[Nagiosplug-help] Pushing Nagios plugins over ssh

[Sand Philipp]

I tried authorized_keys and authorized_keys2 ... Both not working :-/
I also tried the workaround with the ssh dir instead of .ssh
I also used the public key from dsa, rsa and rsa1... Still not working
.
.
Do you have to use the administrator user to do this preshared key stuff?
Currently I'm using my own domain user with local administrative priveliges.
I googled around but didn't find anything. A hole lot of ppl who got the same problem, but I haven't found a real guide how to solve the Problem...is there a how-to or someting down the net and I'm just to blind to find it?

Regards,
Philipp

> -----Original Message-----
> From: Jacob Joseph [mailto:jmjoseph at andrew.cmu.edu] 
> Sent: Friday, July 02, 2004 6:10 PM
> To: Sand Philipp
> Subject: Re: [Nagiosplug-help] Pushing Nagios plugins over ssh
> 
> I've googled a bit for this problem and have come up with a 
> few links you might take a peek at:
> 
> http://archive.erdelynet.com/ssh-l/2003-12/msg00045.php
> http://www.derkeiler.com/Mailing-Lists/securityfocus/Secure_Sh
ell/2003-01/0053.html
> 
> Did you try using authorized_keys rather than 
> authorized_keys2?  How 'bout putting it in $HOME/ssh/ rather 
> than $HOME/.ssh?
> 
> -Jacob
> 
> Sand Philipp wrote:
> >>>Ok, I got the script running with linux now. Is it possible
> >>
> >>to use it for windows, too?
> >>
> >>>If it's possible I've got two basic questions:
> >>>1. which kind of plugions do i have to use? Those windows
> >>
> >>specific from nrpe_nt client i guess?
> >>Well, either compile them to run on windows, or install 
> Python and use 
> >>those that I've written as a start.  You'll notice that half of my 
> >>purpose was to achieve platform/architecture independence, which is 
> >>only going to be possible with an interpreted(or bytecode) language 
> >>like python.
> > 
> > Hmm don't know how i can explain that to our windows admin 
> group *g* 
> > we'll see :)
> > 
> >  
> > 
> >>>2. How can I make ssh to an Windows Box useing OpenSSH for
> >>
> >>Windows without Auth?
> >>
> >>You'll need to install cygwin with sshd.  There are links from 
> >>www.openssh.org.  Other than that, I just don't have the details.  
> >>I've not done it recently.  If you still end up stuck, I'll 
> see if I 
> >>can look into it further.
> > 
> > As I said I installed OpenSSH for Windows. It's from cygwin 
> but only 
> > with a SSH Server/Client, not with all the other stuff 
> provided with cygwin.
> > I already created a user and created the dir documents 
> settings/USERNAME/.ssh and copied the authorized_keys2 file to it.
> > But it doesn't work. Already tried to copy it to 
> \home\USERNAME\.ssh\ 
> > dir...no success :-/
> > 
> > Regards, Philipp
> > 
> > 
> > 
> >>-Jacob
> >>
> >>
> >>>Regards, Philipp
> >>>
> >>>
> >>>
> >>>>-----Original Message-----
> >>>>From: Jacob Joseph [mailto:jmjoseph at andrew.cmu.edu]
> >>>>Sent: Friday, July 02, 2004 3:10 PM
> >>>>To: Sand Philipp
> >>>>Subject: Re: [Nagiosplug-help] Pushing Nagios plugins over ssh
> >>>>
> >>>>Glad to hear.  I imagine you quickly realized that you need the 
> >>>>private key in id_rsa, not another public.  Thanks for
> >>
> >>contacting me
> >>
> >>>>about using the scripts.
> >>>>
> >>>>-Jacob
> >>>>
> >>>>Sand Philipp wrote:
> >>>>
> >>>>
> >>>>>Sorry for bothering you, after a few hours of blood, sweat
> >>
> >>& google
> >>
> >>>>>it's working now.
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>>-----Original Message-----
> >>>>>>From: Sand Philipp
