Check_NRPE + NSClient

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
jolejo10
Posts: 1
Joined: Wed Feb 14, 2018 10:56 am

Check_NRPE + NSClient

Post by jolejo10 »

Hello, first time here on the forum. Been using nagios for 2-3 years.
While trying to help the community, by doing tutorial video about making a complete system from nagios core. graph+ notification...
I'm having a problem that seem easy but I cannot go through.

Install the lastest nagios and pluging in a new VM ubuntu 18.04 and NSClient++ on another Windows 10.

I'm able to check the server itself by doing the following command.

Code: Select all

./check_nrpe -H 127.0.0.1
NRPE v3.2.1
When I try to do the same thing on the Windows host with NSClient it's giming me this error.

Code: Select all

./check_nrpe -H 192.168.7.177
CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 192.168.7.177: 1
I've tried a working configuration and it still doing the same error. I even try to downgrade the NSClient Version to 4.xxxx . So I don't think it's a NSClient issue. Someone has an idea?



Here the basic config of NSClient.

Code: Select all

[/settings/default]
allowed hosts = 192.168.7.157
[/settings/NRPE/server]
ssl options = 
verify mode = none
insecure = true
[/modules]
NRPEServer = 1
192.168.7.157 = Nagios test server.
192.168.7.177 = Windows 10 + NSClient.
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Check_NRPE + NSClient

Post by mcapra »

Here's a post from @lmiltchev in the customer support section:
https://support.nagios.com/forum/viewto ... 09#p258830
lmiltchev wrote: Try the following:

1. Commend out these two lines in nsclient.ini file:

Code: Select all

; ssl options = no-sslv2,no-sslv3
; verify mode = peer-cert

2. Add the following line under the [/settings/NRPE/server] section:

Code: Select all

allowed ciphers = ALL:!MD5:@STRENGTH

3. Save, exit, and restart the nsclient++ service.

Did this help?
Give those a try and let us know if they don't work.
Former Nagios employee
https://www.mcapra.com/
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Check_NRPE + NSClient

Post by tgriep »

Thanks @mcapra for the help.

The ssl setting for NRPE is missing so under this section

Code: Select all

[/settings/NRPE/server]
Add this

Code: Select all

use ssl = 1
Save the file and restart NSClient++ which will make sure SSL is enabled in the agent.
Also, make sure port 5666 is enabled through the firewall.

If it still doesn't work, post the errors from the nsclient.log file on the Windows system to the post so we can view them.
Be sure to check out our Knowledgebase for helpful articles and solutions!