Page 1 of 3

CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Fri Mar 16, 2012 9:20 am
by John12
hi..

I m running nagiosxi Virtual machine with static IP via proxypass in my host. currently i am in trial mode but will purchase the licence once my problem get solve. :-/. I can access Nagiosxi from any external IP. I need to monitor my host from nagiosxi VM running in vmware. I unable to install nagiosxi in my server directly because nagiosxi not accepting Mysql root password .. even though i given correct one. it ask password again and again.. first the password given are visible.. if i press spacebar and proceed it again ask password. this time password are nonvisible.. but both way it not accepting. So i decided to go with VMware nagiosxi VM to monitor my centos 5.7 server.

I ran setup to add host in nagiosxi VM and added my host. IP: 1.1.1.1 . downloaded agent and installed in server. but i am getting CHECK_NRPE: Error - Could not complete SSL handshake. for all services expect "ping" ..

This is my /etc/xinetd.d/nrpe in host.
# default: on
# description: NRPE (Nagios Remote Plugin Executor)
service nrpe
{
flags = REUSE
socket_type = stream
port = 5666
wait = no
user = nagios
group = nagios
server = /usr/local/nagios/bin/nrpe
server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd
log_on_failure += USERID
disable = no
only_from = 1.1.1.2 #This is my Nagios XI VM Static IP
}

Code: Select all

[root@u15830099 xinetd.d]# chkconfig --list nrpe
nrpe            on

Code: Select all

[root@u15830099 xinetd.d]# netstat -lpn |grep 5666
tcp        0      0 0.0.0.0:5666                0.0.0.0:*                   LISTEN      7183/xinetd

Code: Select all

[root@u15830099 xinetd.d]# /usr/local/nagios/libexec/check_nrpe -H 1.1.1.2
Connection refused or timed out
I don know whether The connection refused is because i m using proxypass to direct a subdomain to nagiosxi VM in my vhost.conf? If this is cause then wt i have to do...
Proxypass / http://1.1.1.2/
ProxypassReverse / http://1.1.1.2/

On my Nagios XI Virtual Machine /etc/xinetd.d/nrpe
# default: on
# description: NRPE (Nagios Remote Plugin Executor)
service nrpe
{
flags = REUSE
socket_type = stream
port = 5666
wait = no
user = nagios
group = nagios
server = /usr/local/nagios/bin/nrpe
server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd
log_on_failure += USERID
disable = no
only_from = 1.1.1.2 #This is my Nagios XI VM Static IP
}

Code: Select all

[root@nagiosxi ~]# /usr/local/nagios/libexec/check_nrpe -H 1.1.1.1
CHECK_NRPE: Error -could not complete SSL handshake
pls assist me how to correct it. i am completely lost. I am always ready to provide any other info for your kind consideration.

Awaiting response patiently.
Jack.

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Fri Mar 16, 2012 9:57 am
by scottwilkerson
Cal you run

Code: Select all

tail -f /var/log/messages
on the client machine to see what nrpe errors might be reporting.

Thanks

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Sun Mar 18, 2012 11:33 pm
by John12
[root@u15830099 ~]# tail -f /var/log/messages
Mar 19 00:34:27 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7332 duration=0(sec)
Mar 19 00:34:30 u15830099 gnome-screensaver-dialog: Unable to open admin password file: Permission denied
Mar 19 00:34:37 u15830099 kernel: /dev/vmmon[5802]: /dev/rtc enable interrupt failed: -515
Mar 19 00:34:55 u15830099 xinetd[8715]: START: nrpe pid=7393 from=1.1.1.1
Mar 19 00:34:55 u15830099 xinetd[7393]: FAIL: nrpe address from=1.1.1.1
Mar 19 00:34:55 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7393 duration=0(sec)
Mar 19 00:35:02 u15830099 kernel: /dev/vmmon[5802]: /dev/rtc enable interrupt failed: -515
Mar 19 00:35:05 u15830099 last message repeated 2 times
Mar 19 00:35:08 u15830099 xinetd[7401]: FAIL: nrpe address from=1.1.1.1
Mar 19 00:35:08 u15830099 xinetd[8715]: START: nrpe pid=7401 from=1.1.1.1
Mar 19 00:35:08 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7401 duration=0(sec)
Mar 19 00:35:55 u15830099 xinetd[8715]: START: nrpe pid=7402 from=1.1.1.1
Mar 19 00:35:55 u15830099 xinetd[7402]: FAIL: nrpe address from=1.1.1.1
Mar 19 00:35:55 u15830099 xinetd[8715]: EXIT: nrpe status=0 pid=7402 duration=0(sec)
Mar 19 00:36:03 u15830099 kernel: /dev/vmmon[5802]: /dev/rtc enable interrupt failed: -515

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Mon Mar 19, 2012 8:59 am
by John12
Any help. awainting .. :-(

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Mon Mar 19, 2012 9:17 am
by scottwilkerson
It looks like your server is making the connection from the IP 1.1.1.1

If this is a valid IP for the server, you will want to add 1.1.1.1 to the only_from address in /etc/xinetd.d/nrpe

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Thu Mar 29, 2012 12:40 am
by John12
Thanks alot.. that really worked. my /etc/xinetd.d/nrpe in host is as allowed from = 127.0.0.1 <host ip> <nagios server ip>
Nrpe 2.12 return in my host and as well as in nagiosxi VM when i do check_nrpe.

I have added my host in NagiosXI server via "Run Monitoring wizard" . ALL configuration passes successfully but i m not able to see any service detail in service status window..

"No matching services found".

What i am doing wrong.. please assist.

Thanks,
John.

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Thu Mar 29, 2012 9:04 am
by scottwilkerson
Are you running the Linux Server Wizard?

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Thu Mar 29, 2012 9:10 am
by John12
yes .. i choosen linux server wizard and centOS as my OS.

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Thu Mar 29, 2012 9:16 am
by scottwilkerson
Are they there in the Core Config Manager?
Configure -> Core Config Manager -> Services -> Select config name from dropdown

Re: CHECK_NRPE: Error - Could not complete SSL handshake.

Posted: Thu Mar 29, 2012 9:36 am
by John12
i see the services.. i have attached screenshots of that..