Page 1 of 1
NRPE Agent
Posted: Thu Mar 04, 2021 7:31 pm
by matson-itops
Can someone kindly point me to documentation ?
I would like a like of NRPE agents compatiable with NagiosXI 5.8.1
I have a nagiosxi 5.8.1 on redhat 8 and am running into issues talking to a box with nrpe v2.15
The error I get is "CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake".
I have no problems talking to another box with INRPE v3.2.1
Re: NRPE Agent
Posted: Fri Mar 05, 2021 10:31 am
by benjaminsmith
Hi
@matson-itops,
That's a common issue, and we have a kb article to help troubleshoot it.
NRPE - CHECK_NRPE: Error - Could Not Complete SSL Handshake
Check the allowed hosts setting in nrpe.cfg first and then make sure you have SSL compiled. Let us know if you're able to resolve it.
Benjamin
Re: NRPE Agent
Posted: Fri Mar 05, 2021 6:20 pm
by matson-itops
We gave up and upgraded the nagios agent.
But now have a new issue
we're installing version 4.0.2 install is failing on redhat 7.9 boxes for A-subcomponents / nagiosplugins
when using Nagios Linux Agent Installer Script v2.1.1 from you guys we get the following error :
Making install in plugins
make[1]: Entering directory `/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins'
/bin/sh ../libtool --tag=CC --mode=link gcc -DNP_VERSION='"2.3.3"' -g -O2 -L. -L/usr/local/lib -o check_http check_http.o libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libtool: link: gcc -DNP_VERSION=\"2.3.3\" -g -O2 -o check_http check_http.o -L. -L/usr/local/lib libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libnpcommon.a(sslutils.o): In function `np_net_ssl_init_with_hostname_version_and_cert':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:150: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:176: undefined reference to `SSL_CTX_set_options'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:107: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:154: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:155: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:156: undefined reference to `OPENSSL_init_crypto'
libnpcommon.a(sslutils.o): In function `np_net_ssl_check_cert_real':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:282: undefined reference to `X509_getm_notAfter'
collect2: error: ld returned 1 exit status
Re: NRPE Agent
Posted: Mon Mar 08, 2021 2:52 pm
by ssax
Do you have openssl-devel installed? If not, try installing it first and then run it again:
If it is already installed, send the output of this command on the remote system:
Thank you!
Re: NRPE Agent
Posted: Mon Mar 08, 2021 5:49 pm
by matson-itops
tis already installed
[dummy@xxx ~]$ rpm -qa | grep openssl
openssl-libs-1.0.2k-21.el7_9.x86_64
openssl-devel-1.0.2k-21.el7_9.x86_64
openssl-1.0.2k-21.el7_9.x86_64
Re: NRPE Agent
Posted: Tue Mar 09, 2021 5:16 pm
by vtrac
Hi,
I think you might have TWO openssl installed.
you should be using the "-I/usr/include" and "-L/usr/lib" not "-I/usr/local/include" and "-l/usr/local/lib" during the make.
Can you please check:
Code: Select all
ls -l /usr/local/include/ssl.h
ls -l /usr/include/ssl.h
Also, please do:
I'm thinking those under "/usr/local/include" and "/usr/local/lib" should be removed since they might belong to some python modules.
One thing you could try, if you don't want to remove those two folders is to rename them temporary:
Code: Select all
mv -f /usr/local/include /usr/local/include_keep
mf -f /usr/local/lib/ /usr/local/lib_keep
Now, re-run the install with new "./configure" to pull in correct "/usr/include" and "/usr/lib" path.
So, let clean up the old "linux-nrpe-agent" under "/tmp":
Code: Select all
cd /tmp
rm -rf linux-nrpe-agent
wget https://assets.nagios.com/downloads/nagiosxi/agents/linux-nrpe-agent.tar.gz
tar xzf linux-nrpe-agent.tar.gz
cd linux-nrpe-agent
./fullinstall
Please upload the install.log when completed, only if there is issue!!
Regards,
Vinh