> >>>>>>Sent: Friday, July 02, 2004 10:12 AM
> >>>>>>To: 'Jacob Joseph'
> >>>>>>Subject: [Nagiosplug-help] Pushing Nagios plugins over ssh
> >>>>>>
> >>>>>>Hi,
> >>>>>>
> >>>>>>First I wanna say thank you for your skript push_check.sh
> >>>>
> >>>>for Nagios! 
> >>>>
> >>>>
> >>>>>>I'm just trying to install it into my nagios system.
> >>>>>>Seams to work well so far, testing it on the commandline. 
> >>
> >>I got one
> >>
> >>>>>>little problem, not concerning the problem itself, but the
> >>>>
> >>>>things with
> >>>>
> >>>>
> >>>>>>the ssh keys on each machine...haven't done something like
> >>>>
> >>>>that before
> >>>>
> >>>>
> >>>>>>:) When i run the skript so far, I still have to enter
> >>
> >>the password
> >>
> >>>>>>for the user on the remote server, so I think i did
> >>
> >>something wrong
> >>
> >>>>>>with adapting the keys.
> >>>>>>Here's what I did so far:
> >>>>>>First I created a new user nagios_ssh on the remote machine. 
> >>>>>>Then I created a ssh-key with ssh-keygen for the
> >>
> >>nagios_ssh user on
> >>
> >>>>>>the remote machine.
> >>>>>>Then I created a ssh-key on the nagios server.
> >>>>>>The keyfile.pub created on the nagios server i copied to the
> >>>>>>/home/nagios_ssh/.ssh/authorized_keys2 on the remote machine.
> >>>>>>The keyfile.pub created on the remote machine i copied to 
> >>>>>>/usr/local/nagios/etc/rsa_id on the server.
> >>>>>>
> >>>>>>On the nagios server i start the script with: 
> >>>>>>./push_check.sh /usr/local/nagios/etc/keyfile
> >>>>
> >>>>nagios_ssh at remoteserver
> >>>>
> >>>>
> >>>>>>check_disk -w 10% -c 5% -p / -p /boot
> >>>>>>
> >>>>>>The the password question for user nagios_ssh at remoteserver
> >>>>
> >>>>pops up :-/
> >>>>
> >>>>
> >>>>>>When i enter the right password the skript is copied and
> >>>>
> >>>>executed on
> >>>>
> >>>>
> >>>>>>the remote machine...
> >>>>>>
> >>>>>>What did I do wrong??
> >>>>>>
> >>>>>>Sorry for my Newbie Question!
> >>>>>>
> >>>>>>Best Regards,
> >>>>>>Philipp
> >>>>>
> >>>>>
> >>>>>
> >>>>>************************************************
> >>>>>
> >>>>>sycor plastics - die neue Branchenlösung für die
> >>
> >>Kunststoffindustrie
> >>
> >>>>>www.sycor-plastics.de
> >>>>>
> >>>>>************************************************
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>Diese E-Mail ist vertraulich und kann darüber hinaus
> >>>>
> >>>>persönliche Informationen beinhalten. Wenn Sie nicht der 
> >>>>bestimmungsgemäße Empfänger sind, löschen Sie bitte die 
> E-Mail und 
> >>>>deren Anhänge sofort und benachrichtigen Sie uns darüber. 
> Die Firma 
> >>>>sycor willigt in keine Verträge oder vertragliche
> >>
> >>Verpflichtungen ein
> >>
> >>>>oder übermittelt rechtsverbindliche Angebote, die in Form
> >>
> >>von E-Mail
> >>
> >>>>versandt werden, sofern dies nicht ausdrücklich in
> >>
> >>schriftlicher Form
> >>
> >>>>zwischen den Parteien vereinbart wurde.
> >>>>
> >>>>
> >>>>>This e-mail is confidential and may contain personal and/or
> >>>>
> >>>>privileged information. If you are not the intended
> >>
> >>recipient please
> >>
> >>>>delete this e-mail and all attachments immediately and
> >>
> >>inform us. The
> >>
> >>>>company sycor does not agree with contracts or contract 
> obligations 
> >>>>sent by e-mail, neither do we transmit legally binding offers by 
> >>>>e-mail, unless this is not expressly agreed upon between
> >>
> >>the parties
> >>
> >>>>and documented in written form.
> >>>>
> >>>
> >>>
> >>>************************************************
> >>>
> >>>sycor plastics - die neue Branchenlösung für die 
