Nagios on XenServer 5.5

[brianweeks22]

Good Morning,

I have nagios set-up on a xenserver host and receive this w/in Nagios for diskspace and raid.

CHECK_NRPE: Error - Could not complete SSL handshake.

nagios version 3.2.3

using nrpe on xen servers.


Im sure this is just a minor configuration issue.. any help would be greatly appreciated!

Thanks

[sreinhardt]

Did you compile on both systems with ssl enabled? This would be done with ./configure --enable-ssl. Otherwise have you checked the configuration to be sure the hosts are allowed on the remote system side?

nano /usr/local/nagios/etc/nrpe.cfg

Code: Select all

Change:
allowed_hosts=127.0.0.1 

To:
allowed_hosts=127.0.0.1,<nagios server ip>

nano /etc/xinetd.d/nrpe

Code: Select all

Change:
only_from = 127.0.0.1

To:
only_from = 127.0.0.1 <Nagios server ip>

[brianweeks22]

Thanks for the reply..

I have 2 other xenservers utilizing nagios and reporting just fine.. but I am guessing the SSL is the issue

will running ./configure --enable-ssl enable ssl on the xenserver w/o interrupting production?


Thank You

Brian

[sreinhardt]

Configure and installing should not effect the host machine its self. However it will stop the nrpe service while it installs.

[brianweeks22]

Im sorry I dont understand what you mean when you say installing? will enabling SSL just enable the default xen certificate? or is there an install that I need to do as well?

[sreinhardt]

You are just making and installing nrpe again, as it was not configured with ssl. The full commands are :

cd /tmp/nrpe-2.14
./configure --enable-ssl
make all
make install

This will overwrite existing nrpe binaries and correctly enable you to have ssl connections with it. It does not work off of internal certificates or have much to do with the xen server files itself.

[brianweeks22]

I took this project over, and now see that there are no files w/in /tmp/ for nrpe

will i just need to DL the rmp package and place there?

[sreinhardt]

Actually you will need the tar.gz file found here. Just run the following commands, then finish with the ones above:

Code: Select all

wget http://sourceforge.net/projects/nagios/files/nrpe-2.x/nrpe-2.14/nrpe-2.14.tar.gz/download
tar -xzf nrpe-2.14.tar.gz
cd nrpe-2.14
[run rest of commands from configure on]

[brianweeks22]

when I run ./configure --enable-ssl i receive this

[root@XenHost8 nrpe-2.14]# ./configure --enable-ssl
bash: ./configure: Permission denied


I AM running this as root...

[brianweeks22]

just changed the permissions on configure and now received this

[root@XenHost8 nrpe-2.14]# ./configure --enable-ssl
checking for a BSD-compatible install... /usr/bin/install -c
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking for gcc... no
checking for cc... no
checking for cl.exe... no
configure: error: in `/opt/nrpe-2.14/nrpe-2.14':
configure: error: no acceptable C compiler found in $PATH
See `config.log' for more details.
[root@XenHost8 nrpe-2.14]#