NRPE Agent

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
matson-itops
Posts: 133
Joined: Wed Nov 18, 2015 11:19 pm

NRPE Agent

Post by matson-itops »

Can someone kindly point me to documentation ?
I would like a like of NRPE agents compatiable with NagiosXI 5.8.1

I have a nagiosxi 5.8.1 on redhat 8 and am running into issues talking to a box with nrpe v2.15
The error I get is "CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake".

I have no problems talking to another box with INRPE v3.2.1
benjaminsmith
Posts: 5324
Joined: Wed Aug 22, 2018 4:39 pm
Location: saint paul

Re: NRPE Agent

Post by benjaminsmith »

Hi @matson-itops,

That's a common issue, and we have a kb article to help troubleshoot it.

NRPE - CHECK_NRPE: Error - Could Not Complete SSL Handshake

Check the allowed hosts setting in nrpe.cfg first and then make sure you have SSL compiled. Let us know if you're able to resolve it.

Benjamin
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.

Be sure to check out our Knowledgebase for helpful articles and solutions!
matson-itops
Posts: 133
Joined: Wed Nov 18, 2015 11:19 pm

Re: NRPE Agent

Post by matson-itops »

We gave up and upgraded the nagios agent.

But now have a new issue
we're installing version 4.0.2 install is failing on redhat 7.9 boxes for A-subcomponents / nagiosplugins
when using Nagios Linux Agent Installer Script v2.1.1 from you guys we get the following error :

Making install in plugins
make[1]: Entering directory `/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins'
/bin/sh ../libtool --tag=CC --mode=link gcc -DNP_VERSION='"2.3.3"' -g -O2 -L. -L/usr/local/lib -o check_http check_http.o libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libtool: link: gcc -DNP_VERSION=\"2.3.3\" -g -O2 -o check_http check_http.o -L. -L/usr/local/lib libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libnpcommon.a(sslutils.o): In function `np_net_ssl_init_with_hostname_version_and_cert':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:150: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:176: undefined reference to `SSL_CTX_set_options'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:107: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:154: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:155: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:156: undefined reference to `OPENSSL_init_crypto'
libnpcommon.a(sslutils.o): In function `np_net_ssl_check_cert_real':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:282: undefined reference to `X509_getm_notAfter'
collect2: error: ld returned 1 exit status
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: NRPE Agent

Post by ssax »

Do you have openssl-devel installed? If not, try installing it first and then run it again:

Code: Select all

yum install openssl-devel
If it is already installed, send the output of this command on the remote system:

Code: Select all

rpm -qa | grep openssl
Thank you!
matson-itops
Posts: 133
Joined: Wed Nov 18, 2015 11:19 pm

Re: NRPE Agent

Post by matson-itops »

tis already installed

[dummy@xxx ~]$ rpm -qa | grep openssl
openssl-libs-1.0.2k-21.el7_9.x86_64
openssl-devel-1.0.2k-21.el7_9.x86_64
openssl-1.0.2k-21.el7_9.x86_64
User avatar
vtrac
Posts: 903
Joined: Tue Oct 27, 2020 1:35 pm

Re: NRPE Agent

Post by vtrac »

Hi,
I think you might have TWO openssl installed.

you should be using the "-I/usr/include" and "-L/usr/lib" not "-I/usr/local/include" and "-l/usr/local/lib" during the make.

Can you please check:

Code: Select all

ls -l /usr/local/include/ssl.h

ls -l /usr/include/ssl.h
Also, please do:

Code: Select all

ls -l /usr/local/lib/
I'm thinking those under "/usr/local/include" and "/usr/local/lib" should be removed since they might belong to some python modules.

One thing you could try, if you don't want to remove those two folders is to rename them temporary:

Code: Select all

mv -f /usr/local/include /usr/local/include_keep

mf -f /usr/local/lib/ /usr/local/lib_keep
Now, re-run the install with new "./configure" to pull in correct "/usr/include" and "/usr/lib" path.
So, let clean up the old "linux-nrpe-agent" under "/tmp":

Code: Select all

cd /tmp

rm -rf linux-nrpe-agent

wget https://assets.nagios.com/downloads/nagiosxi/agents/linux-nrpe-agent.tar.gz

tar xzf linux-nrpe-agent.tar.gz

cd linux-nrpe-agent

./fullinstall
Please upload the install.log when completed, only if there is issue!!


Regards,
Vinh
Locked