check_nrpe fails, SSL handshake error

[Steve Feehan]

> On the host to be monitored, I've installed nrpe and a simple nrpe.cfg  
> file, and edited /etc/inetd.conf and /etc/services as follows:
> 
> /etc/inetd.conf:
> nrpe	stream	tcp	nowait	nagios	/usr/sfw/sbin/tcpd 
> /usr/local/nagios/bin/ nrpe -c /usr/local/nagios/bin/nrpe.cfg -i
> 
> /etc/services:
> nrpe	5666/tcp	# NRPE (Nagios remote plugin executor)

You're wrapping nrpe with tcpd. Are you sure that you're allowing
nrpe connections in hosts.allow?

> nrpe.cfg (default file, except for the following):
> command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10
> command[check_load]=/usr/local/nagios/libexec/check_load -w 15,10,5 -c  
> 30,25,20

Did you add the remote ip address to the allowed_hosts?

> Ok, here's the problem. When I try to run check_nrpe on the distributed  
> server, I get this error:
> 
> # ./check_nrpe -H {IP of host to monitor} -c check_load
> CHECK_NRPE: Error - Could not complete SSL handshake.

What do you see in syslog on the host running nrpe?

Other than the things I've mentioned above, one other problem 
I had on Tru64 and IRIX was related to seeding openssl's prng.
Does solaris have /dev/u?random? If not, you may need prngd.

-- 
Steve Feehan


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null