Reg: glibc and openssl

[mohan.kumar3 at wipro.com]

Hi Robert,
 This issue was happened after installing a glibc-2.6.1-18.x86_64.rpm and openssl-0.9.8a-18.4.x86_64.rpm.
 
We are not using tcp wrappers. 
 
while running localhost:
/usr/local/nagios/libexec/check_nrpe: /lib64/tls/libc.so.6: version `GLIBC_2.4' not found (required by /usr/lib64/libssl.so.0.9.8)
/usr/local/nagios/libexec/check_nrpe: /lib64/tls/libc.so.6: version `GLIBC_2.4' not found (required by /usr/lib64/libcrypto.so.0.9.8)
 
/etc/xinetd.d/nrpe:
# default: on
# description: NRPE (Nagios Remote Plugin Executor)
service nrpe
{
        flags           = REUSE
        socket_type     = stream
        port            = 5666
        wait            = no
        user            = nagios
        group           = nagios
        server          = /usr/bin/nrpe
        server_args     = -c /usr/local/nagios/nrpe.cfg --inetd
        log_on_failure  += USERID
        disable         = no
        only_from       = 10.35.7.52
}

# lsof|grep nrpe
xinetd    24850   root    6w  IPv4            4774755                    TCP *:nrpe (LISTEN)
 
Regards
G. Mohan Kumar
Senior Systems Engineer	
Wipro Technologies
	
475-A, Old Mahabalipuram Road, 
Sozhanganallur,
Chennai- 600119. India
Tel:+91-44-30691933 
mohan.kumar3 at wipro.com
www.wipro.com	

________________________________

From: nagios-users-bounces at lists.sourceforge.net on behalf of Cipriani, Robert C
Sent: Wed 1/16/2008 7:43 PM
To: 'nagios-users at lists.sourceforge.net'
Subject: Re: [Nagios-users] Reg: glibc and openssl



Can you post your /etc/xinetd.d/nrpe? Are you using tcp wrappers? Are you now getting the SSL error from both localhost and Nagios server?

 

Can you run an lsof|grep nrpe to confirm that nrpe is listening and under the control of xinetd? 

 

(Sorry for the top post...I need a better mail client...Outlook totally stinks at the reply thing. Looking for a replacement now.).

 

 

Robert C. Cipriani

Senior Network Administrator

Tampa Bay Division IT

Bright House Networks

W: (727) 329-2000 x74264

M: (727) 365-1231

 

 

 

 

 

________________________________

From: nagios-users-bounces at lists.sourceforge.net [mailto:nagios-users-bounces at lists.sourceforge.net] On Behalf Of mohan.kumar3 at wipro.com
Sent: Wednesday, January 16, 2008 9:01 AM
To: marc at ena.com; nagios-users at lists.sourceforge.net
Subject: Re: [Nagios-users] Reg: glibc and openssl
Importance: High

 

Hi Marc,

 Thanks for your reply, I found the wrong entry under /etc/xinetd.d/nrpe and corrected the same but now i am receiving a CHECK_NRPE: Error - Could not complete SSL handshake error. But I can able to telnet.

 

Regards

G. Mohan Kumar
Senior Systems Engineer

 

Wipro Technologies

475-A, Old Mahabalipuram Road, 
Sozhanganallur,
Chennai- 600119. India
Tel:+91-44-30691933 
mohan.kumar3 at wipro.com
www.wipro.com

 

________________________________

From: nagios-users-bounces at lists.sourceforge.net on behalf of Marc Powell
Sent: Wed 1/16/2008 7:05 PM
To: nagios-users at lists.sourceforge.net
Subject: Re: [Nagios-users] Reg: glibc and openssl

 

On Jan 16, 2008, at 6:31 AM, <mohan.kumar3 at wipro.com> <mohan.kumar3 at wipro.com
 > wrote:

> Hi,
>  After upgrading a glibc and openssl on my client machine (Suse 9 
> SP3) the telnet to 5666 is not working from localhost and from 
> nagios server, nagios server couldn't communicate to that client. 
> pls help us to resolve this issue.
>
> Error:
> Connection refused by host
>

Have you done any troubleshooting at all you can share with us? Basic 
troubleshooting like verifying that NRPE is running on the machine, 
that it actually runs under the new glibc? Does netstat show it 
listening? Does nrpe debug mode show anything interesting? Is nrpe 
running as a daemon or from (x)inetd? Have you verified that 
configuration in either case? If run from xinetd, is xinetd running?

Depending on the version differences, those could be non-trivial 
upgrades and may require a re-compilation of nrpe on that machine. Of 
course, I'm assuming that you are talking about nrpe. If not, please 
be more specific.

--
Marc

> Thanks and Regards
> G. Mohan Kumar
> Senior Systems Engineer
>
...should know better...

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null


________________________________

CONFIDENTIALITY NOTICE: This e-mail may contain information that is privileged, confidential or otherwise protected from disclosure. If you are not the intended recipient of this e-mail, please notify the sender immediately by return e-mail, purge it and do not disseminate or copy it.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20080116/73f1225d/attachment.html>
-------------- next part --------------
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null