Encrypt data between client and server nagios xi

[Naveed]

Hello Nagios Experts,


kindly help me out, its getting hot for now.

My objective is as follows:

1-Windows server monitoring check_nrpe with naigos xi (linux).
2-enable encryption between clients and nagios server.

I would appreciate it.

Thank you very much!

[rkennedy]

NRPE encrypts by default so you should be fine, we have already shown you how to do so. Can you please specify what questions you have at this point?

[lmiltchev]

Just to add to what rkennedy said, you will need to make sure you have the following line in the nsclient.ini file, under the [/settings/NRPE/server] section:

Code: Select all

use ssl = 1

Restart the NSClient++ service so that changes can take effect.

[Naveed]

Thank you everyone for all of your suggestions!

Yes in linux check_nrpe communication is always encrypted. But I am facing problem by installing in windows.

I have installed nsclient++ 0.4.4 version with check_nrpe plugin.

Client does not make connection with nagios server
NRPEServer = 1

But as I add NSClientServer = 1, its start communicating with nagios server.

Moreover I have also enabled use_ssl = 1 but found entries in logs as follows:

Failed to established secure connection, Short read 219

Need your suggestions.

Hope so you get to know my problem now?

Thank you!

[rkennedy]

Are you using check_nt or check_nrpe?

[Naveed]

Thank you for your reply.

I am using check_nrpe

Please suggest.

[Box293]

The enabling NRPE article here should help you get it working:

https://support.nagios.com/kb/article.php?id=118

If it's not working after this, please let us know what errors you are getting and post your nsclient.ini file.

[Naveed]

Thank you Box293

I have successfully installed nrpe and checked from nagios core server as well by following command

/usr/local/nagios/libexec/check_nrpe -H client Ip address

I (0.4.4.19 2015-12-08) seem to be doing fine...

I have seen the following line in nsclient.log file

error:c:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: CA not found: C:\Program Files\NSClient++/security/ca.pem (generating a default CA)

Suggest please.

Thank you!

[Naveed]

Further adding this...

After installing nrpe on windows machine, it looks good from server side.

but my machine monitoring in critical state.

connect to address 192.168.17.135 and port 12489: Connection refused

[rkennedy]

Thank you Box293

I have successfully installed nrpe and checked from nagios core server as well by following command

/usr/local/nagios/libexec/check_nrpe -H client Ip address

I (0.4.4.19 2015-12-08) seem to be doing fine...

I have seen the following line in nsclient.log file

error:c:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: CA not found: C:\Program Files\NSClient++/security/ca.pem (generating a default CA)

Suggest please.

Thank you!

It generated a CA for you, as you did not specify one.

Further adding this...

After installing nrpe on windows machine, it looks good from server side.

but my machine monitoring in critical state.

connect to address 192.168.17.135 and port 12489: Connection refused

This is because you're using check_nt, you said you wanted to use check_nrpe - you may need to restructure your check_commands accordingly if you're looking for the encryption part of it.

check_nrpe will use 5666.
check_nt will use 12489.