how to check smtps, pop3s, imaps, ldpas withy nrpe ?

[Arno Lehmann]

Hello,

please respond to the list.

02.09.2008 10:44, J. Bakshi wrote:
> Arno Lehmann wrote:
>> Hi,
>>
>> 02.09.2008 09:37, J. Bakshi wrote:
>>> Dear list,
>>>
>>> I have installed
>>>
>>> nagios-nrpe   2.0
>>> nagios-plugins  1.4
>>> nagios-plugins-extras 1.4
>>>
>>> How can I check smtps, ldaps, pop3s, imaps  with nrpe ?
>>> the default check_smtp ; check_imap etc can't check the SSL version of
>>> the services.
>> Mine can; call them with -h for help and read the output. I usually
>> use the -S swich plus, as needed, -p for the target port.
>>
>> Example output:
>> $ /usr/local/nagios3/libexec/check_imap -H 192.168.1.2 -S -p 993 -D 12
>> OK - Certificate will expire on 04/27/2009 21:13.
>> IMAP OK - 0.060 second response time on port 993 [* OK IMAP4 Ready
>> balrog.privat.lehleute.de 0001b1a4]|time=0.059891s;;;0.000000;10.000000
>>
> 
> Hi Arno,
> 
> first of all thanks for your kind response. I have also found the "-S"
> option but the story is different here and it is
> negative :-(
> 
> here is the nmap output which proves the required port are open

It does not actually prove the services are listening on localhost, 
and that access is not filtered, for example by hosts files.

> PORT     STATE SERVICE
> 25/tcp   open  smtp
> 80/tcp   open  http
> 143/tcp  open  imap
> 389/tcp  open  ldap
> 443/tcp  open  https
> 465/tcp  open  smtps
> 993/tcp  open  imaps
> 995/tcp  open  pop3s
> 1234/tcp open  hotline
> 2000/tcp open  callbook
> 3306/tcp open  mysql
> 
> more important I can use the SSL enabled services, like pop3s , smtps etc...
> 
> If I check with check_smtp I get the following
> 
> /usr/lib/nagios/plugins/check_smtp -H localhost  -p 465 -S  -v
> CRITICAL - Socket timeout after 10 seconds

Check with the ip address that is usually used - it's quite possible 
the service is not bound to localhost.

> And here is the check fir ftp :-(
> 
> /usr/lib/nagios/plugins/check_ftp -H localhost  -p 60021 -S  -v
> CRITICAL - Cannot make  SSL connection 13948:error:140770FC:SSL
> routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:478:
> 
> Plese note I am practically using ftps, smtps, pop3s
> 
> I have no clue really.
> Hope you can enlighten me to point out my mistake.

Try what I suggested... that's what I'd do now.

Arno

> with many thanks
> 
>> Arno
>>
>>> thanks
>>>
>>>
> 
> 

-- 
Arno Lehmann
IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück
www.its-lehmann.de

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null