Page 2 of 4
Re: Service Status Crticial after Client Install
Posted: Thu Apr 24, 2014 11:54 am
by Constance
Output:
[root@istation libexec]# /usr/local/nagios/libexec/check_nrpe -H 168.25.19.110 -n nmap 168.25.19.110 -p 5666
CHECK_NRPE: Socket timeout after 10 seconds.
Re: Service Status Crticial after Client Install
Posted: Thu Apr 24, 2014 12:11 pm
by tmcdonald
We are asking you to run two separate commands and you have put them all on one line.
In your Nagios XI server's terminal, type out the following on the command line:
Code: Select all
/usr/local/nagios/libexec/check_nrpe -H 168.25.19.110 -n
Then press the Enter key.
Then type this out in the same terminal:
and press the Enter key again.
Once you have done these two things, copy the output and paste the results here.
Re: Service Status Crticial after Client Install
Posted: Fri Apr 25, 2014 9:55 am
by Constance
Thank you for clarifying.
On the first command:
[root@istation ~]# /usr/local/nagios/libexec/check_nrpe -H 168.25.19.110 -n
CHECK_NRPE: Socket timeout after 10 seconds.
On the second command:
[root@istation ~]# nmap 168.25.19.110 -p 5666
Starting Nmap 5.51 ( http://nmap.org ) at 2014-04-25 14:54 UTC
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 3.07 seconds
[root@istation ~]#
Re: Service Status Crticial after Client Install
Posted: Fri Apr 25, 2014 10:07 am
by slansing
Looks like whatever system is attached to that address is either down, or blocking attempts to see its status, as nmap says. You will need to figure this out before we help you further on the Nagios related end of things.
Re: Service Status Crticial after Client Install
Posted: Fri Apr 25, 2014 11:48 am
by Constance
I think I listed the incorrect IP address for the server. As the server is not down. The server in question has an internal and external IP and I was listing the external. So I tried the commands again with the other IP address and got the following.
1st command:
[root@istation ~]# /usr/local/nagios/libexec/check_nrpe -H 10.4.10.110 -n
CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.
2nd command:
[root@istation ~]# nmap 10.4.10.110 -p 5666
Starting Nmap 5.51 ( http://nmap.org ) at 2014-04-25 16:46 UTC
Nmap scan report for 10.4.10.110
Host is up (0.00023s latency).
PORT STATE SERVICE
5666/tcp open nrpe
MAC Address: 00:50:56:02:00:55 (VMware)
Nmap done: 1 IP address (1 host up) scanned in 0.19 seconds
What does this tell you?
Thank you!
Constance
Re: Service Status Crticial after Client Install
Posted: Fri Apr 25, 2014 11:50 am
by slansing
Okay, so we have the correct address now. So lets try running that command again, without '-n':
Code: Select all
/usr/local/nagios/libexec/check_nrpe -H 10.4.10.110
Re: Service Status Crticial after Client Install
Posted: Fri Apr 25, 2014 12:00 pm
by Constance
Sorry for that mix up.
Here's the results of the new command:
[root@istation ~]# /usr/local/nagios/libexec/check_nrpe -H 10.4.10.110
CHECK_NRPE: Error - Could not complete SSL handshake.
I followed the instructions on Nagios for installing the client agent on the server to be monitored to the letter, but could there be something else I may have missed?
This is a CAS (Central Authentication Service) server if that makes a difference.
Thank you,
Constance
Re: Service Status Crticial after Client Install
Posted: Fri Apr 25, 2014 1:13 pm
by slansing
Okay, can you upload your nrpe.cfg or xinetd nrpe config if you are using xinetd from the remote host? And let us know what your XI server's address is?
Code: Select all
/usr/local/nagios/etc/nrpe.cfg
/etc/xinetd.d/nrpe.cfg
Re: Service Status Crticial after Client Install
Posted: Fri Apr 25, 2014 2:43 pm
by Constance
Both are attached. However, the site would not let me attach the nrpe file from the /etc/ directory due to the file extension, so I made it a .txt file.
Thank you!
Re: Service Status Crticial after Client Install
Posted: Mon Apr 28, 2014 9:37 am
by slansing
You need to add the XI server's address in the allowed_hosts section. It looks like you may be using xinetd as there is a config file for NRPE there, so make this change on the only_from line, you should separate 127.0.0.1 and your XI server's address with one space. Once you have added the xi server's address, restart xinetd: