Can't seem to get NRPE installed

[jbruyet]

Hey all, I have my Nagios server up and running with NSClient. It's working pretty good but I'm looking at using NRPE and now I'm having problems. After installing nagios-plugins-1.4.15 a couple of times I never did wind up with check_nrpe in /usr/local/nagios/libexec. I downloaded the install file again and tried ANOTHER reinstall but no joy. After some Googling I read where some people have had to manually put check_nrpe in that directory. I did that but now when I run check_nrpe I get the following error message:

[root@link libexec]# ./check_nrpe
./check_nrpe: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory

SO, I did:

[root@link libexec]# yum list installed | grep openssl*

And saw

openssh.i386 4.3p2-82.el5 installed
openssh-askpass.i386 4.3p2-82.el5 installed
openssh-clients.i386 4.3p2-82.el5 installed
openssh-server.i386 4.3p2-82.el5 installed
openssl.i686 0.9.8e-22.el5 installed

I've read where some people need to install libssl-dev but when I try to install it I get a "No package available" error message. SO, can anyone see something here that I'm overlooking?

Thanks,

Joe B

[jsmurphy]

This error means that libssl isn't where nrpe is expecting it to be after it was compiled... after you do ./configure it should have somewhere in that output a warning saying it wasn't able to find it. If you do a "whereis ssl" it should tell you where the packages/headers are installed so when you compile it make sure you have the switch: ./configure --with-ssl=/path/to/ssl --with-ssl-inc=/path/to/includes --with-ssl-lib=/path/to/headers --enable-ssl

If you do ./configure --help it will give you a list of all possible switches you can use. Pay careful attention during the configure because that's the best way to work out what's not working and why.

[jbruyet]

Hey jsmurphy, I get openssl.i686 0.9.8e-22.el5 installed as a response to [root@link libexec]# yum list installed | grep openssl*. BUT, when I run whereis ssl I get the following:

[root@link libexec]# whereis ssl
ssl:
[root@link libexec]#

I was going to remove and reinstall the OpenSSL package but I didn't want to mess up the working side of my Nagios server. I guess THAT is a moot point since I'm trying to go with NRPE instead. I'm only recently off of the bunny hill with Linux so I'm not sure where the problem areas are. What's your recommendation?

Thanks,

Joe B

[jsmurphy]

Hmmm, that was unexpected... I still don't think the ssl-headers are installed I would expect to see something like:
#yum list installed | grep ssl
openssl.i686 1.0.0-20.e16 installed
openssl-devel.i686 1.0.0-20.e16 installed

#whereis ssl
ssl: /etc/ssl /usr/include/ssl.h /usr/include/ssl2.h /usr/include/ssl3.h /usr/share/man/man3/ssl.3ssl.gz

what's the output for yum search openssl-devel? If it finds something then yum install openssl-devel.

[jbruyet]

Still no joy, and I'm conflicted:

Package openssl-0.9.8e-22.el5.i686 already installed and latest version
Nothing to do
[root@link libexec]# yum list install | grep ssl
Error: No matching Packages to list
[root@link libexec]#

I DID find an openssl-devel.i386 but I need i686.

So, should I just remove openssl and then reinstall it? Or since I've pretty much decided to go with NRPE should I reinstall Nagios and go from there?
Here's the NRPE quote that is prompting me: "NRPE is the preferred way and, if you ask me, you get the most out of NSClient++ choosing this mode." Ideas? Suggestions? Recommendations?

Thanks,

Joe B

[jsmurphy]

If you are using NSClient you will definitely want NRPE, it is a more powerful interface.

With Linux don't reinstall things as you would with windows... it will 99.9% of the time never make your problems better unless you happened to install the wrong thing to begin with or you forgot to use a switch on compile. Neither of which are applicable in this scenario.

Which distro are you using? Are you getting your packages from the internet repositories or the install CD? Some distro's have a separate SDK iso that contain most of the -devel packages. It looks like you are using Red-hat (or a variant there of) which means there probably isn't a separate SDK image. (it also means you may need to do: yum list install | grep ssl* )

I don't know of any major distro's that don't have an i686 openssl-devel package available, which is what's making me think you are using the CD/DVD/ISO as your software repo. It might be worthwhile asking on the relevant forum for your distro that you are unable to find/install the openssl-devel package, they can probably solve this mystery faster and with greater accuracy than I can .

[jbruyet]

If you are using NSClient you will definitely want NRPE, it is a more powerful interface.

That's what I thought, and that's why I want to get this silly thing working. I have specific things I want to monitor on a couple of servers running some proprietary software. Thanks for the confirmation.

With Linux don't reinstall things as you would with windows... it will 99.9% of the time never make your problems better unless you happened to install the wrong thing to begin with or you forgot to use a switch on compile. Neither of which are applicable in this scenario.

LOL, old habits die hard; that's the first thing I think of when I have a problem.

Which distro are you using? Are you getting your packages from the internet repositories or the install CD?

[jobee@link ~]$ cat /proc/version
Linux version 2.6.18-274.18.1.el5 ([email protected]) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-51)) #1 SMP Thu Feb 9 12:45:52 EST 2012
[jobee@link ~]$ cat /etc/redhat-release
CentOS release 5.8 (Final)
[jobee@link ~]$

And I'm getting my packages off of the internet repositories.

Some distro's have a separate SDK iso that contain most of the -devel packages. It looks like you are using Red-hat (or a variant there of) which means there probably isn't a separate SDK image. (it also means you may need to do: yum list install | grep ssl* )

I'm using CentOS release 5.8 (Final), and running yum list install | grep ssl* gives me Error: No matching Packages to list

I don't know of any major distro's that don't have an i686 openssl-devel package available, which is what's making me think you are using the CD/DVD/ISO as your software repo. It might be worthwhile asking on the relevant forum for your distro that you are unable to find/install the openssl-devel package, they can probably solve this mystery faster and with greater accuracy than I can .

I will do that, and I will report back with whatever I find out. Thanks for trying!

Thanks,

Joe B

[jsmurphy]

The plot thickens, I'm also using CentOS though I am using release 6.0 (but I used 5.8 on my previous install and don't recall having the same issue) hopefully they can help you on the CentOS forum work out why you can't locate that package and we can get back to working out the Nagios specific issues!

[jbruyet]

Ok, I have ssl installed (yum install openssl-devel without any extensions) but I have a question--please see below:

[root@link nrpe-2.13]# yum list installed | grep ssl
mod_ssl.i386 1:2.2.3-63.el5.centos.1 installed
openssl.i686 0.9.8e-22.el5_8.1 installed
openssl-devel.i386 0.9.8e-22.el5_8.1 installed
[root@link nrpe-2.13]#

Question 1, why does openssl have a .i686 extension and the other two have .i386 extensions?

Question 2, why am I still getting this error:

./check_nrpe: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory

AND, is the fact that it's looking for libssl while I have openssl installed important? Apparently libssl isn't an install option:

[root@link nrpe-2.13]# yum list | grep libssl*
[root@link nrpe-2.13]#

Grepping openssl brings up several options.

Any ideas? Suggestions? Recommendations?

Thanks,

Joe B

[jbruyet]

Houston, we may have a problem here. FWIW I'm running this server as a VM and the libssl that it's looking for is located down in the bowels of the VM stuff.
Here's the error:

./check_nrpe: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory

And here's where I have libssl.so.0.9.8 located:

/home/jobee/Downloads/vmware-tools-distrib/lib/lib32/libssl.so.0.9.8/libssl.so.0.9.8

SO, am I going to have to redo this server as a standalone box in order to get Nagios/NRPE to work? Do I want to point the ./configure at the openssl or the libssl? I'm thinking I should go with openssl because it's not in a proprietary location but then again I'm way past familiar waters.

Thanks,

Joe B