AIX monitoring error

[surachai.ch]

I finished installed AIX monitoring wizard (agent and installation step from nagiosXI ) but status information display "CHECK_NRPE: Error - Could not complete SSL handshake.". Please help to solve it.

Regards,
Surachai C.

[estanley]

Surachi,

I'll give you hand to try to figure out what is the problem. I've got some questions and a few things to try.

First what version of AIX is the server you're monitoring running?

Second, can you confirm that the NRPE service is running on the server? If you're not familiar, the command would be 'lssrc -s nrpe'. You should see something like the following:

# lssrc -s nrpe
Subsystem Group PID Status
nrpe 557084 active

Third, what hosts are allowed to talk to this server? You can find that by grepping for allowed_hosts in /etc/nagios/nrpe.cfg. Is your Nagios XI server in that list of hosts?

Thanks,

Eric

[surachai.ch]

Hi,

1. what version of AIX is the server you're monitoring running?
AIX 5.3

2. #lssrc -s nrpe
0513-085 The nrpe Subsystem is not on file.
but if I did ps I got this:
#ps -aef | grep nrpe
nagios 2834450 1 0 May 30 - 0:19 /usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -n -d


3. #grep allowed_hosts /usr/local/nagios/etc/nrpe.cfg
allowed_hosts=127.0.0.1

Regards,
Surachai C.

[nscott]

Surachai,

You will need to add the Nagios XI IP to the allowed_hosts variable of the nrpe.cfg. You'll need to edit nrpe.cfg's allowed_hosts to look something like this;

allowed_hosts=127.0.0.1,<IP Address of Nagios XI>

And then you will need to restart the NRPE service.

[surachai.ch]

Still got the same error after added IP address of Nagios server to nrpe.cfg and restart NRPE service.

#grep allowed_host nrpe.cfg
allowed_hosts=127.0.0.1,10.4.15.71

Regards,
Surachai C.

[scottwilkerson]

could you please post your nrpe.cfg

Thanks

[estanley]

Surachai,

It appears that nrpe was started on AIX specifically disabling SSL (the -n flag), but you are trying to use SSL on the client side to connect to the nrpe daemon on AIX. You'll need to either enable SSL on the AIX side (remove the -n flag) or tell the client not to use SSL (add the -n flag to the check_nrpe command).

Let us know whether that works for you.

Eric

[surachai.ch]

Can monitor now after disable SSL. Thank you.

[scottwilkerson]

Excellent.