Page 2 of 3

Re: solaris-nrpe-agent

Posted: Fri Jun 08, 2012 7:49 am
by shethm
Hi there ...

when i run these command on the solaris agent .. i get this error.

# ./check_nrpe -H 143.55.165.123 -t 30 -c check_load -a '-w 15,10,5 -c 30,20,10'
CHECK_NRPE: Error - Could not complete SSL handshake.
# ./check_nrpe -H 143.55.165.123 -t 30 -c check_users -a '-w 5 -c 10'
CHECK_NRPE: Error - Could not complete SSL handshake.

Re: solaris-nrpe-agent

Posted: Fri Jun 08, 2012 9:06 am
by scottwilkerson
you should run this from the nagios machine.

If you get the same error you will want to check /etc/nagios/nrpe.cfg on the Solaris machine and make sure your Nagios server's IP address is listed next to allowed_hosts

You will need to restart nrpe on the Solaris machine for the changes to take affect

Code: Select all

svcadm restart nrpe

Re: solaris-nrpe-agent

Posted: Wed Jun 13, 2012 9:40 am
by shethm
# ./check_nrpe -H 143.55.165.123 -t 30 -c check_load -a '-w 15,10,5 -c 30,20,10'
CHECK_NRPE: Error - Could not complete SSL handshake.

Re: solaris-nrpe-agent

Posted: Wed Jun 13, 2012 9:44 am
by shethm
Hi , nrpe.cfg file has allowed_hosts configuration... it is giving me " Could not complete SSL handshake" How do i troubleshoot SSL on the unix agent side ?

Re: solaris-nrpe-agent

Posted: Wed Jun 13, 2012 10:49 am
by scottwilkerson
did you restart nrpe on the Solaris machine after making the change to the nrpe.cfg on the Solaris machine?

Code: Select all

svcadm restart nrpe

Re: solaris-nrpe-agent

Posted: Wed Jun 13, 2012 3:10 pm
by shethm
nrpe config was allready in place ... didn't do anything ... i can restart teh service.

Re: solaris-nrpe-agent

Posted: Wed Jun 13, 2012 4:02 pm
by scottwilkerson
please PM me a copy of your nrpe.cfg from the solaris machine along with the IP address of your Nagios XI server

Re: solaris-nrpe-agent

Posted: Thu Jun 14, 2012 12:19 pm
by shethm
name = nagios-c108-01.fitsuny.edu. here is the nslookup for nagios server.

please view attach for nrpe.cfg config ...

Re: solaris-nrpe-agent

Posted: Thu Jun 14, 2012 1:23 pm
by lmiltchev
It seems that you don't have the proper IP defined in the nrpe.cfg file. IN the line:

Code: Select all

allowed_hosts=
you need to put your nagios server's IP (not the client's IP!)

Is 143.55.161.51 your nagios server's IP?

After this, you should run:

Code: Select all

svcadm restart nrpe
Hope this helps.

Re: solaris-nrpe-agent

Posted: Thu Jun 14, 2012 2:49 pm
by shethm
YES, it is defined in the nrpe.cfg file ... R u looking at the same config as i am ? which line do you not see it ?



# ALLOWED HOST ADDRESSES
# This is an optional comma-delimited list of IP address or hostnames
# that are allowed to talk to the NRPE daemon. Network addresses with a bit mask
# (i.e. 192.168.1.0/24) are also supported. Hostname wildcards are not currently
# supported.
#
# Note: The daemon only does rudimentary checking of the client's IP
# address. I would highly recommend adding entries in your /etc/hosts.allow
# file to allow only the specified host to connect to the port
# you are running this daemon on.
#
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd

allowed_hosts=143.55.161.51