Page 3 of 5
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Fri Jun 17, 2016 11:59 pm
by rohithroki
yes all the other services are configured with check_nt.
Will try installing the new nsclient ++ version and update you the status
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Sat Jun 18, 2016 7:48 am
by scottwilkerson
Sounds good, let us know if you run into problems getting nsclient++ working with Nagios
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Tue Jun 21, 2016 5:27 am
by rohithroki
Hi All tried installing the latest nsclient version but still getting the same error.
Attaching the details for your reference.
TCP 10.178.10.19:5666 10.211.26.68:60962 CLOSE_WAIT
TCP 10.178.10.19:5666 10.211.26.68:60964 CLOSE_WAIT
TCP 10.178.10.19:5666 10.211.26.68:60984 CLOSE_WAIT
TCP 10.178.10.19:5666 10.211.26.68:60990 CLOSE_WAIT
TCP [::]:5666 [::]:0 LISTENING
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Tue Jun 21, 2016 10:08 am
by rkennedy
It looks good, I took a copy of your config file, and it's at least listening on 5666. However, I'm seeing this error now -
Code: Select all
2016-06-21 10:04:33: error:c:\source\nscp\include\socket/connection.hpp:240: Seems we cant agree on SSL: no shared cipher
2016-06-21 10:04:33: error:c:\source\nscp\include\socket/connection.hpp:241: PLease review the legacy as well as ssl options in settings.
Can you show us the actual definition file for those two failing service checks? Additionally, do you see anything in your nsclient.log file?
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Thu Jun 23, 2016 12:31 pm
by rohithroki
Hi All,
We have defined these two services in the check commands and the command definitions are given below.
$USER1$/check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckMEM -a MaxWarn=$ARG1$% MaxCrit=$ARG2$% ShowAll type=physical
$USER1$/check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckMEM -a MaxWarn=$ARG1$% MaxCrit=$ARG2$% ShowAll type=paged
Also I do not find any error in the Nsclient log file
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Thu Jun 23, 2016 2:33 pm
by tmcdonald
What
check_nrpe version are you using? There were some changes in the 3.0 branch to support more SSL options, so NSClient might be taking advantage of those, and
check_nrpe needs to be updated to match.
Code: Select all
[root@localhost libexec]# ./check_nrpe -V
NRPE Plugin for Nagios
Copyright (c) 1999-2008 Ethan Galstad ([email protected])
Version: 3.0-beta1
Last Modified: 04-21-2016
License: GPL v2 with exemptions (-l for more info)
SSL/TLS Available: OpenSSL 0.9.6 or higher required
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Thu Jun 23, 2016 2:42 pm
by ssax
Please edit your nsclient.ini and change these to the code below under your [/settings/NRPE/server] section:
Code: Select all
;ssl options = no-sslv2,no-sslv3
verify mode = none
; ALLOW INSECURE CHIPHERS and ENCRYPTION - Only enable this if you are using legacy check_nrpe client.
insecure = true
Restart the nsclient service, if it still doesn't work, try it without SSL:
Code: Select all
/usr/local/nagios/libexec/check_nrpe -H X.X.X.X -n
Let us know the results.
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Mon Jun 27, 2016 9:28 am
by rohithroki
I have made the recommend changes in the Nsclient configuration file(attached screenshot below).
Also I have run the command but still getting the same error (with ssl and without ssl).
/usr/local/nagios/libexec/check_nrpe -H X.X.X.X
CHECK_NRPE: Socket timeout after 10 seconds.
/usr/local/nagios/libexec/check_nrpe -H X.X.X.X -n
CHECK_NRPE: Socket timeout after 10 seconds.
I can see some error in the log file.
2016-06-21 18:07:59: error:D:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: Certificate not found: C:\Program Files\NSClient++/security/certificate.pem (generating a default certificate)
2016-06-21 18:07:59: error:D:\source\nscp\modules\NRPEServer\NRPEServer.cpp:132: CA not found: C:\Program Files\NSClient++/security/ca.pem (generating a default CA)
2016-06-24 14:12:48: error:D:\source\nscp\include\socket/connection.hpp:137: Failed to read data: The I/O operation has been aborted because of either a thread exit or an application request
2016-06-24 14:12:48: error:D:\source\nscp\include\socket/connection.hpp:137: Failed to read data: The I/O operation has been aborted because of either a thread exit or an application request
2016-06-24 14:12:48: error:D:\source\nscp\include\socket/connection.hpp:137: Failed to read data: The I/O operation has been aborted because of either a thread exit or an application request
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Mon Jun 27, 2016 2:21 pm
by tgriep
If you are still using the newer version of the NSClient++, the config file is called nsclient.ini, the file you posted last week, nsc.ini is the old one, are you editing the correct file on that server?
Re: Check_nrpe socket time out after 10 seconds for windows
Posted: Wed Jun 29, 2016 5:00 am
by rohithroki
Yes, The file which I'm editing is Nsclient.ini which is the correct one and the file which I posted last week is the configuration file of older version Nsclient.