LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 10-12-2016, 01:57 AM   #1
deva420patra
LQ Newbie
 
Registered: Apr 2016
Posts: 29

Rep: Reputation: Disabled
Nagios : Issues- (1)CHECK_NRPE: Error - Could not complete SSL handshake. (2) CHECK_NRPE: Socket timeout after 30 seconds. (3) Sync missed


Dear Friends

I have added some AIX servers in Nagios, Some of them are added but there services are showing below errors:
CHECK_NRPE: Socket timeout after 30 seconds.
CHECK_NRPE: Error - Could not complete SSL handshake.

When I execute /usr/local/nagios/libexec/check_nrpe -H 10.129.16.22
NRPE v2.12

But alerts not generating in database server. It only gives above error for some services
I have telnet 5666 in nagios server & AIX server both are connecting.
I have also added nagios server IP in allowed_hosts in nrpe.cfg file in AIX server.

I have tried to reconfigure some of these services but re configuring gives me sync missed error in frontend, Tried a lot Apply Configuration but still the same.

Freely ask any details required.
 
Old 10-12-2016, 01:49 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by deva420patra View Post
Dear Friends
I have added some AIX servers in Nagios, Some of them are added but there services are showing below errors:
CHECK_NRPE: Socket timeout after 30 seconds.
CHECK_NRPE: Error - Could not complete SSL handshake.

When I execute /usr/local/nagios/libexec/check_nrpe -H 10.129.16.22 NRPE v2.12

But alerts not generating in database server. It only gives above error for some services
I have telnet 5666 in nagios server & AIX server both are connecting.
I have also added nagios server IP in allowed_hosts in nrpe.cfg file in AIX server.

I have tried to reconfigure some of these services but re configuring gives me sync missed error in frontend, Tried a lot Apply Configuration but still the same. Freely ask any details required.
Did you try to look up your error?? You don't say what version/distro of Linux, or what you mean by "tried a lot apply configuration" means...we can't guess as to what you've done/tried unless you tell us.

Just putting your error into Google pulls up several solutions, and an NRPE/Nagios guide, that tells you how to resolve them:
https://assets.nagios.com/downloads/...-Solutions.pdf
 
Old 10-14-2016, 05:30 AM   #3
deva420patra
LQ Newbie
 
Registered: Apr 2016
Posts: 29

Original Poster
Rep: Reputation: Disabled
Linux Version (Nagios Server)
2.6.32-358.2.1.el6.x86_64

Nrpe Version in nagios & client AIX server
NRPE v2.12

Telnet in nagios server-
telnet localhost nrpe
Trying ::1...
Connected to localhost (::1).
Escape character is '^]'.
Connection closed by foreign host.

Telnet in Client(AIX) server
telnet noifindb5 nrpe
Trying...
Connected to noifindb5.
Escape character is '^]'.
Connection closed.

Traceroute from client to Nagios server

traceroute -p 5666 Nagios Server
trying to get source for Nagios Server
source should be 10.129.18.101
traceroute to Nagios Server (Nagios Server) from 10.129.18.101 (10.129.18.101), 30 hops max
outgoing MTU = 1500
1 10.129.37.4 (10.129.37.4) 2 ms 1 ms 1 ms
2 172.16.64.5 (172.16.64.5) 3 ms 3 ms 3 ms
3 172.16.64.2 (172.16.64.2) 48 ms 50 ms 48 ms
4 Nagios Server (Nagios Server) 49 ms 49 ms 48 ms

Client(AIX) Nrpe configuration file :

LOG FACILITY

log_facility=daemon
pid_file=/var/run/nrpe.pid
server_port=5666
nrpe_user=nagios
nrpe_group=nagios
allowed_hosts=(Nagios Server IP)
dont_blame_nrpe=0
debug=0
command_timeout=60

connection_timeout=300
# The following examples use hardcoded command arguments...

command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10
command[check_load]=/usr/local/nagios/libexec/check_load -w 15,10,5 -c 30,25,20
command[check_hda1]=/usr/local/nagios/libexec/check_disk -w 20% -c 10% -p /dev/hda1
command[check_zombie_procs]=/usr/local/nagios/libexec/check_procs -w 5 -c 10 -s Z
command[check_total_procs]=/usr/local/nagios/libexec/check_procs -w 150 -c 200


Nagios server logs sample :

[Fri Oct 14 11:34:34 2016] SERVICE ALERT: 10.129.16.161;Swap Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 11:34:34 2016] SERVICE ALERT: 10.129.16.161;/temp Disk Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 11:39:26 2016] SERVICE ALERT: noifindb7;/finidx1nandedc;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 11:44:33 2016] SERVICE ALERT: 10.129.16.161;Load;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 11:54:44 2016] SERVICE ALERT: 10.129.16.161;/temp Disk Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 11:54:44 2016] SERVICE ALERT: 10.129.16.161;/var Disk Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 11:59:36 2016] SERVICE ALERT: noifindb7;/usr;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 11:59:39 2016] SERVICE ALERT: 10.129.16.161;SSH Server;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:04:50 2016] SERVICE ALERT: 10.129.16.161;/var Disk Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:14:55 2016] SERVICE ALERT: 10.129.16.161;SSH Server;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:21:12 2016] SERVICE ALERT: 10.129.16.161;Open Files;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:26:15 2016] SERVICE ALERT: noifindb7;/findata1bhiwani;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:26:15 2016] SERVICE ALERT: noifindb7;/findata1parbani;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:31:19 2016] SERVICE ALERT: 10.129.16.161;Users;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:36:22 2016] SERVICE ALERT: noifindb7;/finidx1nandedc;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 12:47:25 2016] SERVICE ALERT: noifindb7;/archchamolic;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:06:18 2016] SERVICE ALERT: noifindb7;/findata1parbani;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:06:21 2016] SERVICE ALERT: noifindb7;/oranainitl;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:06:21 2016] SERVICE ALERT: noifindb7;/findata1chamolic;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:29:35 2016] SERVICE ALERT: noifindb7;/finidx1nandedc;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:34:41 2016] SERVICE ALERT: noifindb7;/oranainitl;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:44:45 2016] SERVICE ALERT: noifindb7;/findata1chamolic;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:54:42 2016] SERVICE ALERT: noifinaw1;/Memory Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 13:54:55 2016] SERVICE ALERT: 10.129.16.161;Memory Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 14:06:09 2016] SERVICE ALERT: noifindb7;/archbhiwani;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 14:15:04 2016] SERVICE ALERT: 10.129.16.161;Sendmail;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 14:19:59 2016] SERVICE ALERT: noifindb7;/finidx1nandedc;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 14:20:31 2016] SERVICE ALERT: noifindb7;/findata1chamolic;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 14:25:04 2016] SERVICE ALERT: noifinaw1;cpu usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 14:26:30 2016] SERVICE ALERT: noifindb7;/oragarhwal;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:01:29 2016] SERVICE ALERT: noifindb7;/archbhiwani;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:05:11 2016] SERVICE ALERT: 10.129.16.161;Swap Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:05:11 2016] SERVICE ALERT: 10.129.16.161;/temp Disk Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:05:11 2016] SERVICE ALERT: noifindb7;/findata1parbani;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:05:11 2016] SERVICE ALERT: noifindb7;/findata1andaman;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:10:15 2016] SERVICE ALERT: noifindb7;/orausnagar;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:10:15 2016] SERVICE ALERT: noifindb7;/usr;CRITICAL;HARD;2;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:10:19 2016] SERVICE ALERT: 10.129.16.161;Sendmail;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.
[Fri Oct 14 15:30:12 2016] SERVICE ALERT: noifinaw3;Memory Usage;CRITICAL;HARD;5;CHECK_NRPE: Error - Could not complete SSL handshake.



I have added nagios IP in allowed_host in client server.
The thing i am not understanding is if i execute below test command then it won't show any SSL error:-
/usr/local/nagios/libexec/check_nrpe -H 10.129.18.101
NRPE v2.12

But logs & alerts are showing SSL connection error.
Any suggestions ??
 
Old 10-14-2016, 09:30 AM   #4
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Did you follow and check ALL the things referenced in the Nagios PDF file you were given???
 
Old 10-15-2016, 09:24 AM   #5
MadeInGermany
Senior Member
 
Registered: Dec 2011
Location: Simplicity
Posts: 2,768

Rep: Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193
I suspect your nrpe for AIX is without SSL support.
Check with
Code:
check_nrpe -H 10.129.18.101 -s
 
Old 10-15-2016, 10:25 AM   #6
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by MadeInGermany View Post
I suspect your nrpe for AIX is without SSL support.
Check with
Code:
check_nrpe -H 10.129.18.101 -s
Yep...that was in that PDF from Nagios, which I'm guessing the OP didn't read/follow.
 
Old 10-19-2016, 12:37 AM   #7
deva420patra
LQ Newbie
 
Registered: Apr 2016
Posts: 29

Original Poster
Rep: Reputation: Disabled
check_nrpe -H 10.129.18.101 -s is not working
so used check_nrpe -H 10.129.18.101 -n & got below o/p
CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.

SSL handshak issue is there but same service which gives this error also gives alert after 10 minutes:- (E.g)

15516188 | 149 | noifindb7 | CHECK_NRPE: Error - Could not complete SSL handshake. | NULL | /archparbani | 2 | 2 | 0 | | 2016-10-19 10:06:26 |
| 15516199 | 149 | noifindb7 | DISK WARNING - free space: /archparbani 1486 MB (14% inode=99%): | NULL | /archparbani | 1 | 3 | 0 | | 2016-10-19 10:11:26 |

In My AIX system We install nrpe through binary files: below link
https://assets.nagios.com/downloads/...772.1455031087

Can you please guide how to check the nrpe with or without SSL support in AIX server

Last edited by deva420patra; 10-19-2016 at 03:52 AM. Reason: Need to ask about SSL support
 
Old 10-19-2016, 07:37 AM   #8
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by deva420patra View Post
check_nrpe -H 10.129.18.101 -s is not working
so used check_nrpe -H 10.129.18.101 -n & got below o/p
CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.

