solaris-nrpe-agent

[shethm]

Hi there ...

when i run these command on the solaris agent .. i get this error.

# ./check_nrpe -H 143.55.165.123 -t 30 -c check_load -a '-w 15,10,5 -c 30,20,10'
CHECK_NRPE: Error - Could not complete SSL handshake.
# ./check_nrpe -H 143.55.165.123 -t 30 -c check_users -a '-w 5 -c 10'
CHECK_NRPE: Error - Could not complete SSL handshake.

[scottwilkerson]

you should run this from the nagios machine.

If you get the same error you will want to check /etc/nagios/nrpe.cfg on the Solaris machine and make sure your Nagios server's IP address is listed next to allowed_hosts

You will need to restart nrpe on the Solaris machine for the changes to take affect

Code: Select all

svcadm restart nrpe

[shethm]

# ./check_nrpe -H 143.55.165.123 -t 30 -c check_load -a '-w 15,10,5 -c 30,20,10'
CHECK_NRPE: Error - Could not complete SSL handshake.

[shethm]

Hi , nrpe.cfg file has allowed_hosts configuration... it is giving me " Could not complete SSL handshake" How do i troubleshoot SSL on the unix agent side ?

[scottwilkerson]

did you restart nrpe on the Solaris machine after making the change to the nrpe.cfg on the Solaris machine?

Code: Select all

svcadm restart nrpe

[shethm]

nrpe config was allready in place ... didn't do anything ... i can restart teh service.

[scottwilkerson]

please PM me a copy of your nrpe.cfg from the solaris machine along with the IP address of your Nagios XI server

[shethm]

name = nagios-c108-01.fitsuny.edu. here is the nslookup for nagios server.

please view attach for nrpe.cfg config ...

[lmiltchev]

It seems that you don't have the proper IP defined in the nrpe.cfg file. IN the line:

Code: Select all

allowed_hosts=

you need to put your nagios server's IP (not the client's IP!)

Is 143.55.161.51 your nagios server's IP?

After this, you should run:

Code: Select all

svcadm restart nrpe

Hope this helps.

[shethm]

YES, it is defined in the nrpe.cfg file ... R u looking at the same config as i am ? which line do you not see it ?



# ALLOWED HOST ADDRESSES
# This is an optional comma-delimited list of IP address or hostnames
# that are allowed to talk to the NRPE daemon. Network addresses with a bit mask
# (i.e. 192.168.1.0/24) are also supported. Hostname wildcards are not currently
# supported.
#
# Note: The daemon only does rudimentary checking of the client's IP
# address. I would highly recommend adding entries in your /etc/hosts.allow
# file to allow only the specified host to connect to the port
# you are running this daemon on.
#
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd

allowed_hosts=143.55.161.51