NRPEv2

mikesamo

first sorry for my bad english

I downloaded nrpe v2 package
after installation completed i've tried to check output from my nagios box i get this message:

"CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages"

after i do tail -f /var/log/system.log on my pfsense box
and i seen this error message

May 21 08:02:10 pfsense nrpe[25172]: Host 192.168.0.x is not allowed to talk to us!

after i've try to put nagios ip 2 times

192.168.0.x;192.168.0.x

syslog msg = May 21 08:05:03 pfsense nrpe[25522]: Allowing connections from: 192.168.0.142
nagios command output = NRPE: Unable to read output

and now i get this message
anyone can help me ?

thank you

w.hackl

Hi ,

I think you should disable SSL communication for the checks to the pfsense . There were several problems with ssl enbled .

Briantist

I am having the same issue here, and I did disable SSL, but I get the same output. Anyone else have suggestions?

Edit: actually I found that my problem is better described here:
http://forum.pfsense.org/index.php/topic,16346.0.html

murray.bryant

I am also having the same problem


# /usr/local/libexec/nagios/check_nrpe -n -H 192.168.77.1 -c check_load

NRPE: Unable to read output

Has anyone found a solution?

mmaneiro

Hi there, i find i solution to this problem.

This is really strange, go to the NRPEv2 page settings, leave all the settings like the manual says, then only change the listen port to 5667. After that try to run the check command with the -n option (NO SSL) but using the default port -5666. It's works for me, i restarted de pfsense box several times and it's still working, the config page shows 5667 but if you cat /usr/etc/nrpe.cfg it's shows 5666.

Max

JeGr

I'm having quite similar issues but as I checked pfSense and the package found out it has nothing to do with the configuration.

As I tested nagios access to pfSense with "./check_nrpe -n -H 10.3.0.54 -c check_total_procs" on the nagios host, I got the same result as you guys:

NRPE: Unable to read output

By logging in to pfSense via SSH i searched for the check binary and found it at /usr/local/libexec/nagios.
If you run /usr/local/libexec/nagios/check_procs manually it shows

/libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "check_procs"

This is on NanoBSD platform running 1.2.3rc. So I suppose there are dependencies not checked yet, or am I wrong?

Greets
Jens

JeGr

Short notice: I fixed the issue by installing libiconv and texinfo packages manually


gate:/usr/local/libexec/nagios# ./check_procs 
/libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "check_procs"

gate:/usr/local/libexec/nagios#  ldd ./check_load
./check_load:
	libintl.so.8 => not found (0x0)
	libiconv.so.3 => not found (0x0)
	libc.so.7 => /lib/libc.so.7 (0x28174000)

gate:/usr/local/libexec/nagios#  pkg_add -r libiconv
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/libiconv.tbz... Done.

gate:/usr/local/libexec/nagios#  ldd ./check_load
./check_load:
	libintl.so.8 => not found (0x0)
	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x2807f000)
	libc.so.7 => /lib/libc.so.7 (0x28174000)

gate:/usr/local/libexec/nagios#  pkg_add -r texinfo
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/texinfo.tbz... Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/gettext-0.17_1.tbz... Done.
install-info: not found
pkg_add: command 'install-info --quiet /usr/local/info/autosprintf.info /usr/local/info/dir' failed
install-info: not found
pkg_add: command 'install-info --quiet /usr/local/info/gettext.info /usr/local/info/dir' failed

gate:/usr/local/libexec/nagios#  ldd check_tcp 
check_tcp:
	libssl.so.5 => /usr/lib/libssl.so.5 (0x28082000)
	libcrypto.so.5 => /lib/libcrypto.so.5 (0x280c3000)
	libintl.so.8 => /usr/local/lib/libintl.so.8 (0x2821c000)
	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x28225000)
	libc.so.7 => /lib/libc.so.7 (0x2831a000)

So it does throw errors about install-info not available, but that doesn't stop it from extracting the needed library.

But please (to the maintainer auf the package) fix those dependency issues, so one hasn't to manually add packages, that are perhaps overwritten/forgotten after updating the base system. At least deliver the needed libraries with the package :)

Thankies!
J.

Briantist

@Grey:

Short notice: I fixed the issue by installing libiconv and texinfo packages manually


gate:/usr/local/libexec/nagios# ./check_procs 
/libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "check_procs"

gate:/usr/local/libexec/nagios#  ldd ./check_load
./check_load:
	libintl.so.8 => not found (0x0)
	libiconv.so.3 => not found (0x0)
	libc.so.7 => /lib/libc.so.7 (0x28174000)

gate:/usr/local/libexec/nagios#  pkg_add -r libiconv
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/libiconv.tbz... Done.

gate:/usr/local/libexec/nagios#  ldd ./check_load
./check_load:
	libintl.so.8 => not found (0x0)
	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x2807f000)
	libc.so.7 => /lib/libc.so.7 (0x28174000)

gate:/usr/local/libexec/nagios#  pkg_add -r texinfo
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/texinfo.tbz... Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/gettext-0.17_1.tbz... Done.
install-info: not found
pkg_add: command 'install-info --quiet /usr/local/info/autosprintf.info /usr/local/info/dir' failed
install-info: not found
pkg_add: command 'install-info --quiet /usr/local/info/gettext.info /usr/local/info/dir' failed

gate:/usr/local/libexec/nagios#  ldd check_tcp 
check_tcp:
	libssl.so.5 => /usr/lib/libssl.so.5 (0x28082000)
	libcrypto.so.5 => /lib/libcrypto.so.5 (0x280c3000)
	libintl.so.8 => /usr/local/lib/libintl.so.8 (0x2821c000)
	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x28225000)
	libc.so.7 => /lib/libc.so.7 (0x2831a000)

So it does throw errors about install-info not available, but that doesn't stop it from extracting the needed library.

But please (to the maintainer auf the package) fix those dependency issues, so one hasn't to manually add packages, that are perhaps overwritten/forgotten after updating the base system. At least deliver the needed libraries with the package :)

Thankies!
J.

With 1.2.3 released, I would just like to second this request.

There also appears to be a bug sometimes where the "state" of the enabled check box is lost or reversed. I have seen instances where the service is not running when the box is checked, but if you uncheck it and then save, it will start the service. I believe, if you leave the checkbox alone and just hit save it will toggle the state of the service too, so it's almost like it's always toggling it and the checkbox is actually not used.

If possible, SSL support for NRPE would be great as well.