Nagios Support Forum

Wait a minute. How do I run NRPE without SSL? That was my original question. I thought the -n option of check_nrpe did that, but I still got the error.

You need to start the nrpe daemon without ssl and use the agent without ssl. -n should be added in /etc/xinetd.d/nrpe server_args line, if you are not using xinetd you will need to change similar options in /etc/init.d/nrpe. Then yes use the -n flag with the check_nrpe plugin also. They both must match otherwise it will not work.

OK. I don't even find a /etc/init.d/nrpe file. Clearly this install did not go properly. Part of the problem is that this is an older RHEL4 install. Yum, which checks dependencies, was not available when it was originally setup. All I have to work with is wget and rpm. I installed the nagios agent by downloading rpm packages and I suspect that dependencies were missed. I am convinced that I need to start over by installing yum, which will check for dependencies. Then try reinstalling the nagios agent with yum, which should pull in needed dependencies. My plan is to remove the host and services associated with this how from the server. Then remove all of the files on the client host related to nagios. Then get yum installed and start over. Does this sound like a good approach to you?

That sounds like an excellent approach. Sorry you had to go through the rpm dependency fun... it's not so fun.

Thanks. I guess that's why they developed yum.

Let us know how it went.

I am investigating the SSL setup and have noticed some things. First, the RedHat server is not running apache, but it is running TomCat. This is a requirement of the application it is running (an ERP ssytem). I also noticed something else. In the directory /opt/rseserver, there is a file called ssl.properties. In this file there is an option enable_ssl=false. Does this affect the Nagios NRPE connection? Is RSE involved in the NRPE function? It looks like this file is currently setup to disable SSL when there is an SSL daemon present. Currently there is not an SSL daemon present, but I have found instructions on enabling it. This may be outside the scope of Nagios support, but I am interested in your opinion on it.

rseserver should have nothing to do with nrpe. nrpe is either run as a standalone daemon or as a sub-daemon run from inetd/xinetd.

As I get into this, I am finding that this isn't even a standard Tomcat implementation. I am concerned that I may affect the ERP system's functionality. Is there a way to avoid this SSL issue altogether by not using NRPE and using another method for setting up monitoring on this RHEL4 host? Something simpler maybe. This is inside a private network, and the ERP hoat does not access the web.

I would suggest monitoring via ssh
http://library.nagios.com/library/produ ... -using-ssh