diff options
Diffstat (limited to 'plugins/check_radius.c')
-rw-r--r-- | plugins/check_radius.c | 189 |
1 files changed, 84 insertions, 105 deletions
diff --git a/plugins/check_radius.c b/plugins/check_radius.c index c71f3b4..3aa5ae7 100644 --- a/plugins/check_radius.c +++ b/plugins/check_radius.c | |||
@@ -1,45 +1,60 @@ | |||
1 | /****************************************************************************** | 1 | /****************************************************************************** |
2 | * | 2 | |
3 | * Program: radius server check plugin for Nagios | 3 | This program is free software; you can redistribute it and/or modify |
4 | * License: GPL | 4 | it under the terms of the GNU General Public License as published by |
5 | * | 5 | the Free Software Foundation; either version 2 of the License, or |
6 | * License Information: | 6 | (at your option) any later version. |
7 | * | 7 | |
8 | * This program is free software; you can redistribute it and/or modify | 8 | This program is distributed in the hope that it will be useful, |
9 | * it under the terms of the GNU General Public License as published by | 9 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
10 | * the Free Software Foundation; either version 2 of the License, or | 10 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
11 | * (at your option) any later version. | 11 | GNU General Public License for more details. |
12 | * | 12 | |
13 | * This program is distributed in the hope that it will be useful, | 13 | You should have received a copy of the GNU General Public License |
14 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | 14 | along with this program; if not, write to the Free Software |
15 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | 15 | Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. |
16 | * GNU General Public License for more details. | 16 | |
17 | * | 17 | ******************************************************************************/ |
18 | * You should have received a copy of the GNU General Public License | ||
19 | * along with this program; if not, write to the Free Software | ||
20 | * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. | ||
21 | * | ||
22 | * $Id$ | ||
23 | * | ||
24 | *****************************************************************************/ | ||
25 | 18 | ||
26 | const char *progname = "check_radius"; | 19 | const char *progname = "check_radius"; |
27 | #define REVISION "$Revision$" | 20 | const char *revision = "$Revision$"; |
28 | #define COPYRIGHT "1999-2001" | 21 | const char *copyright = "2000-2003"; |
29 | #define AUTHORS "Robert August Vincent II/Karl DeBisschop" | 22 | const char *email = "nagiosplug-devel@lists.sourceforge.net"; |
30 | #define EMAIL "kdebisschop@users.sourceforge.net" | 23 | |
31 | #define SUMMARY "Tests to see if a radius server is accepting connections.\n" | 24 | #include "config.h" |
32 | 25 | #include "common.h" | |
33 | #define OPTIONS "\ | 26 | #include "utils.h" |
34 | -H host -F config_file -u username -p password\'\ | 27 | #include <radiusclient.h> |
35 | [-P port] [-t timeout] [-r retries] [-e expect]" | 28 | |
36 | 29 | void | |
37 | #define LONGOPTIONS "\ | 30 | print_usage (void) |
38 | -H, --hostname=HOST\n\ | 31 | { |
39 | Host name argument for servers using host headers (use numeric\n\ | 32 | printf ("\ |
40 | address if possible to bypass DNS lookup).\n\ | 33 | Usage: %s -H host -F config_file -u username -p password [-P port]\n\ |
41 | -P, --port=INTEGER\n\ | 34 | [-t timeout] [-r retries] [-e expect]\n", progname); |
42 | Port number (default: %d)\n\ | 35 | printf (_(UT_HLP_VRS), progname, progname); |
36 | } | ||
37 | |||
38 | void | ||
39 | print_help (void) | ||
40 | { | ||
41 | char *myport; | ||
42 | asprintf (&myport, "%d", PW_AUTH_UDP_PORT); | ||
43 | |||
44 | print_revision (progname, revision); | ||
