Solaris - CHECK_NRPE: Error - Could not complete SSL handsha

[isat-iad]

Hi,

I am having an error on a Solaris 10 (x86) server with NRPE. First, I tried to install the solaris agent (solaris-nrpe-agent.tar.gz); the install works, but I get the following error in the logs when I try to start the agent:

Code: Select all

 nrpe: fatal: libc.so.1: version `SUNW_1.22.7' not found (required by file /opt/nagios/bin/nrpe

I then tried to install NRPE from source, again the install works fine and this time the NRPE agent starts, but I always get:
CHECK_NRPE: Error - Could not complete SSL handshake.
When I run the command:

Code: Select all

/opt/nagios/libexec/check_nrpe -H 127.0.0.1

(I get the same error when I run the command from the Nagios server)

I had a look in the troubleshooting section of the NRPE document and have made sure that the allowed hosts section of /etc/nagios/nrpe.cfg contains 127.0.0.1. Here is the NRPE process that runs:

Code: Select all

# ps -ef | grep nrpe
  nagios 21336     1   0 12:26:10 ?           0:00 /opt/nagios/bin/nrpe -c /etc/nagios/nrpe.cfg -d

And here is the config:

Code: Select all

 # grep allowed_hosts /etc/nagios/nrpe.cfg
allowed_hosts=127.0.0.1,<IP_ADDR_OF_NAGIOS_SERVER>

I tried different versions of NRPE - 2.12, 2.14 and 2.15 but the SSL error is always the same. I even tried installing openssl from source and configuring NRPE against that, but still no luck.

Do you have any suggestions or has anybody else experienced the same issue?

Thanks,
Michael

[lmiltchev]

Have you restarted the NRPE on the client after modifying the following line?

Code: Select all

allowed_hosts=127.0.0.1,<IP_ADDR_OF_NAGIOS_SERVER>

Do you have check_nrpe installed on the Solaris box, so that you can test the check locally?

Code: Select all

./check_nrpe -H locatehost

or

Code: Select all

./check_nrpe -H 127.0.0.1

[isat-iad]

OK, I've resolved this issue - the resolution is to compile openssl for 32-bit (although the system architecture is 64-bit).

In case anybody else has the problem, you need to download openssl and configure with (assuming your system is x86):

Code: Select all

./Configure solaris-x86-gcc shared
make
make install

Then compile nrpe with (assuming you installed openssl in /usr/local/ssl):

Code: Select all

./configure --with-ssl=/usr/local/ssl --with-ssl-lib=/usr/local/ssl/lib --prefix=/opt/nagios
make
make install

Then restart nrpe and it should work.

Thanks,
Michael

[abrist]

Brilliant. Thanks for posting the solution here for future peoples.