summaryrefslogtreecommitdiffstats
path: root/plugins
AgeCommit message (Collapse)AuthorFilesLines
2012-05-07Disable stateless SSL session resumptionHolger Weiss1-0/+3
Some versions of OpenSSL fail to negotiate the SSL connection with at least some versions of Tomcat if stateless SSL session resumption support (see RFC4507) is enabled: | CRITICAL - Cannot make SSL connection | 140099330348712:error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message:s3_pkt.c:1195:SSL alert number 10 The problem is reproducible with OpenSSL 1.0.0h, but not with OpenSSL 0.9.8o-4squeeze12 (as shipped with Debian 6.0.4). We work around it by disabling the RFC4507 functionality when using OpenSSL versions which support it. Thanks to Dag Bakke for reporting the issue and for giving me access to a server I could use to reproduce the problem.
2012-04-17Fix check_ping where output of ping6 when unreachable (Debian #662638)Jan Wagner1-0/+2
2012-04-10Merge branch 'master' of ↵Matthias Eble6-14/+42
ssh://nagiosplug.git.sourceforge.net/gitroot/nagiosplug/nagiosplug
2012-04-09check_by_ssh: added -F config file to specify alternative ssh configSven Nierlein2-3/+21
2012-02-24Clarify that check_http won't verify certificatesHolger Weiss1-0/+4
Add a note to the --help output which clarifies that check_http doesn't perform certificate verification (beyond what the "-C" option does). (Suggested by Michael Renner in Debian bug report #644627, forwarded by Jan Wagner.)
2012-02-24Cosmetic changeHolger Weiss1-7/+7
Replace all occurrences of "strstr(s, "c") == s" with "s[0] == 'c'".
2012-02-24Accept multiple labels specified with "-l"Holger Weiss1-3/+3
Fix the code which accepts a comma-separated list of labels specified via the "-l" option. (Spotted by Oskar Liljeblad in Debian bug report #647020, forwarded by Jan Wagner.)
2012-02-10Enable compiling on AIX 6.1Eric Stanley1-0/+6
2011-09-06Make GCC happyThomas Guyot-Sionnest1-1/+1
It won't trust us about msg containing no format string, and fail miserably when compiled with -Werror=format-security. Reported by spy6 on IRC.
2011-08-13Fix: check_ldap now correctly handles the long option --hostname for -HMatthias Eble1-1/+1
The undocumented --host has been changed to --hostname which is actually mentioned in --help. Thanks to lgarrett (#3191388)
2011-07-15Fix check_smtp and check_tcp where duplicate messages were displayed for ↵Ton Voon2-7/+1
certificate errors (Opsview team)
2011-07-15New option to check_smtp to ignore failures when sending QUIT (#3358348 - ↵Ton Voon1-4/+26
Duncan Ferguson)
2011-03-26Add perfdata to check_ssh (#3244097 - Marco Beck)Thomas Guyot-Sionnest1-2/+9
2011-02-08check_smtp: Abort on missing/unexpected greetingHolger Weiss1-2/+2
Abort immediately if we don't receive a server greeting or if the greeting doesn't contain the "--expect"ed string (by default: "220") instead of blindly sending the EHLO/HELO line. Spotted by Daniel Piddock, see Debian bug report #611914.
2011-02-04check_http: check for and print the certificate cnThomas Guyot-Sionnest3-14/+32
This patch adds a check for the certificate cn (hostname) to normal certificate checks. It returns CRITICAL if th cn is missing, otherwise it prints it in the normal output. Patch by Stéphane Urbanovski
2011-01-21Fix for regex input of '|', being output causing problems with Nagios' ↵Ton Voon2-2/+15
parsing of performance data. Now replaced with ','
2011-01-05Test updates...Thomas Guyot-Sionnest3-5/+9
1. Timetick test could fail with uptime > 115 days. Thresholds are double type, so it's safe to put a large number even for 32bit systems. 2. Add a test based on an invalid bug report, worthy anyway.
2011-01-01Make check_http use standard threshold functionsThomas Guyot-Sionnest1-30/+18
This enables floating point and ranges, and make the code more standard.
2010-12-23Fix check_ldap overriding the port when --ssl was specified after -pThomas Guyot-Sionnest1-2/+6
2010-11-30Fix minor test issuesThomas Guyot-Sionnest2-21/+28
My Test::More wouldn't print the total number of tests anymore, moving the plan at the top appears to fix it. At the same time I made check-http.t eval the special modules so it can skip the tests instead of failing.
2010-11-30Revert "check_snmp now considers strings returned by SNMP that contain just"Thomas Guyot-Sionnest2-19/+1
This reverts commit 896962a1ad1b7d7c75d42c565b06cc799feb0a7c. Conflicts: NEWS plugins/tests/check_snmp.t Notes: Reverting because I rebased a patch that was doing the same thing, plus fixing more related regressions, and both didn't work together. I kept the tests intact except for one that wouldn't pass on 1.4.14 either
2010-11-30State-based tests enhancementsThomas Guyot-Sionnest1-1/+4
- Use /var/tmp for state if no state dir environment variable is set, this avoid the need for a writable localstatedir during tests. - Use "rm -f", mostly to avoid printing out garbage of the directory doesn't exists
2010-11-30check_snmp: Remove that is_numeric madnessThomas Guyot-Sionnest2-9/+12
Original patch to make Timeticks works as in check_snmp v1.4.14, it turns out is_numeric isn't so useful and treating all types as numeric works best for backwards-compatibility. This is how it used to work in 1.4.14. As a special case, I also make calculate_rate look up for numeric values as it would otherwise return the last value instead.
