check_nrpe - Could not complete SSL handshake.

Stalin stalinsk at gmail.com
Thu Oct 13 21:14:39 CEST 2005


To answer to who have replied so far...

5666 port is open for sure. here is the output

[nagios at host libexec]$ telnet remotehostname.com 5666
Trying xx.xxx.xxx.xxx...
Connected to remotehostname.com (xx.xxx.xxx.xxx).
Escape character is '^]'.
Connection closed by foreign host.

I'm running nrpe as a standalone deamon. so i assume there isn't any
need to add entries in hosts.allow.

Yes, i restarted nrpe after making changes to nrpe.cfg.

Also i'd like give some additional information to this problem. the ip
that shows in /var/log/messages file i.e. "Host xx.xxx.xxx.xxx is not
allowed to talk to us!" is NOT the ip address from where the request
origniated from. As the monitoring machine is behind the firewall, the
requesting nagios server ip gets natted at fw and sends an internal
address to nrpe deamon. In fact, i added the internal ip to nrpe.cfg
still no luck.

Regards,
Stalin


On 10/13/05, Andreas Ericsson <ae at op5.se> wrote:
> Stalin wrote:
> > Hi All,
> >
> > I'm completely lost on this. I get this error when i try to run
> > commands on remote host via check_nrpe. I've checked FAQ on this
> > error, didn't help much.
> >
> > [nagios at host]$ telnet hostname.com 5666
> > Trying xx.xxx.xxx.xxx...
> > telnet: Unable to connect to remote host: Connection refused
> >
> > remote server:tail -f /var/log/message
> > Oct 12 15:07:25 remotehost nrpe[7542]: Host xx.xxx.xxx.xxx is not
> > allowed to talk to us!
> >
>
> This is weird. Since the connection was refused, indicating that NRPE
> isn't listening on the port, you really shouldn't have gotten anything
> at all in the logs. Since you did anyway ....
>
> > I've included the ip of monitoring server on allowed_ip_list of
> > nrpe.cfg, but still i get this error on the remote server logs file.
> >
>
> ... did you restart nrpe after adding the ip to the config?
>
> --
> Andreas Ericsson                   andreas.ericsson at op5.se
> OP5 AB                             www.op5.se
> Tel: +46 8-230225                  Fax: +46 8-230231
>


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list