45 | |||
46 | printf (_("Copyright (c) 1999 Robert August Vincent II\n")); | ||
47 | printf (_(COPYRIGHT), copyright, email); | ||
48 | |||
49 | printf(_("Tests to see if a radius server is accepting connections.\n\n")); | ||
50 | |||
51 | print_usage (); | ||
52 | |||
53 | printf (_(UT_HELP_VRSN)); | ||
54 | |||
55 | printf (_(UT_HOST_PORT), 'P', myport); | ||
56 | |||
57 | printf (_("\ | ||
43 | -u, --username=STRING\n\ | 58 | -u, --username=STRING\n\ |
44 | The user to authenticate\n\ | 59 | The user to authenticate\n\ |
45 | -p, --password=STRING\n\ | 60 | -p, --password=STRING\n\ |
@@ -49,48 +64,38 @@ const char *progname = "check_radius"; | |||
49 | -e, --expect=STRING\n\ | 64 | -e, --expect=STRING\n\ |
50 | Response string to expect from the server\n\ | 65 | Response string to expect from the server\n\ |
51 | -r, --retries=INTEGER\n\ | 66 | -r, --retries=INTEGER\n\ |
52 | Number of times to retry a failed connection\n\ | 67 | Number of times to retry a failed connection\n")); |
53 | -t, --timeout=INTEGER\n\ | 68 | |
54 | Seconds before connection times out (default: %d)\n\ | 69 | printf (_(UT_TIMEOUT), timeout_interval); |
55 | -v, --verbose\n\ | 70 | |
56 | Show details for command-line debugging (do not use with nagios server)\n\ | 71 | printf (_("\n\ |
57 | -h, --help\n\ | ||
58 | Print detailed help screen\n\ | ||
59 | -V, --version\n\ | ||
60 | Print version information\n" | ||
61 | |||
62 | #define DESCRIPTION "\ | ||
63 | This plugin tests a radius server to see if it is accepting connections.\n\ | 72 | This plugin tests a radius server to see if it is accepting connections.\n\ |
64 | \n\ | 73 | \n\ |
65 | The server to test must be specified in the invocation, as well as a user\n\ | 74 | The server to test must be specified in the invocation, as well as a user\n\ |
66 | name and password. A configuration file may also be present. The format of\n\ | 75 | name and password. A configuration file may also be present. The format of\n\ |
67 | the configuration file is described in the radiusclient library sources.\n\ | 76 | the configuration file is described in the radiusclient library sources.\n\n")); |
68 | \n\ | 77 | |
78 | printf (_("\ | ||
69 | The password option presents a substantial security issue because the\n\ | 79 | The password option presents a substantial security issue because the\n\ |
70 | password can be determined by careful watching of the command line in\n\ | 80 | password can be determined by careful watching of the command line in\n\ |
71 | a process listing. This risk is exacerbated because nagios will\n\ | 81 | a process listing. This risk is exacerbated because nagios will\n\ |
72 | run the plugin at regular prdictable intervals. Please be sure that\n\ | 82 | run the plugin at regular prdictable intervals. Please be sure that\n\ |
73 | the password used does not allow access to sensitive system resources,\n\ | 83 | the password used does not allow access to sensitive system resources,\n\ |
74 | otherwise compormise could occur.\n" | 84 | otherwise compormise could occur.\n")); |
75 | |||
76 | #include "config.h" | ||
77 | #include "common.h" | ||
78 | #include "utils.h" | ||
79 | #include <radiusclient.h> | ||
80 | 85 | ||
86 | printf (_(UT_SUPPORT)); | ||
87 | } | ||
88 | |||
81 | int process_arguments (int, char **); | 89 | int process_arguments (int, char **); |
82 | void print_usage (void); | ||
83 | void print_help (void); | ||
84 | 90 | ||
85 | char *server = NULL; | 91 | char *server = NULL; |
86 | int port = PW_AUTH_UDP_PORT; | ||
87 | char *username = NULL; | 92 | char *username = NULL; |
88 | char *password = NULL; | 93 | char *password = NULL; |
89 | char *expect = NULL; | 94 | char *expect = NULL; |
90 | char *config_file = NULL; | 95 | char *config_file = NULL; |
96 | int port = PW_AUTH_UDP_PORT; | ||
