Page 1 of 2
CHECK_NRPE: Could not complete SSL handshake
Posted: Thu Oct 02, 2014 5:03 pm
by tedgardener
All:
OS: Ubuntu v.10.04 LTS
Despite the fact that on the remote host's nrpe.cfg file I have the nagios server's ip address listed as an allowed_hosts, when I run check_nrpe -H <remote host ip> i'm receiving an error that it can't complete the SSL handshake.
I've uninstalled nagios from the remote host and purged and reinstalled. Uninstalled and reinstalled on Nagios. I've even disabled SSL on the remote host, but to no avail.
Any ideas?
Ted
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Thu Oct 02, 2014 5:10 pm
by Box293
The IP address will be defined in /etc/xinetd.d/nrpe if nrpe is running under xinetd.
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Thu Oct 02, 2014 5:17 pm
by tedgardener
Unfortunately, I checked that as well. Does not exist.
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Thu Oct 02, 2014 5:22 pm
by Box293
How did you install nrpe on the remote host? What guide did you follow?
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Thu Oct 02, 2014 5:39 pm
by tedgardener
Used the following sequence of commands:
sudo add-apt-repository ppa:nagiosinc/ppa
sudo apt-get update
sudo apt-get install sysstat (this is needed) nagios-agent
When prompted, I add the Nagios IP address.
Then I add remote host monitoring to Nagios.
Keep in mind that when I checked the nrpe.cfg file it has multiple old addresses from previous years. This is why I performed the apt-get remove and apt-get --purge procedures.
As an aside, is there a way to completely remove all of nagios if need be (e.g., config files, etc.)
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Fri Oct 03, 2014 9:26 am
by lmiltchev
Do you have an "agent.cfg" file on the system? It may be located in: "/etc/nagios/nrpe.d/" directory. If you do, you will need to add the Nagios XI server's IP to the "allowed_hosts" line.
As an aside, is there a way to completely remove all of nagios if need be (e.g., config files, etc.)
You will need to remove the files/directories manually (rm -rf <path to the nagios dir>).
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Fri Oct 03, 2014 9:40 am
by tedgardener
OK. Prior to uninstalling the agent again, does anyone have any other ideas why this isn't working. I'll work on sending info from the log files to see if that gives us a clue.
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Fri Oct 03, 2014 9:54 am
by Box293
lmiltchev wrote:Do you have an "agent.cfg" file on the system? It may be located in: "/etc/nagios/nrpe.d/" directory. If you do, you will need to add the Nagios XI server's IP to the "allowed_hosts" line.
I just finished testing nrpe on an 10.04 Ubuntu server, installing it the way you did.
lmiltchev pointed out to me that the location of the allowed_hosts is in /etc/nagios/nrpe.d/agent.cfg
What happens when you run this test from your nagios host (where the ip address is your ubuntu server).
Code: Select all
Command:
./check_nrpe -H 192.168.207.152
Output:
NRPE v2.12
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Fri Oct 03, 2014 10:18 am
by tedgardener
From Nagios
[root@localhost libexec]# ./check_nrpe -H <remote host IP>
CHECK_NRPE: Error - Could not complete SSL handshake.
[root@localhost libexec]#
remote host nrpe.cfg properly configured
Re: CHECK_NRPE: Could not complete SSL handshake
Posted: Fri Oct 03, 2014 10:39 am
by Box293
Can you please attach you nrpe.cfg file AND your /etc/nagios/nrpe.d/agent.cfg