Page 3 of 4
Re: Encrypt data between client and server nagios xi
Posted: Fri Jun 10, 2016 11:55 am
by Naveed
Hello Nagios Experts,
kindly help me out, its getting hot for now.
My objective is as follows:
1-Windows server monitoring check_nrpe with naigos xi (linux).
2-enable encryption between clients and nagios server.
I would appreciate it.
Thank you very much!
Re: Encrypt data between client and server nagios xi
Posted: Fri Jun 10, 2016 12:44 pm
by rkennedy
NRPE encrypts by default so you should be fine, we have already shown you how to do so. Can you please specify what questions you have at this point?
Re: Encrypt data between client and server nagios xi
Posted: Fri Jun 10, 2016 12:50 pm
by lmiltchev
Just to add to what rkennedy said, you will need to make sure you have the following line in the nsclient.ini file, under the [/settings/NRPE/server] section:
Restart the NSClient++ service so that changes can take effect.
Re: Encrypt data between client and server nagios xi
Posted: Sat Jun 11, 2016 3:37 am
by Naveed
Thank you everyone for all of your suggestions!
Yes in linux check_nrpe communication is always encrypted. But I am facing problem by installing in windows.
I have installed nsclient++ 0.4.4 version with check_nrpe plugin.
Client does not make connection with nagios server
NRPEServer = 1
But as I add NSClientServer = 1, its start communicating with nagios server.
Moreover I have also enabled use_ssl = 1 but found entries in logs as follows:
Failed to established secure connection, Short read 219
Need your suggestions.
Hope so you get to know my problem now?
Thank you!
Re: Encrypt data between client and server nagios xi
Posted: Mon Jun 13, 2016 10:59 am
by rkennedy
Are you using check_nt or check_nrpe?
Re: Encrypt data between client and server nagios xi
Posted: Tue Jun 14, 2016 1:42 am
by Naveed
Thank you for your reply.
I am using check_nrpe
Please suggest.
Re: Encrypt data between client and server nagios xi
Posted: Tue Jun 14, 2016 1:56 am
by Box293
The enabling NRPE article here should help you get it working:
https://support.nagios.com/kb/article.php?id=118
If it's not working after this, please let us know what errors you are getting and post your nsclient.ini file.
Re: Encrypt data between client and server nagios xi
Posted: Tue Jun 14, 2016 4:54 am
by Naveed
Thank you Box293
I have successfully installed nrpe and checked from nagios core server as well by following command
/usr/local/nagios/libexec/check_nrpe -H client Ip address
I (0.4.4.19 2015-12-08) seem to be doing fine...
I have seen the following line in nsclient.log file
error:c:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: CA not found: C:\Program Files\NSClient++/security/ca.pem (generating a default CA)
Suggest please.
Thank you!
Re: Encrypt data between client and server nagios xi
Posted: Tue Jun 14, 2016 5:27 am
by Naveed
Further adding this...
After installing nrpe on windows machine, it looks good from server side.
but my machine monitoring in critical state.
connect to address 192.168.17.135 and port 12489: Connection refused
Re: Encrypt data between client and server nagios xi
Posted: Tue Jun 14, 2016 9:27 am
by rkennedy
Naveed wrote:Thank you Box293
I have successfully installed nrpe and checked from nagios core server as well by following command
/usr/local/nagios/libexec/check_nrpe -H client Ip address
I (0.4.4.19 2015-12-08) seem to be doing fine...
I have seen the following line in nsclient.log file
error:c:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: CA not found: C:\Program Files\NSClient++/security/ca.pem (generating a default CA)
Suggest please.
Thank you!
It generated a CA for you, as you did not specify one.
Naveed wrote:Further adding this...
After installing nrpe on windows machine, it looks good from server side.
but my machine monitoring in critical state.
connect to address 192.168.17.135 and port 12489: Connection refused
This is because you're using check_nt, you said you wanted to use check_nrpe - you may need to restructure your check_commands accordingly if you're looking for the encryption part of it.
check_nrpe will use 5666.
check_nt will use 12489.