On 28.01.2014 16:36, Mark Haney wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 1/28/2014 10:25 AM, Michael Friedrich wrote:


services["checkpgsql"] = { templates = [ "generic-service" ],
check_command = "check_nrpe", macros = { command = "check_pgsql",
} },

macros = { address = "10.10.10.1", }, }

As it's setup, this works in part.  The 'check_load' section works
just fine.  I get the load average displayed.  But, the
check_pgsql plugin gives the error 'NRPE: 'check_pgsql' not
defined'.

show us your nrpe.cfg on the remote client.

Duh.  The check_pgsql command isn't setup in nrpe.cfg.

1 point for me for guessing correctly. You're reaching beer level soon :-P

So, that's one
part of it.  Now, how do I set it up correctly to let me pass the
username and password as arguments?  Or, would it be better to
hardcode it?  Neither is terribly secure, granted, but the user I'm
using can only run select queries, so isn't dangerous to the DB.

I wouldn't use -a on nrpe given its lack of security in its current ssl implementation. Rather put those credentials directly on the client, for instance available as environment variables passed using the init script includes. That way they are hidden on ps output, and users may not see them by cat'ing nrpe.cfg either.

Automation tools such as puppet can easily deploy such snippets from your central configuration entity, if it exists.


- --
Mark Haney
Network Administrator/IT Support
Practichem
W:919-714-8428
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJS586UAAoJEDgEuzPE0JQv4rEH/Aj2diyScMa9H8tkV06Jjvyy
rib5szzkm9l3Qm5ahXVLSoQaze/TbE8kla5ZgW42Boohqb0DARcRMkEwtGO8ifuT
FJYhQunl1cIroGKMkBcErJ5/VF9FMFQg/enooD3kQQ+VKJVVnl4JgF37UyWQxcUI
oofmKB40ICkQEnQfQtKpGazRvErgW8X+mpZdDzCPfxyqALtsQm3EezocJt5Dl9vW
Cf7WTmGVOGLpLv9A7SfRoqzhkcy9kcjdpsqykzs5NZr1byxYY510WCBXxvu0Bw3M
bgAWZVIrAUmKfCtmHKjhPCPOAiIazWtG+QE7QkyV+EPOMgp6XGEzmIAiSO+FXM4=
=UhLk
-----END PGP SIGNATURE-----

_______________________________________________
icinga-users mailing list
icinga-users@lists.icinga.org
https://lists.icinga.org/mailman/listinfo/icinga-users



--
DI (FH) Michael Friedrich

mail:     michael.friedr...@gmail.com
twitter:  https://twitter.com/dnsmichi
jabber:   dnsmi...@jabber.ccc.de
irc:      irc.freenode.net/icinga dnsmichi

icinga open source monitoring
position: lead core developer
url:      https://www.icinga.org
_______________________________________________
icinga-users mailing list
icinga-users@lists.icinga.org
https://lists.icinga.org/mailman/listinfo/icinga-users

Reply via email to