Check_nrpe socket time out after 10 seconds for windows host

[rohithroki]

yes all the other services are configured with check_nt.

Will try installing the new nsclient ++ version and update you the status

[scottwilkerson]

Sounds good, let us know if you run into problems getting nsclient++ working with Nagios

[rohithroki]

Hi All tried installing the latest nsclient version but still getting the same error.

Attaching the details for your reference.


TCP 10.178.10.19:5666 10.211.26.68:60962 CLOSE_WAIT
TCP 10.178.10.19:5666 10.211.26.68:60964 CLOSE_WAIT
TCP 10.178.10.19:5666 10.211.26.68:60984 CLOSE_WAIT
TCP 10.178.10.19:5666 10.211.26.68:60990 CLOSE_WAIT
TCP [::]:5666 [::]:0 LISTENING

[rkennedy]

It looks good, I took a copy of your config file, and it's at least listening on 5666. However, I'm seeing this error now -

Code: Select all

2016-06-21 10:04:33: error:c:\source\nscp\include\socket/connection.hpp:240: Seems we cant agree on SSL: no shared cipher
2016-06-21 10:04:33: error:c:\source\nscp\include\socket/connection.hpp:241: PLease review the legacy as well as ssl options in settings.

Can you show us the actual definition file for those two failing service checks? Additionally, do you see anything in your nsclient.log file?

[rohithroki]

Hi All,

We have defined these two services in the check commands and the command definitions are given below.

$USER1$/check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckMEM -a MaxWarn=$ARG1$% MaxCrit=$ARG2$% ShowAll type=physical
$USER1$/check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckMEM -a MaxWarn=$ARG1$% MaxCrit=$ARG2$% ShowAll type=paged

Also I do not find any error in the Nsclient log file

[tmcdonald]

What check_nrpe version are you using? There were some changes in the 3.0 branch to support more SSL options, so NSClient might be taking advantage of those, and check_nrpe needs to be updated to match.

Code: Select all

[root@localhost libexec]# ./check_nrpe -V

NRPE Plugin for Nagios
Copyright (c) 1999-2008 Ethan Galstad ([email protected])
Version: 3.0-beta1
Last Modified: 04-21-2016
License: GPL v2 with exemptions (-l for more info)
SSL/TLS Available: OpenSSL 0.9.6 or higher required

https://github.com/NagiosEnterprises/nr ... DME.SSL.md

[ssax]

Please edit your nsclient.ini and change these to the code below under your [/settings/NRPE/server] section:

Code: Select all

;ssl options = no-sslv2,no-sslv3

verify mode = none
; ALLOW INSECURE CHIPHERS and ENCRYPTION - Only enable this if you are using legacy check_nrpe client.
insecure = true

Restart the nsclient service, if it still doesn't work, try it without SSL:

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H X.X.X.X -n

Let us know the results.

[rohithroki]

I have made the recommend changes in the Nsclient configuration file(attached screenshot below).

Also I have run the command but still getting the same error (with ssl and without ssl).

/usr/local/nagios/libexec/check_nrpe -H X.X.X.X
CHECK_NRPE: Socket timeout after 10 seconds.

/usr/local/nagios/libexec/check_nrpe -H X.X.X.X -n
CHECK_NRPE: Socket timeout after 10 seconds.

I can see some error in the log file.

2016-06-21 18:07:59: error:D:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: Certificate not found: C:\Program Files\NSClient++/security/certificate.pem (generating a default certificate)
2016-06-21 18:07:59: error:D:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: CA not found: C:\Program Files\NSClient++/security/ca.pem (generating a default CA)
2016-06-24 14:12:48: error:D:\source\nscp\include\socket/connection.hpp:137: Failed to read data: The I/O operation has been aborted because of either a thread exit or an application request
2016-06-24 14:12:48: error:D:\source\nscp\include\socket/connection.hpp:137: Failed to read data: The I/O operation has been aborted because of either a thread exit or an application request
2016-06-24 14:12:48: error:D:\source\nscp\include\socket/connection.hpp:137: Failed to read data: The I/O operation has been aborted because of either a thread exit or an application request

[tgriep]

If you are still using the newer version of the NSClient++, the config file is called nsclient.ini, the file you posted last week, nsc.ini is the old one, are you editing the correct file on that server?

[rohithroki]

Yes, The file which I'm editing is Nsclient.ini which is the correct one and the file which I posted last week is the configuration file of older version Nsclient.