91 | int retries = 1; | 97 | int retries = 1; |
92 | int verbose = FALSE; | 98 | int verbose = FALSE; |
93 | |||
94 | ENV *env = NULL; | 99 | ENV *env = NULL; |
95 | 100 | ||
96 | /****************************************************************************** | 101 | /****************************************************************************** |
@@ -151,23 +156,23 @@ main (int argc, char **argv) | |||
151 | { | 156 | { |
152 | UINT4 service; | 157 | UINT4 service; |
153 | char msg[BUFFER_LEN]; | 158 | char msg[BUFFER_LEN]; |
154 | SEND_DATA data = { 0 }; | 159 | SEND_DATA data; |
155 | int result; | 160 | int result; |
156 | UINT4 client_id; | 161 | UINT4 client_id; |
157 | 162 | ||
158 | if (process_arguments (argc, argv) == ERROR) | 163 | if (process_arguments (argc, argv) == ERROR) |
159 | usage ("Could not parse arguments\n"); | 164 | usage (_("Could not parse arguments\n")); |
160 | 165 | ||
161 | if ((config_file && rc_read_config (config_file)) || | 166 | if ((config_file && rc_read_config (config_file)) || |
162 | rc_read_dictionary (rc_conf_str ("dictionary"))) | 167 | rc_read_dictionary (rc_conf_str ("dictionary"))) |
163 | terminate (STATE_UNKNOWN, "Config file error"); | 168 | terminate (STATE_UNKNOWN, _("Config file error")); |
164 | 169 | ||
165 | service = PW_AUTHENTICATE_ONLY; | 170 | service = PW_AUTHENTICATE_ONLY; |
166 | 171 | ||
167 | if (!(rc_avpair_add (&data.send_pairs, PW_SERVICE_TYPE, &service, 0) && | 172 | if (!(rc_avpair_add (&data.send_pairs, PW_SERVICE_TYPE, &service, 0) && |
168 | rc_avpair_add (&data.send_pairs, PW_USER_NAME, username, 0) && | 173 | rc_avpair_add (&data.send_pairs, PW_USER_NAME, username, 0) && |
169 | rc_avpair_add (&data.send_pairs, PW_USER_PASSWORD, password, 0))) | 174 | rc_avpair_add (&data.send_pairs, PW_USER_PASSWORD, password, 0))) |
170 | terminate (STATE_UNKNOWN, "Out of Memory?"); | 175 | terminate (STATE_UNKNOWN, _("Out of Memory?")); |
171 | 176 | ||
172 | /* | 177 | /* |
173 | * Fill in NAS-IP-Address | 178 | * Fill in NAS-IP-Address |
@@ -188,15 +193,15 @@ main (int argc, char **argv) | |||
188 | rc_avpair_free (data.receive_pairs); | 193 | rc_avpair_free (data.receive_pairs); |
189 | 194 | ||
190 | if (result == TIMEOUT_RC) | 195 | if (result == TIMEOUT_RC) |
191 | terminate (STATE_CRITICAL, "Timeout"); | 196 | terminate (STATE_CRITICAL, _("Timeout")); |
192 | if (result == ERROR_RC) | 197 | if (result == ERROR_RC) |
193 | terminate (STATE_CRITICAL, "Auth Error"); | 198 | terminate (STATE_CRITICAL, _("Auth Error")); |
194 | if (result == BADRESP_RC) | 199 | if (result == BADRESP_RC) |
195 | terminate (STATE_WARNING, "Auth Failed"); | 200 | terminate (STATE_WARNING, _("Auth Failed")); |
196 | if (expect && !strstr (msg, expect)) | 201 | if (expect && !strstr (msg, expect)) |
197 | terminate (STATE_WARNING, msg); | 202 | terminate (STATE_WARNING, msg); |
198 | if (result == OK_RC) | 203 | if (result == OK_RC) |
199 | terminate (STATE_OK, "Auth OK"); | 204 | terminate (STATE_OK, _("Auth OK")); |
200 | return (0); | 205 | return (0); |
201 | } | 206 | } |
202 | 207 | ||
@@ -234,16 +239,16 @@ process_arguments (int argc, char **argv) | |||
234 | if (is_intpos (argv[4])) | 239 | if (is_intpos (argv[4])) |
235 | timeout_interval = atoi (argv[4]); | 240 | timeout_interval = atoi (argv[4]); |
236 | else | 241 | else |
237 | usage ("Timeout interval must be a positive integer"); | 242 | usage (_("Timeout interval must be a positive integer")); |
238 | if (is_intpos (argv[5])) | 243 | if (is_intpos (argv[5])) |
239 | retries = atoi (argv[5]); | 244 | retries = atoi (argv[5]); |
240 | else | 245 | else |
241 | usage ("Number of retries must be a positive integer"); | 246 | usage (_("Number of retries must be a positive integer")); |
242 | server = argv[6]; | 247 | server = argv[6]; |
