Error "NRPE daemon is not allowed to talk to us"

[plakshmi]

We are seeing below errors on a Solaris 10 remote host. The IP 13.129.106.28 is that of the old nagios server and we are not using it now.

Jul 22 00:17:41 mc0300ux006 nrpe[1952]: [ID 381997 daemon.error] Host 13.129.106.28 is not allowed to talk to us!
Jul 22 00:17:41 mc0300ux006 nrpe[1954]: [ID 381997 daemon.error] Host 13.129.106.28 is not allowed to talk to us!
Jul 22 00:17:41 mc0300ux006 nrpe[1956]: [ID 381997 daemon.error] Host 13.129.106.28 is not allowed to talk to us!


I did check the /etc/nagios/nrpe.cfg file but could not find that IP from allowed_hosts.

bash-3.2$ cat /etc/nagios/nrpe.cfg|grep allowed
# that are allowed to talk to the NRPE daemon. Network addresses with a bit mask
allowed_hosts=13.129.109.69,127.0.0.1

We still see the errors in /var/adm/messages. Can you please let us know where nrpe is checking for the IP address?

[plakshmi]

I think the fact that the IP 13.129.106.28 is not mentioned in allowed_hosts in nrpe.cfg is the reason NRPE daemon is refusing to connect to it.
But I am just wondering why NRPE is trying to communicate to the IP address in the first place.

[slansing]

Well, it is likely that your old nagios server is still trying to run commands to this remote host, you will need to find out what is making those connections from (13.129.106.28). If you were to add that address to allowed_hosts and restart nrpe, it would be able to communicate with it.

[plakshmi]

We stopped all nagios services on the old nagios server usa0300lv1201 (13.129.106.28) and made sure they dont start after server reboot.

Thank you. You may close this.