SSL handshak issue is there but same service which gives this error also gives alert after 10 minutes:- (E.g)

15516188 | 149 | noifindb7 | CHECK_NRPE: Error - Could not complete SSL handshake. | NULL | /archparbani | 2 | 2 | 0 | | 2016-10-19 10:06:26 |
| 15516199 | 149 | noifindb7 | DISK WARNING - free space: /archparbani 1486 MB (14% inode=99%): | NULL | /archparbani | 1 | 3 | 0 | | 2016-10-19 10:11:26 |

In My AIX system We install nrpe through binary files: below link
https://assets.nagios.com/downloads/...772.1455031087

Can you please guide how to check the nrpe with or without SSL support in AIX server
You have been 'guided' to the instructions, and handed a PDF that tells you how to fix these things. You have either not read it or not followed it. Can't 'guide you' further.

The SSL handshake isn't working, and the check_nrpe is saying so. The entire section III in the PDF that we not only looked up for you but handed TO you, tells you how to check/fix this error. You *STILL* haven't said if you've followed all the steps in it...we can't guess as to what you've done, but everything you've TOLD US indicates you haven't.
 
Old 10-21-2016, 01:23 AM   #9
deva420patra
LQ Newbie
 
Registered: Apr 2016
Posts: 29

Original Poster
Rep: Reputation: Disabled
I have followed the steps mentioned in that sheet, I was even refereed that sheet before posting in this form.

As per the pdf these things are already done in my AIX Server :
nano /usr/local/nagios/etc/nrpe.cfg
allowed_hosts = Nagios Server IP

xinetd is not installed in AIX server.

Below settings I dnt have in my AIX server, So I am not getting how to link Nrpe & SSL.
***SSL Not Compiled In:
The other common cause is that NRPE was not compiled with ssl enabled. To recompile NRPE with ssl support, browse to your NRPE
source directory (usually in /tmp/nrpe-2.14 if you followed the compiling NRPE from source document) and re-compile using the –
enable-ssl
flag
:
cd /tmp/nrpe-2.14
./configure --enable-ssl
make all
make install***
 
Old 10-21-2016, 08:44 AM   #10
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 26,553

Rep: Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946Reputation: 7946
Quote:
Originally Posted by deva420patra View Post
I have followed the steps mentioned in that sheet, I was even refereed that sheet before posting in this form.

As per the pdf these things are already done in my AIX Server :
nano /usr/local/nagios/etc/nrpe.cfg
allowed_hosts = Nagios Server IP
...and you STILL mention nothing about putting it in the /etc/hosts file.....which is ALSO in that sheet, or did you miss it?
Quote:
xinetd is not installed in AIX server.

Below settings I dnt have in my AIX server, So I am not getting how to link Nrpe & SSL.
***SSL Not Compiled In:
The other common cause is that NRPE was not compiled with ssl enabled. To recompile NRPE with ssl support, browse to your NRPE
source directory (usually in /tmp/nrpe-2.14 if you followed the compiling NRPE from source document) and re-compile using the –
enable-ssl
flag
:
cd /tmp/nrpe-2.14
./configure --enable-ssl
make all
make install***
...and not telling us you didn't compile SSL in is a huge problem. How, exactly, do you think you can use SSL, if you DON'T HAVE IT??? Again, read the instructions, and follow them. They TELL YOU how to compile NRPE with SSL.
 
Old 10-21-2016, 02:57 PM   #11
MadeInGermany
Senior Member
 
Registered: Dec 2011
Location: Simplicity
Posts: 2,768

Rep: Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193Reputation: 1193
I once downloaded an nrpe precompiled for AIX 5.3 with its openssl 0.9.7 from this
 
Old 02-06-2017, 06:23 AM   #12
deva420patra
LQ Newbie
 
Registered: Apr 2016
Posts: 29

Original Poster
Rep: Reputation: Disabled
Thumbs up

Done research from below link
https://assets.nagios.com/downloads/...-Solutions.pdf

Also removed all my monitoring parameters from AIX servers and re-added it and restart the nrpe,xinetd process in AIX and Nagios server solved my issue.
 
  


Reply

Tags
nagios, nrpe


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
CHECK_NRPE: Error - Could not complete SSL handshake. alberto.alonso Linux - Newbie 2 08-23-2014 02:01 PM
Nagios: CHECK_NRPE: Error - Could not complete SSL handshake jonaskellens Linux - Newbie 8 08-23-2014 01:56 PM
CHECK_NRPE: Error - Could not complete SSL handshake. bluethundr Linux - Server 2 01-23-2014 07:14 AM
[SOLVED] NAGIOS problem: CHECK_NRPE: Error - Could not complete SSL handshake. 4Paul4 Linux - Software 2 05-28-2012 06:19 PM
CHECK_NRPE: Error - Could not complete SSL handshake glennbtn Linux - Software 1 04-10-2012 07:52 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:38 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration