Win2k: check_snmp (and nsclient) woes

Randal, Phil prandal at herefordshire.gov.uk
Tue Jun 17 18:55:01 CEST 2003


nrpe_nt runs over SSL.

Phil

---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

> -----Original Message-----
> From: Jeremy Russell [mailto:Jeremy.Russell at chickasaw.net]
> Sent: 17 June 2003 17:27
> To: Ben Goodwin; nagios-users at lists.sourceforge.net
> Subject: RE: [Nagios-users] Win2k: check_snmp (and nsclient) woes
> 
> 
> Well, you can configure nsclient with a password, but that is only as
> secure as nsclient is I think...  You can setup your network 
> to be more
> secure though.  Use some ACL's to block out any machine but your
> monitoring box to be avle to touch the nsclient port.  I have heard
> something about running nsclient over ssl also, maybe a 
> capability in a
> future release or hack for the current release, I don't know details.
> As for the ACL's there are probably your best bet for the most secure
> solution.
> 
> -----Original Message-----
> From: Ben Goodwin [mailto:ben at atomicmatrix.net] 
> Sent: Tuesday, June 17, 2003 11:15 AM
> To: nagios-users at lists.sourceforge.net
> Subject: [Nagios-users] Win2k: check_snmp (and nsclient) woes
> 
> I'm having a heck of a time trying to figure out a relatively 
> secure way
> to
> monitor my win2k boxes with nagios... I don't like the 
> security model of
> nsclient (unless I'm missing something) .. so I was hoping to go down
> the
> road of snmp restricted via community and IP ... but I'm stumbling on
> figuring out how to check to see if a process or a service is 
> running. .
> or
> check disk space etc..  I see the disks and processes show up, but I
> surely
> don't want to hardcode an OID into my check_snmp command .. 
> and I don't
> even
> see a list of services ..  is SNMP not the way to go for 
> this?  Is there
> a
> way I can secure nsclient such that everyone inside the 
> firewall doesn't
> have read access to the data?
> 
> Thanks,
> 
>   -=| Ben
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: INetU
> Attention Web Developers & Consultants: Become An INetU 
> Hosting Partner.
> Refer Dedicated Servers. We Manage Them. You Get 10% Monthly 
> Commission!
> INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: INetU
> Attention Web Developers & Consultants: Become An INetU 
> Hosting Partner.
> Refer Dedicated Servers. We Manage Them. You Get 10% Monthly 
> Commission!
> INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS 
> when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
> 


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list