Nagios Support Forum

Hi Team.

Good day.
We've encountered this unknown alarm after patching the remote server, we've copied the publickey and execute SSH passwordless to the server from the nagios but we still encountered the same error.

Here is the error:

Remote command execution failed: Authorized users only. All activity may be monitored and reported.

Hello,

Encountering this type of error message after patching a server that you're monitoring use SSH key auth sounds like the remote server may have generated new SSH keys.

One easy way to test, and potentially resolve this in the one fell swoop, is to SSH into the Nagios XI server as root or another user and sudo to root, then su - nagios, and then as the nagios user, try to SSH into the remote server.

My guess is you will get a notification that the server's identity has changed, and it will give you instructions for removing the existing identity for the server from the nagios user's known hosts file. Usually the command is something like ssh-keygen -R <RemoteServerIP>

An alternative is that the authorized_keys file for the user on the remote server has been wiped.