Cant get Nagios/Op5 to connect via NSclient to windows Server


#1

Hey guys i have installed NSclient on a windows server and im trying to get it work. But i just cant get it to work!

Im trying to test via OP5: USER1_/check_nrpe -s -H 10.1.10.63 -c CheckUpTime -a ShowAll MinWarn=0s Result code: UNKNOWN CHECK_NRPE: Can not connect to a host over SSL.

and the logs on the server show in the nsclient log: 2016-11-29 14:20:14: error:c:\source\master\modules\NRPEServer\NRPEServer.cpp:123: CA not found: C:\Program Files\NSClient++/security/ca.pem (generating a default CA) 2016-11-29 14:30:44: error:c:\source\master\include\check_nt/server/protocol.hpp:64: Rejected connection from: 10.151.6.11 2016-11-29 14:35:45: error:c:\source\master\include\check_nt/server/protocol.hpp:64: Rejected connection from: 10.151.6.11 2016-11-29 14:35:55: error:c:\source\master\include\check_nt/server/protocol.hpp:64: Rejected connection from: 10.151.6.11 2016-11-29 15:03:46: error:c:\source\master\include\socket/connection.hpp:251: Seems we cant agree on SSL: no shared cipher 2016-11-29 15:03:46: error:c:\source\master\include\socket/connection.hpp:252: Please review the insecure options as well as ssl options in settings. 2016-11-29 15:06:57: error:c:\source\master\include\check_nt/server/protocol.hpp:64: Rejected connection from: 10.151.6.11 2016-11-29 15:07:00: error:c:\source\master\include\check_nt/server/protocol.hpp:64: Rejected connection from: 10.151.6.11 2016-11-29 15:12:42: error:c:\source\master\include\socket/connection.hpp:251: Seems we cant agree on SSL: no shared cipher 2016-11-29 15:12:42: error:c:\source\master\include\socket/connection.hpp:252: Please review the insecure options as well as ssl options in settings. 2016-11-29 15:12:43: error:c:\source\master\include\socket/connection.hpp:251: Seems we cant agree on SSL: no shared cipher 2016-11-29 15:12:43: error:c:\source\master\include\socket/connection.hpp:252: Please review the insecure options as well as ssl options in settings. 2016-11-29 15:13:28: error:c:\source\master\include\socket/server.hpp:239: Failed to handle incoming connection: remote_endpoint: The file handle supplied is not valid . What im i doing wrong ? i Can ping from the OP5 server to the Windows server. Does anyone know ? Thanks for all you help


#2

Ping works through ICMP, which isn’t the same protocol as TCP or UDP. You can have all the usual ports closed but still ping successfully.

The good news is that you are seeing log entries on the host (the target Windows machine), so the port seems open and even the NSCP agent is getting something. This means you may not need to bring your network admin into the situation, which is good. Let’s look at some of the errors:

I searched with that message and found an old forum post that could help. After that it’s trying to bounce down through accepted SSL approaches but finding no common ground. Your monitor server gets across the water, but it doesn’t have a passport.

Have you configured a password in the NSCP section of the Windows Registry? Start there and reply with your results.


#3

Hello i do not think that i have done this. Where whould one go bout finding a guide to check if this is done?