,192.168.3.6

; PASSWORD - Password used to authenticate againast server
password = D28Ak37AS



; To avoid memory usage check error in nagios.
[/settings/NRPE/server]
port=5666
use ssl=0
allow arguments=1




; A list of aliases available. An alias is an internal command that has been "wrapped" (to add arguments). Be careful so you don't create loops (ie check_loop=check_a, check_a=check_loop)
[/settings/external scripts/alias]

; alias_cpu - Alias for alias_cpu. To configure this item add a section called: /settings/external scripts/alias/alias_cpu
alias_cpu = checkCPU warn=80 crit=90 time=5m time=1m time=30s

; alias_cpu_ex - Alias for alias_cpu_ex. To configure this item add a section called: /settings/external scripts/alias/alias_cpu_ex
alias_cpu_ex = checkCPU warn=$ARG1$ crit=$ARG2$ time=5m time=1m time=30s

; alias_disk - Alias for alias_disk. To configure this item add a section called: /settings/external scripts/alias/alias_disk
alias_disk = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll FilterType=FIXED

; alias_disk_loose - Alias for alias_disk_loose. To configure this item add a section called: /settings/external scripts/alias/alias_disk_loose
alias_disk_loose = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll FilterType=FIXED ignore-unreadable

; alias_event_log - Alias for alias_event_log. To configure this item add a section called: /settings/external scripts/alias/alias_event_log
alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -2d AND severity NOT IN ('success', 'informational') AND source != 'SideBySide'" truncate=800 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"

; alias_file_age - Alias for alias_file_age. To configure this item add a section called: /settings/external scripts/alias/alias_file_age
alias_file_age = checkFile2 filter=out "file=$ARG1$" filter-written=>1d MaxWarn=1 MaxCrit=1 "syntax=%filename% %write%"

; alias_file_size - Alias for alias_file_size. To configure this item add a section called: /settings/external scripts/alias/alias_file_size
alias_file_size = CheckFiles "filter=size > $ARG2$" "path=$ARG1$" MaxWarn=1 MaxCrit=1 "syntax=%filename% %size%" max-dir-depth=10

; alias_mem - Alias for alias_mem. To configure this item add a section called: /settings/external scripts/alias/alias_mem
alias_mem = checkMem MaxWarn=80% MaxCrit=90% ShowAll=long type=physical type=virtual type=paged type=page

; alias_process - Alias for alias_process. To configure this item add a section called: /settings/external scripts/alias/alias_process
alias_process = checkProcState "$ARG1$=started"

; alias_process_count - Alias for alias_process_count. To configure this item add a section called: /settings/external scripts/alias/alias_process_count
alias_process_count = checkProcState MaxWarnCount=$ARG2$ MaxCritCount=$ARG3$ "$ARG1$=started"

; alias_process_hung - Alias for alias_process_hung. To configure this item add a section called: /settings/external scripts/alias/alias_process_hung
alias_process_hung = checkProcState MaxWarnCount=1 MaxCritCount=1 "$ARG1$=hung"

; alias_process_stopped - Alias for alias_process_stopped. To configure this item add a section called: /settings/external scripts/alias/alias_process_stopped
alias_process_stopped = checkProcState "$ARG1$=stopped"

; alias_sched_all - Alias for alias_sched_all. To configure this item add a section called: /settings/external scripts/alias/alias_sched_all
alias_sched_all = CheckTaskSched "filter=exit_code ne 0" "syntax=%title%: %exit_code%" warn=>0

; alias_sched_long - Alias for alias_sched_long. To configure this item add a section called: /settings/external scripts/alias/alias_sched_long
alias_sched_long = CheckTaskSched "filter=status = 'running' AND most_recent_run_time < -$ARG1$" "syntax=%title% (%most_recent_run_time%)" warn=>0

; alias_sched_task - Alias for alias_sched_task. To configure this item add a section called: /settings/external scripts/alias/alias_sched_task
alias_sched_task = CheckTaskSched "filter=title eq '$ARG1$' AND exit_code ne 0" "syntax=%title% (%most_recent_run_time%)" warn=>0

; alias_service - Alias for alias_service. To configure this item add a section called: /settings/external scripts/alias/alias_service
alias_service = checkServiceState CheckAll

; alias_service_ex - Alias for alias_service_ex. To configure this item add a section called: /settings/external scripts/alias/alias_service_ex
alias_service_ex = checkServiceState CheckAll "exclude=Net Driver HPZ12" "exclude=Pml Driver HPZ12" exclude=stisvc

; alias_up - Alias for alias_up. To configure this item add a section called: /settings/external scripts/alias/alias_up
alias_up = checkUpTime MinWarn=1d MinWarn=1h

; alias_updates - Alias for alias_updates. To configure this item add a section called: /settings/external scripts/alias/alias_updates
alias_updates = check_updates -warning 0 -critical 0

; alias_volumes - Alias for alias_volumes. To configure this item add a section called: /settings/external scripts/alias/alias_volumes
alias_volumes = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll=volumes FilterType=FIXED

; alias_volumes_loose - Alias for alias_volumes_loose. To configure this item add a section called: /settings/external scripts/alias/alias_volumes_loose
alias_volumes_loose = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll=volumes FilterType=FIXED ignore-unreadable 

; default - Alias for default. To configure this item add a section called: /settings/external scripts/alias/default
default = 

[jdalrymple]

The nsclient in your first post does not have:

Code: Select all

use ssl=0

Do double check it.