CHECK_NRPE: Error - Could not complete SSL handshake.

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
John12
Posts: 48
Joined: Fri Nov 11, 2011 6:16 am

CHECK_NRPE: Error - Could not complete SSL handshake.

Post by John12 »

hi..

I m running nagiosxi Virtual machine with static IP via proxypass in my host. currently i am in trial mode but will purchase the licence once my problem get solve. :-/. I can access Nagiosxi from any external IP. I need to monitor my host from nagiosxi VM running in vmware. I unable to install nagiosxi in my server directly because nagiosxi not accepting Mysql root password .. even though i given correct one. it ask password again and again.. first the password given are visible.. if i press spacebar and proceed it again ask password. this time password are nonvisible.. but both way it not accepting. So i decided to go with VMware nagiosxi VM to monitor my centos 5.7 server.

I ran setup to add host in nagiosxi VM and added my host. IP: 1.1.1.1 . downloaded agent and installed in server. but i am getting CHECK_NRPE: Error - Could not complete SSL handshake. for all services expect "ping" ..

This is my /etc/xinetd.d/nrpe in host.
# default: on
# description: NRPE (Nagios Remote Plugin Executor)
service nrpe
{
flags = REUSE
socket_type = stream
port = 5666
wait = no
user = nagios
group = nagios
server = /usr/local/nagios/bin/nrpe
server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd
log_on_failure += USERID
disable = no
only_from = 1.1.1.2 #This is my Nagios XI VM Static IP
}

Code: Select all

[root@u15830099 xinetd.d]# chkconfig --list nrpe
nrpe            on

Code: Select all

[root@u15830099 xinetd.d]# netstat -lpn |grep 5666
tcp        0      0 0.0.0.0:5666                0.0.0.0:*                   LISTEN      7183/xinetd

Code: Select all

[root@u15830099 xinetd.d]# /usr/local/nagios/libexec/check_nrpe -H 1.1.1.2
Connection refused or timed out
I don know whether The connection refused is because i m using proxypass to direct a subdomain to nagiosxi VM in my vhost.conf? If this is cause then wt i have to do...
Proxypass / http://1.1.1.2/
ProxypassReverse / http://1.1.1.2/

On my Nagios XI Virtual Machine /etc/xinetd.d/nrpe
# default: on
# description: NRPE (Nagios Remote Plugin Executor)
service nrpe
{
flags = REUSE
socket_type = stream
port = 5666
wait = no
user = nagios
group = nagios
server = /usr/local/nagios/bin/nrpe
server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd
log_on_failure += USERID
disable = no
only_from = 1.1.1.2 #This is my Nagios XI VM Static IP
}

Code: Select all

[root@nagiosxi ~]# /usr/local/nagios/libexec/check_nrpe -H 1.1.1.1
CHECK_NRPE: Error -could not complete SSL handshake
pls assist me how to correct it. i am completely lost. I am always ready to provide any other info for your kind consideration.

Awaiting response patiently.
Jack.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by scottwilkerson »

Cal you run

Code: Select all

tail -f /var/log/messages
on the client machine to see what nrpe errors might be reporting.

Thanks
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
John12
Posts: 48
Joined: Fri Nov 11, 2011 6:16 am

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by John12 »

[root@u15830099 ~]# tail -f /var/log/messages
Mar 19 00:34:27 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7332 duration=0(sec)
Mar 19 00:34:30 u15830099 gnome-screensaver-dialog: Unable to open admin password file: Permission denied
Mar 19 00:34:37 u15830099 kernel: /dev/vmmon[5802]: /dev/rtc enable interrupt failed: -515
Mar 19 00:34:55 u15830099 xinetd[8715]: START: nrpe pid=7393 from=1.1.1.1
Mar 19 00:34:55 u15830099 xinetd[7393]: FAIL: nrpe address from=1.1.1.1
Mar 19 00:34:55 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7393 duration=0(sec)
Mar 19 00:35:02 u15830099 kernel: /dev/vmmon[5802]: /dev/rtc enable interrupt failed: -515
Mar 19 00:35:05 u15830099 last message repeated 2 times
Mar 19 00:35:08 u15830099 xinetd[7401]: FAIL: nrpe address from=1.1.1.1
Mar 19 00:35:08 u15830099 xinetd[8715]: START: nrpe pid=7401 from=1.1.1.1
Mar 19 00:35:08 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7401 duration=0(sec)
Mar 19 00:35:55 u15830099 xinetd[8715]: START: nrpe pid=7402 from=1.1.1.1
Mar 19 00:35:55 u15830099 xinetd[7402]: FAIL: nrpe address from=1.1.1.1
Mar 19 00:35:55 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7402 duration=0(sec)
Mar 19 00:36:03 u15830099 kernel: /dev/vmmon[5802]: /dev/rtc enable interrupt failed: -515
John12
Posts: 48
Joined: Fri Nov 11, 2011 6:16 am

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by John12 »

Any help. awainting .. :-(
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by scottwilkerson »

It looks like your server is making the connection from the IP 1.1.1.1

If this is a valid IP for the server, you will want to add 1.1.1.1 to the only_from address in /etc/xinetd.d/nrpe
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
John12
Posts: 48
Joined: Fri Nov 11, 2011 6:16 am

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by John12 »

Thanks alot.. that really worked. my /etc/xinetd.d/nrpe in host is as allowed from = 127.0.0.1 <host ip> <nagios server ip>
Nrpe 2.12 return in my host and as well as in nagiosxi VM when i do check_nrpe.

I have added my host in NagiosXI server via "Run Monitoring wizard" . ALL configuration passes successfully but i m not able to see any service detail in service status window..

"No matching services found".

What i am doing wrong.. please assist.

Thanks,
John.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by scottwilkerson »

Are you running the Linux Server Wizard?
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
John12
Posts: 48
Joined: Fri Nov 11, 2011 6:16 am

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by John12 »

yes .. i choosen linux server wizard and centOS as my OS.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by scottwilkerson »

Are they there in the Core Config Manager?
Configure -> Core Config Manager -> Services -> Select config name from dropdown
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
John12
Posts: 48
Joined: Fri Nov 11, 2011 6:16 am

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Post by John12 »

i see the services.. i have attached screenshots of that..
Last edited by John12 on Mon May 07, 2012 2:09 am, edited 1 time in total.
Locked