2010-11-15Fix check_disk free space calculation if blocksizes differ within a disk ↵Matthias Eble1-81/+94
group (Bekar - #2973603) Various values (dused_pct, dfree_pct, inodes_free, inodes_total, ...) are now carried in the parameter_list structure. Assignments have been moved to a subroutine preventing code redundancies. Group metrics are now calculated based on units rather than blocks. This fixes freespace calculation when blocksizes differ within a group.
2010-11-15check_snmp now considers strings returned by SNMP that contain justnagios3-4/+33
numbers (according to strtod) to be a numeric value for threshold and performance data
2010-10-15check_nt: make UPTIME accept warning/critical levelsThomas Guyot-Sionnest1-1/+6
Patch originally by Ryan Kelly
2010-08-31Fix typos in -f help textTon Voon1-1/+1
2010-07-09Fix --help output when MAX_OIDS is altered.Thomas Guyot-Sionnest1-2/+2
2010-07-07Fix examples in check_disk, where it implied was possible to suffix unit ↵Ton Voon1-2/+2
values to warn/crit parameters
2010-06-30Corrected rate_multiplier calculationtonvoon2-2/+2
2010-06-30Removed suffix of "-rate" and let user decide label via --labeltonvoon2-7/+5
2010-06-30Tests for --rate-multiplier optiontonvoon2-1/+14
2010-06-30Fixed rate-multiplier optionTon Voon1-4/+8
2010-06-23Added option to invert search resultstonvoon3-10/+34
2010-06-23Display missing search string and URL when failed (Duncan Ferguson #2999924)tonvoon2-2/+15
2010-06-23Added state retention APIs. Implemented for check_snmp with --rate option.Ton Voon4-21/+199
See http://nagiosplugin.org/c-api-private for more details on the API. Also updated check_snmp -l option to change the perfdata label.
2010-05-08Add missing --fqdn help (Jan Wagner)Thomas Guyot-Sionnest1-2/+4
2010-04-28Update extra-opts help text based on ML agreementThomas Guyot-Sionnest1-1/+2
2010-04-22Add newline after "Usage:" in --helpThomas Guyot-Sionnest39-39/+39
2010-04-22Split long line in check_cluster --helpThomas Guyot-Sionnest1-1/+2
2010-04-21Standardize the extra-opts notesThomas Guyot-Sionnest38-186/+1
2010-04-21Fix tests and update NEWS fileThomas Guyot-Sionnest1-4/+49
2010-04-21Replace the lousy multiline parser with a robust one.Thomas Guyot-Sionnest1-8/+49
This one counts double quotes and backslashes so it should handle any level of escaping.
2010-04-21Attempt at fixing check_snmp multiline output:Thomas Guyot-Sionnest2-9/+32
This patch tries to detect and output nicely multi-line strings. This method is broken by design; only a count of double-quotes and escapes could work in every situation.
2010-04-14Fix translations when extra-opts aren't enabledThomas Guyot-Sionnest41-266/+266
Bug #2832884 reported problem with translations outputting pot file headers. This is caused by "" matching the header of the translation files. This patch moves gettext macros inside utils macros and update some french translations.
2010-04-14Update french translation (fix all fuzzy's)Thomas Guyot-Sionnest2-3/+3
2010-04-14Fix check_radius returning OK on unexpected resultsThomas Guyot-Sionnest1-2/+12
REJECT_RC is defined on some radiusclient versions and differenciates between auth errors and bad responses. This patch will affect only the behaviour of those clients exporting REJECT_RC. In addition, unexpected return codes are now handled properly and return UNKNOWN.
2010-04-13Fix typoHolger Weiss1-1/+1
2010-04-11Fix Debian bug #482947: No --nas-ip-address optionHolger Weiss1-13/+28
| check_radius doesn't seem to provide any way to modify the | NAS-IP-Address attribute that it uses in the packets it sends, but it | does so for NAS-Identifier. | | Instead, it hardcodes the IP address that it gets from the | rc_own_ipaddress() library call, and that in turn translates into | calling gethostbyname() on the result of uname(). This call can easily | fail, and its result can easily be unsuitable - for example when the | Nagios instance uses its own virtual host, and you don't want the | original system hostname leaked to the RADIUS servers you monitor with | this. | | Furthermore, this behaviour is inconsistent with RFC 2865, which | defines the two attributes as analogous and never suggests hardcoding | the value of either of them in client software. Therefore, this commit adds the "-N, --nas-ip-address" option which allows for specifying the value of the NAS-IP-Address attribute. | I've also noticed that the original code for NAS-IP-Address hardcoding | is broken in its error handling - it does "return (ERROR_PC)", which | is meaningless in the context of check_radius.c. That actually seems | to be copy&waste from radiusclient-0.3.2/src/radexample.c. :) I fixed | that. | | While debugging, I also took the opportunity to decouple the | nas-identifier rc_avpair_add() instance from the initial three, | because this is just bad practice to lump a fourth optional attribute | into the same block with the required attributes, the error handling | for which is throwing the same daft message "Out of Memory?"... [ http://bugs.debian.org/482947 ] (Contributed by Josip Rodin, forwarded by Jan Wagner.)
2010-04-11Fix Debian bug #479984: Allow empty LDAP baseHolger Weiss1-1/+1
The check_ldap plugin did not allow for specifying an empty LDAP base. See: http://bugs.debian.org/479984 (Fixed by Stephane Chazelas, forwarded by Jan Wagner.)