CHECK_NRPE: Error - Could not complete SSL handshake.

aiqihz@163.com

在nagios服务器端执行以下命令报错：

[iyunv@nagios libexec]# ./check_nrpe -H localhost

NRPE v2.12
[iyunv@nagios libexec]# ./check_nrpe -H 192.168.1.18
CHECK_NRPE: Error - Could not complete SSL handshake.
[iyunv@nagios libexec]# ./check_nrpe -H 192.168.1.52
CHECK_NRPE: Socket timeout after 10 seconds.
[iyunv@nagios libexec]# ./check_nrpe -H 127.0.0.1

NRPE v2.12

其中192.168.1.18是本地ip，192.168.1.52是被监控端ip，被监控端执行命令结果如下：

# ./check_nrpe -H 192.168.1.52
NRPE v2.12

客户端nrpe.cfg配置为：

# ALLOWED HOST ADDRESSES
# This is an optional comma-delimited list of IP address or hostnames
# that are allowed to talk to the NRPE daemon.
#
# Note: The daemon only does rudimentary checking of the client's IP
# address.  I would highly recommend adding entries in your /etc/hosts.allow
# file to allow only the specified host to connect to the port
# you are running this daemon on.
#
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd


allowed_hosts=192.168.1.18,127.0.0.1

# SERVER ADDRESS
# Address that nrpe should bind to in case there are more than one interface
# and you do not want nrpe to bind on all interfaces.
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd


#server_address=192.168.1.52

请问是什么错误？另外nagiso nrpe自身有没有日志文件？谢谢！?

sky

CHECK_NRPE: Error - Could not complete SSL handshake.



解决方法：——>确保两边的防火墙都可以让5666端口通过！
　　在被控端


#vi /etc/xinetd.d/nrpe

  only_from //增加主控IP

  #vi /usr/local/nagios/etc/nrpe.cfg

  allowed_hosts //增加主控IP

  #service xinetd restart





在监控端：

/usr/local/nagios/libexec/check_nrpe -H 被监控端IP

——>测试是否连接成功（返回nrpe的版本为正确）



问题：安装nrpe，编译的时候提示以下信息
　　　　checking for SSL headers... configure: error: Cannot find ssl headers

　　原因是缺少openssl-devel包，
　　　　yum -y install openssl-devel

aiqihz@163.com

感谢版主回复，但并不是第二个问题导致：

[iyunv@nagios nrpe-2.15]# yum -y install openssl-devel
Loaded plugins: product-id, refresh-packagekit, security, subscription-manager, versionlock
Updating certificate-based repositories.
Unable to read consumer identity
Setting up Install Process
Package openssl-devel-1.0.0-20.el6_2.5.x86_64 already installed and latest version
Nothing to do

对于第一个问题，我监控的平台是AIX，没有xined.d这个目录呢，需要从别的地方设置吗？

#vi /usr/local/nagios/etc/nrpe.cfg

  allowed_hosts //增加主控IP

这个已经修改好的。

aiqihz@163.com

对了，别监控端应该是没有开启防火墙的，真不知道是什么问题，彻底铲除重装任然是这样。