check_by_ssh and other plugins

[Paul L. Allen]

jeff vier writes: 

> NRPE has an ssh option.

Not the last time I looked (NRPE 2.0). 

NRPE has an SSL option, which means that the results are encrypted so
only the machine making the query can decipher them.  However, the only
authentication possible is by using tcpwrappers to restrict queries to
a specific IP address.  Somebody in a position to packet sniff traffic
between the Nagios host and the monitored machine could use IP spoofing
to send a query and packet sniff the answer. 

If you want better security then either set up a VPN or use check_by_ssh. 

-- 
Paul Allen
Softflare Support 




-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null