Version 2.3 of monitoring plugins did two things:
- change how multiple addresses are expected; no longer a single
argument, with comma separated values, but repeated "-a" argument;
sadly this is incompatible change, and configs need to be changed
manually; this is commit
monitoring-plugins/monitoring-plugins@a03068743f;
- add a "-L" argument that requires all passed addresses to be
matched, which allows for stronger validation (all vs. at least
one); this is commit
monitoring-plugins/monitoring-plugins@fd9a7d2e00;
Both of these were committed a long while ago (2018), but were only
released very recently, in the 2.3 release (December 2020).
I've tried to make the descriptions as good as I could, but not sure
they're very readable, feedback welcome.
Signed-off-by: Iustin Pop <iustin@k1024.org>
To use PKI with nrpe, a CA must be specified and anonymous DH must be disabled.
If client certificates are enforced by nrped, additionally a private cert and key
must be specified. This patch adds all these parameters as well TLS configuration
options to limit the TLS version and crypto parameters:
nrpe_ca - The CA file to use for PKI. Defaults to none.
nrpe_cert - The client cert file to use for PKI. Defaults to none.
nrpe_key - The client key file to use for PKI. Defaults to none.
nrpe_ssl_version - The SSL/TLS version to use. Defaults to TLSv1+.
nrpe_cipher_list - The list of SSL ciphers to use. Default depends on check_nrpe version.
nrpe_dh_opt - Anonymous Diffie Hellman use: 0 = deny, 1 = allow, 2 = force.
Default depends on check_nrpe version.
This replaces the previous "dummy" CheckCommand, and the user won't
notice it. Provided performance data will be parsed the same way.
This saves a shell fork and check_dummy execution.
We're relying on this when creating cluster checks with Icinga 2 DSL
and more. If one does not have the plugins installed, this then also works.
fixes#5740
Ensure argument order for inode parameters and "all"-flag is the same as for other disk-free options and partition-parameter. As a result the inode-checks should actually work with the "disk_all" (-A) flag.
This commit also adds documentation for the `disk_exclude_type`
default values.
fixes#5016
Signed-off-by: Michael Friedrich <michael.friedrich@icinga.com>
Without this, we check the wrong cert when SNI is used:
./check_tcp -H git.netsandbox.de -p 443 -D 30,10
OK - Certificate 'netsandbox.de' will expire on 2017-04-19 12:01
+0200/CEST.
./check_tcp -H git.netsandbox.de -p 443 -D 30,10 -N git.netsandbox.de
OK - Certificate 'git.netsandbox.de' will expire on 2017-04-15 14:06
+0200/CEST.
fixes#4936
Signed-off-by: Gunnar Beutner <gunnar.beutner@icinga.com>
Napsty
Peter Eckel
Alexander Aleksandrovič Klimov
Iustin Pop
Yonas Habteab
Jochen Friedrich
Max Deparade
Peter Eckel
Michael Friedrich
BarbUk
Adam James
Robert Lindgren
Markus Frosch
Gunnar Beutner
Michael Insel
Gunnar Beutner
Michael
Harald Laabs
Dirk Melchers
Roland Hopferwieser
Yannick Charton
Markus Waldmueller
Petr Ruzicka
Jean Flach
Niflou
Pawel Szafer
Zachary McGibbon
Dirk Goetz
Christian Schmidt
Thomas Widhalm
Kálmán Szalai - KAMI
Mathieu Arnold
Georg Haas
Christian Loos