Active Directory Monitoring

[Thibault Genessay]

Hi

>Hi,
>
>I'm currently searching for a way to monitor an active directory using
>nagios. The mainproblem I have is that I my active directory knowledge
>tends to zero. I'm currently searching for docs where I can find atleast
>the ports which I have to monitor, but until now without success. I had
>the idea to define all ports which I have to monitor (when I know which
>ports are involved), and then I want to put them into a servicegroup
>called active directory. Is there anybody out there who has done
>something like that in the past, or has a config snippet which could
>lead me into the correct direction. A pointer to a document which
>describes or lists the ports I need would be enough. Thanks in advance!
>  
>
If you want a deep analysis of your Active Directory, I suggest you have 
a look at the WMI provider (MSDN documents it; you may access it through 
NC_NET for instance) or the SNMP MIB (if it exists -- I don't know, though).

If you just want to test some ports, you need at least the 88 (kerberos) 
and 445 (Microsoft-ds). You might also try 137-138-139 which are used 
for NetBIOS over TCP.
The best approach would be a tcpdump of a typical Active Directory 
access from a computer of your network so that you know which ports are 
used during a transaction; see http://www.netadmintools.com/art173.html

-- 
Thibault GENESSAY
ALIADIS
www.aliadis.fr
Tel.  0870 723 724
Fax   04 72 13 90 40 



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null