Nagios Agent SSL/NRPE Issues

[costanza2k1]

Hi all,

I'm hoping you can help. We've deployed about 6 agents on RHEL machines and set the IP to the Nagios server. Everything works fine for hours and then I start getting this message:

CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.

&

CHECK_NRPE: Error - Could not complete SSL handshake.

I'm going to check to see the cfg if it lost the IP for some reason, but do you know why this keeps happening?

[abrist]

The SSL error is covered in the following document:
http://assets.nagios.com/downloads/nagi ... utions.pdf
Does restarting xinet temporarily fix the issue?

Code: Select all

service xinetd restart

[costanza2k1]

I've followed the documentation, when I tail the log messages this is what I get:

Code: Select all

Sep 10 13:49:52 localhost nrpe[11487]: Client request was invalid, bailing out...
Sep 10 13:49:52 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11487 duration=0(sec)
Sep 10 13:50:18 localhost xinetd[10954]: START: nrpe pid=11492 from=::ffff:10.99.104.4
Sep 10 13:50:18 localhost nrpe[11492]: Error: Request contained command arguments!
Sep 10 13:50:18 localhost nrpe[11492]: Client request was invalid, bailing out...
Sep 10 13:50:18 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11492 duration=0(sec)
Sep 10 13:50:33 localhost xinetd[10954]: START: nrpe pid=11496 from=::ffff:10.99.104.4
Sep 10 13:50:33 localhost nrpe[11496]: Error: Request contained command arguments!
Sep 10 13:50:33 localhost nrpe[11496]: Client request was invalid, bailing out...
Sep 10 13:50:33 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11496 duration=0(sec)
Sep 10 13:51:09 localhost xinetd[10954]: START: nrpe pid=11500 from=::ffff:10.99.104.4
Sep 10 13:51:09 localhost nrpe[11500]: Error: Request contained command arguments!
Sep 10 13:51:09 localhost nrpe[11500]: Client request was invalid, bailing out...
Sep 10 13:51:09 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11500 duration=0(sec)
Sep 10 13:51:26 localhost xinetd[10954]: START: nrpe pid=11502 from=::ffff:10.99.104.4
Sep 10 13:51:26 localhost xinetd[10954]: START: nrpe pid=11503 from=::ffff:10.99.104.4
Sep 10 13:51:26 localhost nrpe[11502]: Error: Request contained command arguments!
Sep 10 13:51:26 localhost nrpe[11502]: Client request was invalid, bailing out...
Sep 10 13:51:26 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11502 duration=0(sec)
Sep 10 13:51:26 localhost nrpe[11503]: Error: Request contained command arguments!
Sep 10 13:51:26 localhost nrpe[11503]: Client request was invalid, bailing out...
Sep 10 13:51:26 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11503 duration=0(sec)
Sep 10 13:51:39 localhost xinetd[10954]: START: nrpe pid=11505 from=::ffff:10.99.104.4
Sep 10 13:51:39 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11505 duration=0(sec)
Sep 10 13:51:43 localhost xinetd[10954]: START: nrpe pid=11506 from=::ffff:10.99.104.4
Sep 10 13:51:43 localhost nrpe[11506]: Error: Request contained command arguments!
Sep 10 13:51:43 localhost nrpe[11506]: Client request was invalid, bailing out...
Sep 10 13:51:43 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11506 duration=0(sec)

[abrist]

Have you enable command arguments in your nrpe file? On the remote host, run:

Code: Select all

grep dont_blame_nrpe= /usr/local/nagios/etc/nrpe.cfg

if it outputs:

Code: Select all

dont_blame_nrpe=0

You will need to change it to:

Code: Select all

dont_blame_nrpe=1

And then restart xinetd:

Code: Select all

service xinetd restart

[costanza2k1]

Thanks. Everything checked out, just restarted xinetd...waiting for the next polling cycle to see if there are any errors. Do I need to do anything on the XI side?

[slansing]

Nope, that change only needs to be made on the remote host's NRPE configuration. Let us know if everything checks out.

[costanza2k1]

For some odd reason the nrpe file only had the local host as an allowed file...fixed it to the right IP. Still no luck. Since I had to do a demo of this particular server, I went ahead and reinstalled the agent. I'm good to go now. I have 3 more servers that are having problems....I'll start those now. I really appreciate all the help you and this forum provide. It's awesome!

[abrist]

Thanks!