243 | if (is_intpos (argv[7])) | 248 | if (is_intpos (argv[7])) |
244 | port = atoi (argv[7]); | 249 | port = atoi (argv[7]); |
245 | else | 250 | else |
246 | usage ("Server port must be a positive integer"); | 251 | usage (_("Server port must be a positive integer")); |
247 | expect = argv[8]; | 252 | expect = argv[8]; |
248 | return OK; | 253 | return OK; |
249 | } | 254 | } |
@@ -257,21 +262,21 @@ process_arguments (int argc, char **argv) | |||
257 | 262 | ||
258 | switch (c) { | 263 | switch (c) { |
259 | case '?': /* print short usage statement if args not parsable */ | 264 | case '?': /* print short usage statement if args not parsable */ |
260 | printf ("%s: Unknown argument: %s\n\n", progname, optarg); | 265 | printf (_("%s: Unknown argument: %s\n\n"), progname, optarg); |
261 | print_usage (); | 266 | print_usage (); |
262 | exit (STATE_UNKNOWN); | 267 | exit (STATE_UNKNOWN); |
263 | case 'h': /* help */ | 268 | case 'h': /* help */ |
264 | print_help (); | 269 | print_help (); |
265 | exit (OK); | 270 | exit (OK); |
266 | case 'V': /* version */ | 271 | case 'V': /* version */ |
267 | print_revision (progname, "$Revision$"); | 272 | print_revision (progname, revision); |
268 | exit (OK); | 273 | exit (OK); |
269 | case 'v': /* verbose mode */ | 274 | case 'v': /* verbose mode */ |
270 | verbose = TRUE; | 275 | verbose = TRUE; |
271 | break; | 276 | break; |
272 | case 'H': /* hostname */ | 277 | case 'H': /* hostname */ |
273 | if (is_host (optarg) == FALSE) { | 278 | if (is_host (optarg) == FALSE) { |
274 | printf ("Invalid host name/address\n\n"); | 279 | printf (_("Invalid host name/address\n\n")); |
275 | print_usage (); | 280 | print_usage (); |
276 | exit (STATE_UNKNOWN); | 281 | exit (STATE_UNKNOWN); |
277 | } | 282 | } |
@@ -281,7 +286,7 @@ process_arguments (int argc, char **argv) | |||
281 | if (is_intnonneg (optarg)) | 286 | if (is_intnonneg (optarg)) |
282 | port = atoi (optarg); | 287 | port = atoi (optarg); |
283 | else | 288 | else |
284 | usage ("Server port must be a positive integer"); | 289 | usage (_("Server port must be a positive integer")); |
285 | break; | 290 | break; |
286 | case 'u': /* username */ | 291 | case 'u': /* username */ |
287 | username = optarg; | 292 | username = optarg; |
@@ -299,41 +304,15 @@ process_arguments (int argc, char **argv) | |||
299 | if (is_intpos (optarg)) | 304 | if (is_intpos (optarg)) |
300 | retries = atoi (optarg); | 305 | retries = atoi (optarg); |
301 | else | 306 | else |
302 | usage ("Number of retries must be a positive integer"); | 307 | usage (_("Number of retries must be a positive integer")); |
303 | break; | 308 | break; |
304 | case 't': /* timeout */ | 309 | case 't': /* timeout */ |
305 | if (is_intpos (optarg)) | 310 | if (is_intpos (optarg)) |
306 | timeout_interval = atoi (optarg); | 311 | timeout_interval = atoi (optarg); |
307 | else | 312 | else |
308 | usage ("Timeout interval must be a positive integer"); | 313 | usage (_("Timeout interval must be a positive integer")); |
309 | break; | 314 | break; |
310 | } | 315 | } |
311 | } | 316 | } |
312 | return OK; | 317 | return OK; |
313 | } | 318 | } |
314 | |||
315 | |||
316 | |||
317 | void | ||
318 | print_help (void) | ||
319 | { | ||
320 | print_revision (progname, REVISION); | ||
321 | printf | ||
322 | ("Copyright (c) %s %s <%s>\n\n%s\n", | ||
323 | COPYRIGHT, AUTHORS, EMAIL, SUMMARY); | ||
324 | print_usage (); | ||
325 | printf | ||
326 | ("\nOptions:\n" LONGOPTIONS "\n" DESCRIPTION "\n", | ||
327 | port, timeout_interval); | ||
328 | support (); | ||
329 | } | ||
330 | |||
331 | |||
332 | void | ||
333 | print_usage (void) | ||
334 | { | ||
335 | printf ("Usage:\n" " %s %s\n" | ||
336 | " %s (-h | --help) for detailed help\n" | ||
337 | " %s (-V | --version) for version information\n", | ||
338 | progname, OPTIONS, progname, progname); | ||
339 | } | ||