Page 1 of 1
Nagios Agent SSL/NRPE Issues
Posted: Tue Sep 10, 2013 9:12 am
by costanza2k1
Hi all,
I'm hoping you can help. We've deployed about 6 agents on RHEL machines and set the IP to the Nagios server. Everything works fine for hours and then I start getting this message:
CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.
&
CHECK_NRPE: Error - Could not complete SSL handshake.
I'm going to check to see the cfg if it lost the IP for some reason, but do you know why this keeps happening?
Re: Nagios Agent SSL/NRPE Issues
Posted: Tue Sep 10, 2013 9:53 am
by abrist
The SSL error is covered in the following document:
http://assets.nagios.com/downloads/nagi ... utions.pdf
Does restarting xinet temporarily fix the issue?
Re: Nagios Agent SSL/NRPE Issues
Posted: Tue Sep 10, 2013 3:52 pm
by costanza2k1
I've followed the documentation, when I tail the log messages this is what I get:
Code: Select all
Sep 10 13:49:52 localhost nrpe[11487]: Client request was invalid, bailing out...
Sep 10 13:49:52 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11487 duration=0(sec)
Sep 10 13:50:18 localhost xinetd[10954]: START: nrpe pid=11492 from=::ffff:10.99.104.4
Sep 10 13:50:18 localhost nrpe[11492]: Error: Request contained command arguments!
Sep 10 13:50:18 localhost nrpe[11492]: Client request was invalid, bailing out...
Sep 10 13:50:18 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11492 duration=0(sec)
Sep 10 13:50:33 localhost xinetd[10954]: START: nrpe pid=11496 from=::ffff:10.99.104.4
Sep 10 13:50:33 localhost nrpe[11496]: Error: Request contained command arguments!
Sep 10 13:50:33 localhost nrpe[11496]: Client request was invalid, bailing out...
Sep 10 13:50:33 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11496 duration=0(sec)
Sep 10 13:51:09 localhost xinetd[10954]: START: nrpe pid=11500 from=::ffff:10.99.104.4
Sep 10 13:51:09 localhost nrpe[11500]: Error: Request contained command arguments!
Sep 10 13:51:09 localhost nrpe[11500]: Client request was invalid, bailing out...
Sep 10 13:51:09 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11500 duration=0(sec)
Sep 10 13:51:26 localhost xinetd[10954]: START: nrpe pid=11502 from=::ffff:10.99.104.4
Sep 10 13:51:26 localhost xinetd[10954]: START: nrpe pid=11503 from=::ffff:10.99.104.4
Sep 10 13:51:26 localhost nrpe[11502]: Error: Request contained command arguments!
Sep 10 13:51:26 localhost nrpe[11502]: Client request was invalid, bailing out...
Sep 10 13:51:26 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11502 duration=0(sec)
Sep 10 13:51:26 localhost nrpe[11503]: Error: Request contained command arguments!
Sep 10 13:51:26 localhost nrpe[11503]: Client request was invalid, bailing out...
Sep 10 13:51:26 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11503 duration=0(sec)
Sep 10 13:51:39 localhost xinetd[10954]: START: nrpe pid=11505 from=::ffff:10.99.104.4
Sep 10 13:51:39 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11505 duration=0(sec)
Sep 10 13:51:43 localhost xinetd[10954]: START: nrpe pid=11506 from=::ffff:10.99.104.4
Sep 10 13:51:43 localhost nrpe[11506]: Error: Request contained command arguments!
Sep 10 13:51:43 localhost nrpe[11506]: Client request was invalid, bailing out...
Sep 10 13:51:43 localhost xinetd[10954]: EXIT: nrpe status=0 pid=11506 duration=0(sec)
Re: Nagios Agent SSL/NRPE Issues
Posted: Tue Sep 10, 2013 3:58 pm
by abrist
Have you enable command arguments in your nrpe file? On the remote host, run:
Code: Select all
grep dont_blame_nrpe= /usr/local/nagios/etc/nrpe.cfg
if it outputs:
You will need to change it to:
And then restart xinetd:
Re: Nagios Agent SSL/NRPE Issues
Posted: Wed Sep 11, 2013 10:58 am
by costanza2k1
Thanks. Everything checked out, just restarted xinetd...waiting for the next polling cycle to see if there are any errors. Do I need to do anything on the XI side?
Re: Nagios Agent SSL/NRPE Issues
Posted: Wed Sep 11, 2013 11:44 am
by slansing
Nope, that change only needs to be made on the remote host's NRPE configuration. Let us know if everything checks out.
Re: Nagios Agent SSL/NRPE Issues
Posted: Wed Sep 11, 2013 2:59 pm
by costanza2k1
For some odd reason the nrpe file only had the local host as an allowed file...fixed it to the right IP. Still no luck. Since I had to do a demo of this particular server, I went ahead and reinstalled the agent. I'm good to go now. I have 3 more servers that are having problems....I'll start those now. I really appreciate all the help you and this forum provide. It's awesome!
Re: Nagios Agent SSL/NRPE Issues
Posted: Wed Sep 11, 2013 3:34 pm
by abrist
Thanks!