Nagios monitoring ok but SSL Handshake error

[jim]

Good Folks,

I have a weird situation here. My remote linux server is nice monitored by Nagios but when I try to run check_nrpe -H <Nagios Server> I get SSL Handshake error. I don't the same error from Nagios server.

Code: Select all

[root@agent1 ~]# /usr/local/nagios/libexec/check_nrpe -H master
CHECK_NRPE: Error - Could not complete SSL handshake.

The error message in /var/log/messages file of Nagios Server is Jul  8 21:43:57 puppet nrpe[8648]: Host 192.168.1.3 is not allowed to talk to us!
When in fact Nagio server IP is defined in allowed_hots at /etc/xinetd.d/nrpe file on Linux remote server(agent1)
[root@agent1 ~]# 
[root@master ~]# /usr/local/nagios/libexec/check_nrpe -H agent1
NRPE v2.15
[root@master ~]# 

Any idea how to resolve it?

[mcapra]

So you are, from the remote server (agent1), trying to run check_nrpe on the Nagios server (master)? I would make sure that both server's have eachother in the allowed_hosts definition.

Refer to Section III of this document (and this document in general for NRPE issues):
https://assets.nagios.com/downloads/nag ... utions.pdf

What are you trying to accomplish by doing this?

[jim]

What are you trying to accomplish by doing this?

Don't we check that nrpe is working properly running

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H <remote server hostname or IP>

I have never seen/heard that remote serve IP should be in nrpe.cfg file, by adding it also I get same error.

[jim]

Yes, I do agree with you that we need to have IP's for allowed_host however I find that it works only when you compile with ssl headers like below.

Code: Select all

./configure --enable-ssl

It is given in the link you mentioned so all good

[mcapra]

Thanks for sharing your solution! Is it alright if I lock this thread and mark the issue as resolved?

[jim]

Yes please go ahead