AW: SOLVED -- NRPE - Error - Could not complete SSL handsha ke
Greg King
wgking at shaw.ca
Fri Jul 23 20:12:30 CEST 2004
Thanks for the suggestion Sven.
Yes - even though the doc says it is ignored if xinetd is used. However I had a error in the nrpe file in xinetd.d. When I corrected it, everything worked as expected.
Here's what I have in each config file:
---nrpe.cfg---
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd
allowed_hosts=127.0.0.1,192.168.2.106,192.168.2.109
---/etc/xinetd.d/nrpe
...
only_from = 192.168.2.106 192.168.2.109 127.0.0.1
--------------
----- Original Message -----
From: "Schaffranneck, Sven (K-DOI-5/4)" <sven.schaffranneck at volkswagen.de>
Date: Friday, July 23, 2004 5:14 am
Subject: AW: [Nagios-users] NRPE - Error - Could not complete SSL handsha ke
> Did you configured the nrpe.cfg with the right IP-Adress?
>
> --------------------
> allowed_hosts=127.0.0.1,192.168.2.106
> --------------------
>
>
> Mit freundlichen Grüssen,
> Sven Schaffranneck
> K-DOI-5/4
>
> Volkswagen AG
> Brieffach 1883
> 38436 Wolfsburg
>
> Telefon: +49 (5361) 9-3 88 58
> http://www.volkswagen.de
>
>
> > -----Ursprüngliche Nachricht-----
> > Von: Greg King [wgking at shaw.ca]
> > Gesendet: Freitag, 23. Juli 2004 00:54
> > An: nagios-users at lists.sourceforge.net
> > Betreff: [Nagios-users] NRPE - Error - Could not complete SSL
> > handshake
> >
> >
> > Hi folks,
> >
> > Environemt: RH9, Nagios 1.2, NRPE 2.0.
> >
> > I compiled and installed NRPE on the same host as Nagios and
> > configured xinetd to start it. If I test it with the loopback
> > address it works, but if I use the ipaddress of the host it
> > returns the error. There is no firewall active. It appears as
> > though nrpe is only listening on the loopback address. What
> > could be causing this behaviour? Running a check_nrpe from a
> > remote host also gets the same error. I see some prior posts
> > on this and an FAQ but none seem to address this situation.
> >
> > Any ideas welcome.
> >
> > Regards,
> > Greg King
> > -------------------------------
> > [root at nagios src]# ./check_nrpe -H 127.0.0.1 -c check_nagios
> > Nagios ok: located 1 process, status log updated 3 seconds ago
> > [root at nagios src]# ./check_nrpe -H 192.168.2.106 -c check_nagios
> > CHECK_NRPE: Error - Could not complete SSL handshake.
> > [root at nagios src]# ifconfig eth0
> > eth0 Link encap:Ethernet HWaddr 00:08:74:A0:C8:23
> > inet addr:192.168.2.106 Bcast:192.168.2.255
> > Mask:255.255.255.0
> > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> > <snip>
> > [root at nagios src]# netstat -tal
> > Active Internet connections (servers and established)
> > Proto Recv-Q Send-Q Local Address Foreign Address
> > State
> > tcp 0 0 *:32768 *:*
> > LISTEN
> > tcp 0 0 localhost.localdo:32769 *:*
> > LISTEN
> > tcp 0 0 *:nrpe *:*
> > LISTEN
> > tcp 0 0 *:smux *:*
> > LISTEN
> > <snip>
> >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by BEA Weblogic Workshop
> > FREE Java Enterprise J2EE developer tools!
> > Get your free copy of BEA WebLogic Workshop 8.1 today.
> > http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> > _______________________________________________
> > Nagios-users mailing list
> > Nagios-users at lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nagios-users
> > ::: Please include Nagios version, plugin version (-v) and OS
> > when reporting any issue.
> > ::: Messages without supporting info will risk being sent to
> /dev/null>
>
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_idG21&alloc_id040&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
More information about the Users
mailing list