SSH generic -common

[n8860104460]

Hi Team,

we have configured service with the name of "SSH generic -common" to check SSH connection between server and nagios its working for all servers but we have few server which are added in ACL list and we are not able to do SSH to that servers and we are getting error "CRITICAL - Socket timeout after 60 seconds"

Note :

we are able to Ping server from collector server
Port No 5666 is open
As that server are added in ACL list so we cannot do SSH
Apart from this service all services are working fine.

Please advice me on this issue or let me know if you required any other details to troubleshoot it.

[avandemore]

In order for check_ssh to succeed, ssh connections must be successful between the Nagios or NRPE server and the destination ssh server.

You can setup a remote NRPE system and have Nagios run the check from there if you like:

https://assets.nagios.com/downloads/nag ... _Agent.pdf

Please confirm you can ssh to the target system from the system you are running the check from.

[dwhitfield]

What @avandemore said is correct, but I'm not sure it solves your issue because I don't understand your issue.

What exactly are you trying to check? What's the point of checking an ssh connection that you know won't work? I think I'm missing something.

Do you just want to exclude the ACL servers from the check?

[n8860104460]

In order for check_ssh to succeed, ssh connections must be successful between the Nagios or NRPE server and the destination ssh server.

You can setup a remote NRPE system and have Nagios run the check from there if you like:

https://assets.nagios.com/downloads/nag ... _Agent.pdf

Please confirm you can ssh to the target system from the system you are running the check from.

@whitfield
you are correct SSH connection should be established but due to ACL we are not able to do SSH i am looking a way if we can skip this check using any argument or any other way and this service will come in OK state Removing the service would be the last option.

NOTE:

These servers are in XGI (within domain) but using EPN Server (out of domain and to connect with EPN we use JUNBOX servers) we are able to do SSH
now the point is if we use EPN Configuration then other services will comes in critical state and if use XGI configuration then SSH comes in Critical state.

[dwhitfield]

Just make two different host groups: https://assets.nagios.com/downloads/nag ... #hostgroup

You could also do this with service groups: https://assets.nagios.com/downloads/nag ... rvicegroup

Just remove the ssh check from the group you don't want checked. Does that make sense?