> Kunststoffindustrie
> >>>
> >>>www.sycor-plastics.de
> >>>
> >>>************************************************
> >>>
> >>>
> >>>
> >>>
> >>>Diese E-Mail ist vertraulich und kann darüber hinaus
> >>
> >>persönliche Informationen beinhalten. Wenn Sie nicht der 
> >>bestimmungsgemäße Empfänger sind, löschen Sie bitte die E-Mail und 
> >>deren Anhänge sofort und benachrichtigen Sie uns darüber. Die Firma 
> >>sycor willigt in keine Verträge oder vertragliche 
> Verpflichtungen ein 
> >>oder übermittelt rechtsverbindliche Angebote, die in Form 
> von E-Mail 
> >>versandt werden, sofern dies nicht ausdrücklich in 
> schriftlicher Form 
> >>zwischen den Parteien vereinbart wurde.
> >>
> >>>This e-mail is confidential and may contain personal and/or
> >>
> >>privileged information. If you are not the intended 
> recipient please 
> >>delete this e-mail and all attachments immediately and 
> inform us. The 
> >>company sycor does not agree with contracts or contract obligations 
> >>sent by e-mail, neither do we transmit legally binding offers by 
> >>e-mail, unless this is not expressly agreed upon between 
> the parties 
> >>and documented in written form.
> >>
> > 
> > 
> > ************************************************
> > 
> > sycor plastics - die neue Branchenlösung für die Kunststoffindustrie
> > 
> > www.sycor-plastics.de
> > 
> > ************************************************
> > 
> > 
> > 
> > 
> > Diese E-Mail ist vertraulich und kann darüber hinaus 
> persönliche Informationen beinhalten. Wenn Sie nicht der 
> bestimmungsgemäße Empfänger sind, löschen Sie bitte die 
> E-Mail und deren Anhänge sofort und benachrichtigen Sie uns 
> darüber. Die Firma sycor willigt in keine Verträge oder 
> vertragliche Verpflichtungen ein oder übermittelt 
> rechtsverbindliche Angebote, die in Form von E-Mail versandt 
> werden, sofern dies nicht ausdrücklich in schriftlicher Form 
> zwischen den Parteien vereinbart wurde.
> > 
> > This e-mail is confidential and may contain personal and/or 
> privileged information. If you are not the intended recipient 
> please delete this e-mail and all attachments immediately and 
> inform us. The company sycor does not agree with contracts or 
> contract obligations sent by e-mail, neither do we transmit 
> legally binding offers by e-mail, unless this is not 
> expressly agreed upon between the parties and documented in 
> written form.
> > 
> 


************************************************

sycor plastics - die neue Branchenlösung für die Kunststoffindustrie

www.sycor-plastics.de

************************************************




Diese E-Mail ist vertraulich und kann darüber hinaus persönliche Informationen beinhalten. Wenn Sie nicht der bestimmungsgemäße Empfänger sind, löschen Sie bitte die E-Mail und deren Anhänge sofort und benachrichtigen Sie uns darüber. Die Firma sycor willigt in keine Verträge oder vertragliche Verpflichtungen ein oder übermittelt rechtsverbindliche Angebote, die in Form von E-Mail versandt werden, sofern dies nicht ausdrücklich in schriftlicher Form zwischen den Parteien vereinbart wurde.

This e-mail is confidential and may contain personal and/or privileged information. If you are not the intended recipient please delete this e-mail and all attachments immediately and inform us. The company sycor does not agree with contracts or contract obligations sent by e-mail, neither do we transmit legally binding offers by e-mail, unless this is not expressly agreed upon between the parties and documented in written form.