--000e0cd509c2650764046e3d122f
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
Your exec line is wrong. It should read ;
exec=3D"/usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.c=
fg
-i"
arg0=3D"/usr/local/nagios/bin/nrpe"
2009/7/9 Justin Amburn
> Thanks for replies, guys!
>
>
>
> I can run nrpe in global zones under SMF. I can even get nrpe in the
> non-global zones to run with the command:
>
> /usr/local/nagios/bin/nrpe =96c /usr/local/nagios/etc/nrpe.cfg =96i
>
> root@vz3haadp01# /usr/local/nagios/libexec/check_nrpe -H localhost
>
> NRPE v2.12
>
>
>
> **BUT**, when I run it under SMF in the non-global zones I get the SSL
> handshake error. In the global zone this works just fine. It=92s just the
> non-global that is causing me a headache.
>
>
>
> I=92ve verified that the results from:
>
> inetadm -l svc:/network/nrpe/tcp:default
>
> the evil /etc/nsswitch.conf
>
> /etc/services
>
> crle
>
> ldd
>
> /var/svc/manifest/network/nrpe-tcp.xml
>
>
>
> Are the same between the global and the non-global.
>
>
>
> See, my ldd shows no errors:
>
>
>
> bash-3.00# ldd /usr/local/nagios/bin/nrpe
>
> libssl.so.0.9.7 =3D> /usr/sfw/lib/libssl.so.0.9.7
>
> libcrypto.so.0.9.7 =3D> /usr/sfw/lib/libcrypto.so.0.9.7
>
> libnsl.so.1 =3D> /lib/libnsl.so.1
>
> libsocket.so.1 =3D> /lib/libsocket.so.1
>
> libc.so.1 =3D> /lib/libc.so.1
>
> libmp.so.2 =3D> /lib/libmp.so.2
>
> libmd.so.1 =3D> /lib/libmd.so.1
>
> libscf.so.1 =3D> /lib/libscf.so.1
>
> libdoor.so.1 =3D> /lib/libdoor.so.1
>
> libuutil.so.1 =3D> /lib/libuutil.so.1
>
> libgen.so.1 =3D> /lib/libgen.so.1
>
> libssl_extra.so.0.9.7 =3D> /usr/sfw/lib/libssl_extra.so.0=
.9.7
>
> libcrypto_extra.so.0.9.7 =3D>
> /usr/sfw/lib/libcrypto_extra.so.0.9.7
>
> libm.so.2 =3D> /lib/libm.so.2
>
>
>
> I've kept adding and adding to the crle file:
>
>
>
> bash-3.00# crle
>
>
>
> Configuration file [version 4]: /var/ld/ld.config
>
> Default Library Path (ELF): /lib:/usr/lib:/usr/sfw/lib:/usr/local/lib
>
> Trusted Directories (ELF): /lib/secure:/usr/lib/secure (system
> default)
>
>
>
> Command line:
>
> crle -c /var/ld/ld.config -l /lib:/usr/lib:/usr/sfw/lib:/usr/local/lib
>
>
>
> BUT, since nrpe works in the non-global when not running under SMF, this
> seems to be strictly an SMF issue.
>
>
>
> Here's my manifest values for both the good and bad zones:
>
>
>
> bash-3.00# inetadm -l svc:/network/nrpe/tcp:default
>
> SCOPE NAME=3DVALUE
>
> name=3D"nrpe"
>
> endpoint_type=3D"stream"
>
> proto=3D"tcp"
>
> isrpc=3DFALSE
>
> wait=3DFALSE
>
> exec=3D"/usr/sfw/sbin/tcpd -c /usr/local/nagios/etc/nrpe.cfg -i"
>
> arg0=3D"/usr/local/nagios/bin/nrpe"
>
> user=3D"nagios"
>
> default bind_addr=3D""
>
> default bind_fail_max=3D-1
>
> default bind_fail_interval=3D-1
>
> default max_con_rate=3D-1
>
> default max_copies=3D-1
>
> default con_rate_offline=3D-1
>
> default failrate_cnt=3D40
>
> default failrate_interval=3D60
>
> default inherit_env=3DTRUE
>
> default tcp_trace=3DFALSE
>
> tcp_wrappers=3DTRUE
>
> default connection_backlog=3D10
>
>
>
> Also, in my /etc/nsswitch.conf all of the LDAP references have been
> removed. Every attribute is =91files=92.
>
>
>
> I=92m out of ideas here! Does anyone see anything that I may be missing i=
n
> the setup?
>
>
>
>
>
> Thanks!
>
>
>
> Justin Amburn
>
>
> ------------------------------
>
> *From:* Grant Byers [mailto:[email protected]]
> *Sent:* Monday, July 06, 2009 8:05 PM
> *To:* Nagios Developers List
> *Subject:* Re: [Nagios-devel] Solaris 10: Running nrpe in a non-global
> zone
>
>
>
> I'm running NRPE in non-global Solaris 10 zones. Either configure & build
> with LDFLAGS=3D"-R/usr/sfw/lib", or add /usr/sfw/lib to the runtime linke=
r
> search path. See crle(1).
>
>
>
> Regards,
>
> Grant
>
>
>
> 2009/7
...[email truncated]...
This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]