Nagios / Icinga（Debian Squeeze） -  CHECK_NRPE：错误 - 无法完成SSL握手。

错误：Nagios / Icinga（Debian Squeeze） - CHECK_NRPE：错误 - 无法完成SSL握手。

您尝试从Nagios / Icinga主机连接到这样的远程Nagios NRPE服务器...

/usr/lib/nagios/plugins/check_nrpe -H 9.8.7.6

...并得到以下错误：

root@server1:/etc/nagios-plugins/config# /usr/lib/nagios/plugins/check_nrpe -H 9.8.7.6 
 CHECK_NRPE: Error - Could not complete SSL handshake.
 root@server1:/etc/nagios-plugins/config#

解

在远程Nagios NRPE服务器上打开/etc/nagios/nrpe.cfg ...

vi /etc/nagios/nrpe.cfg

...并将您的Nagios / Icinga主机（本例中为1.2.3.4 ）的IP地址添加到allowed_hosts行：

[...]
# ALLOWED HOST ADDRESSES
# This is an optional comma-delimited list of IP address or hostnames
# that are allowed to talk to the NRPE daemon.
#
# Note: The daemon only does rudimentary checking of the client's IP
# address.  I would highly recommend adding entries in your /etc/hosts.allow
# file to allow only the specified host to connect to the port
# you are running this daemon on.
#
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd

allowed_hosts=127.0.0.1,1.2.3.4
[...]

保存文件并重新启动NRPE服务器：

/etc/init.d/nagios-nrpe-server restart