NRPEv2



  • first sorry for my bad english

    I downloaded nrpe v2 package
    after installation completed i've tried to check output from my nagios box i get this message:

    "CHECK_NRPE: Received 0 bytes from daemon.  Check the remote server logs for error messages"

    after i do tail -f /var/log/system.log on my pfsense box
    and i seen this error message

    May 21 08:02:10 pfsense nrpe[25172]: Host 192.168.0.x is not allowed to talk to us!

    after i've try to put nagios ip 2 times

    192.168.0.x;192.168.0.x

    syslog msg = May 21 08:05:03 pfsense nrpe[25522]: Allowing connections from: 192.168.0.142
    nagios command output = NRPE: Unable to read output

    and now i get this message
    anyone can help me ?

    thank you



  • Hi ,

    I think you should disable SSL communication for the checks to the pfsense . There were several problems with ssl enbled .



  • I am having the same issue here, and I did disable SSL, but I get the same output. Anyone else have suggestions?

    Edit: actually I found that my problem is better described here:
    http://forum.pfsense.org/index.php/topic,16346.0.html



  • I am also having the same problem

    
    # /usr/local/libexec/nagios/check_nrpe -n -H 192.168.77.1 -c check_load
    
    NRPE: Unable to read output
    
    

    Has anyone found a solution?



  • Hi there, i find i solution to this problem.

    This is really strange, go to the NRPEv2 page settings, leave all the settings like the manual says, then only change the listen port to 5667. After that try to run the check command with the -n option (NO SSL) but using the default port -5666. It's works for me, i restarted de pfsense box several times and it's still working, the config page shows 5667 but if you cat /usr/etc/nrpe.cfg it's shows 5666.

    Max


  • Rebel Alliance Moderator

    I'm having quite similar issues but as I checked pfSense and the package found out it has nothing to do with the configuration.

    As I tested nagios access to pfSense with "./check_nrpe -n -H 10.3.0.54 -c check_total_procs" on the nagios host, I got the same result as you guys:

    NRPE: Unable to read output
    

    By logging in to pfSense via SSH i searched for the check binary and found it at /usr/local/libexec/nagios.
    If you run /usr/local/libexec/nagios/check_procs manually it shows

    /libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "check_procs"
    

    This is on NanoBSD platform running 1.2.3rc. So I suppose there are dependencies not checked yet, or am I wrong?

    Greets
    Jens


  • Rebel Alliance Moderator

    Short notice: I fixed the issue by installing libiconv and texinfo packages manually

    
    gate:/usr/local/libexec/nagios# ./check_procs 
    /libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "check_procs"
    
    gate:/usr/local/libexec/nagios#  ldd ./check_load
    ./check_load:
    	libintl.so.8 => not found (0x0)
    	libiconv.so.3 => not found (0x0)
    	libc.so.7 => /lib/libc.so.7 (0x28174000)
    
    gate:/usr/local/libexec/nagios#  pkg_add -r libiconv
    Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/libiconv.tbz... Done.
    
    gate:/usr/local/libexec/nagios#  ldd ./check_load
    ./check_load:
    	libintl.so.8 => not found (0x0)
    	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x2807f000)
    	libc.so.7 => /lib/libc.so.7 (0x28174000)
    
    gate:/usr/local/libexec/nagios#  pkg_add -r texinfo
    Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/texinfo.tbz... Done.
    Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/gettext-0.17_1.tbz... Done.
    install-info: not found
    pkg_add: command 'install-info --quiet /usr/local/info/autosprintf.info /usr/local/info/dir' failed
    install-info: not found
    pkg_add: command 'install-info --quiet /usr/local/info/gettext.info /usr/local/info/dir' failed
    
    gate:/usr/local/libexec/nagios#  ldd check_tcp 
    check_tcp:
    	libssl.so.5 => /usr/lib/libssl.so.5 (0x28082000)
    	libcrypto.so.5 => /lib/libcrypto.so.5 (0x280c3000)
    	libintl.so.8 => /usr/local/lib/libintl.so.8 (0x2821c000)
    	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x28225000)
    	libc.so.7 => /lib/libc.so.7 (0x2831a000)
    
    

    So it does throw errors about install-info not available, but that doesn't stop it from extracting the needed library.

    But please (to the maintainer auf the package) fix those dependency issues, so one hasn't to manually add packages, that are perhaps overwritten/forgotten after updating the base system. At least deliver the needed libraries with the package :)

    Thankies!
    J.



  • @Grey:

    Short notice: I fixed the issue by installing libiconv and texinfo packages manually

    
    gate:/usr/local/libexec/nagios# ./check_procs 
    /libexec/ld-elf.so.1: Shared object "libintl.so.8" not found, required by "check_procs"
    
    gate:/usr/local/libexec/nagios#  ldd ./check_load
    ./check_load:
    	libintl.so.8 => not found (0x0)
    	libiconv.so.3 => not found (0x0)
    	libc.so.7 => /lib/libc.so.7 (0x28174000)
    
    gate:/usr/local/libexec/nagios#  pkg_add -r libiconv
    Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/libiconv.tbz... Done.
    
    gate:/usr/local/libexec/nagios#  ldd ./check_load
    ./check_load:
    	libintl.so.8 => not found (0x0)
    	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x2807f000)
    	libc.so.7 => /lib/libc.so.7 (0x28174000)
    
    gate:/usr/local/libexec/nagios#  pkg_add -r texinfo
    Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/Latest/texinfo.tbz... Done.
    Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-7.2-release/All/gettext-0.17_1.tbz... Done.
    install-info: not found
    pkg_add: command 'install-info --quiet /usr/local/info/autosprintf.info /usr/local/info/dir' failed
    install-info: not found
    pkg_add: command 'install-info --quiet /usr/local/info/gettext.info /usr/local/info/dir' failed
    
    gate:/usr/local/libexec/nagios#  ldd check_tcp 
    check_tcp:
    	libssl.so.5 => /usr/lib/libssl.so.5 (0x28082000)
    	libcrypto.so.5 => /lib/libcrypto.so.5 (0x280c3000)
    	libintl.so.8 => /usr/local/lib/libintl.so.8 (0x2821c000)
    	libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x28225000)
    	libc.so.7 => /lib/libc.so.7 (0x2831a000)
    
    

    So it does throw errors about install-info not available, but that doesn't stop it from extracting the needed library.

    But please (to the maintainer auf the package) fix those dependency issues, so one hasn't to manually add packages, that are perhaps overwritten/forgotten after updating the base system. At least deliver the needed libraries with the package :)

    Thankies!
    J.

    With 1.2.3 released, I would just like to second this request.

    There also appears to be a bug sometimes where the "state" of the enabled check box is lost or reversed. I have seen instances where the service is not running when the box is checked, but if you uncheck it and then save, it will start the service. I believe, if you leave the checkbox alone and just hit save it will toggle the state of the service too, so it's almost like it's always toggling it and the checkbox is actually not used.

    If possible, SSL support for NRPE would be great as well.


Log in to reply