X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=plugins%2Fcheck_ldap.c;h=4f14328074cc92b964ab51633fdcec8db46ed9f4;hb=d4c0948266f261525e12c58d58e0fc68987a9818;hp=ee0b8d6605432e59ec7a04be0319040dcd5a12ce;hpb=59d594d7d3e2897a105365ef5ffa0cdb972c09ac;p=nagiosplug.git diff --git a/plugins/check_ldap.c b/plugins/check_ldap.c index ee0b8d6..4f14328 100644 --- a/plugins/check_ldap.c +++ b/plugins/check_ldap.c @@ -1,27 +1,29 @@ /****************************************************************************** -* -* This program is free software; you can redistribute it and/or modify -* it under the terms of the GNU General Public License as published by -* the Free Software Foundation; either version 2 of the License, or -* (at your option) any later version. -* -* This program is distributed in the hope that it will be useful, -* but WITHOUT ANY WARRANTY; without even the implied warranty of -* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -* GNU General Public License for more details. -* -* You should have received a copy of the GNU General Public License -* along with this program; if not, write to the Free Software -* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. -* + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + + $Id$ + ******************************************************************************/ -const char *progname = "check_ldap"; +/* progname may be check_ldaps */ +char *progname = "check_ldap"; const char *revision = "$Revision$"; -const char *copyright = "2000-2003"; +const char *copyright = "2000-2004"; const char *email = "nagiosplug-devel@lists.sourceforge.net"; -#include "config.h" #include "common.h" #include "netutils.h" #include "utils.h" @@ -30,83 +32,35 @@ const char *email = "nagiosplug-devel@lists.sourceforge.net"; #include enum { - UNDEFINED = -1, + UNDEFINED = 0, #ifdef HAVE_LDAP_SET_OPTION DEFAULT_PROTOCOL = 2, #endif DEFAULT_PORT = 389 }; -void -print_usage () -{ - printf (_("\ -Usage: %s -H -b [-p ] [-a ] [-D ]\n\ - [-P ] [-w ] [-c ] [-t timeout]%s\n\ -(Note: all times are in seconds.)\n"), - progname, (HAVE_LDAP_SET_OPTION ? "[-2|-3] [-4|-6]" : "")); - printf (_(UT_HLP_VRS), progname, progname); -} - -void -print_help () -{ - char *myport; - asprintf (&myport, "%d", DEFAULT_PORT); - - print_revision (progname, revision); - - printf (_("Copyright (c) 1999 Didi Rieder (adrieder@sbox.tu-graz.ac.at)\n")); - printf (_(COPYRIGHT), copyright, email); - - print_usage (); - - printf (_(UT_HELP_VRSN)); - - printf (_(UT_HOST_PORT), 'p', myport); - - printf (_(UT_IPv46)); - - printf (_("\ - -a [--attr]\n\ - ldap attribute to search (default: \"(objectclass=*)\"\n\ - -b [--base]\n\ - ldap base (eg. ou=my unit, o=my org, c=at)\n\ - -D [--bind]\n\ - ldap bind DN (if required)\n\ - -P [--pass]\n\ - ldap password (if required)\n")); - -#ifdef HAVE_LDAP_SET_OPTION - printf (_("\ - -2 [--ver2]\n\ - use ldap protocol version 2\n\ - -3 [--ver3]\n\ - use ldap protocol version 3\n\ - (default protocol version: %d)\n"), - DEFAULT_PROTOCOL); -#endif - - printf (_(UT_WARN_CRIT)); - - printf (_(UT_SUPPORT)); -} - int process_arguments (int, char **); int validate_arguments (void); +void print_help (void); +void print_usage (void); char ld_defattr[] = "(objectclass=*)"; char *ld_attr = ld_defattr; -char *ld_host = ""; -char *ld_base = ""; +char *ld_host = NULL; +char *ld_base = NULL; char *ld_passwd = NULL; char *ld_binddn = NULL; -unsigned int ld_port = DEFAULT_PORT; +int ld_port = DEFAULT_PORT; #ifdef HAVE_LDAP_SET_OPTION int ld_protocol = DEFAULT_PROTOCOL; #endif -int warn_time = UNDEFINED; -int crit_time = UNDEFINED; +double warn_time = UNDEFINED; +double crit_time = UNDEFINED; +struct timeval tv; + +/* for ldap tls */ + +char *SERVICE = "LDAP"; int main (int argc, char *argv[]) @@ -115,11 +69,27 @@ main (int argc, char *argv[]) LDAP *ld; LDAPMessage *result; - int t_diff; - time_t time0, time1; - + /* should be int result = STATE_UNKNOWN; */ + + int status = STATE_UNKNOWN; + long microsec; + double elapsed_time; + + /* for ldap tls */ + + int tls; + int version=3; + + setlocale (LC_ALL, ""); + bindtextdomain (PACKAGE, LOCALEDIR); + textdomain (PACKAGE); + + if (strstr(argv[0],"check_ldaps")) { + asprintf (&progname, "check_ldaps"); + } + if (process_arguments (argc, argv) == ERROR) - usage (_("check_ldap: could not parse arguments\n")); + usage4 (_("Could not parse arguments")); /* initialize alarm signal handling */ signal (SIGALRM, socket_timeout_alarm_handler); @@ -128,15 +98,22 @@ main (int argc, char *argv[]) alarm (socket_timeout); /* get the start time */ - time (&time0); + gettimeofday (&tv, NULL); /* initialize ldap */ +#ifdef HAVE_LDAP_INIT + if (!(ld = ldap_init (ld_host, ld_port))) { + printf ("Could not connect to the server at port %i\n", ld_port); + return STATE_CRITICAL; + } +#else if (!(ld = ldap_open (ld_host, ld_port))) { /*ldap_perror(ld, "ldap_open"); */ printf (_("Could not connect to the server at port %i\n"), ld_port); return STATE_CRITICAL; } - +#endif /* HAVE_LDAP_INIT */ + #ifdef HAVE_LDAP_SET_OPTION /* set ldap options */ if (ldap_set_option (ld, LDAP_OPT_PROTOCOL_VERSION, &ld_protocol) != @@ -145,6 +122,51 @@ main (int argc, char *argv[]) return STATE_CRITICAL; } #endif + + if (strstr(argv[0],"check_ldaps")) { + /* with TLS */ + if ( ld_port == LDAPS_PORT ) { + asprintf (&SERVICE, "LDAPS"); +#if defined(HAVE_LDAP_SET_OPTION) && defined(LDAP_OPT_X_TLS) + /* ldaps: set option tls */ + tls = LDAP_OPT_X_TLS_HARD; + + if (ldap_set_option (ld, LDAP_OPT_X_TLS, &tls) != LDAP_SUCCESS) + { + /*ldap_perror(ld, "ldaps_option"); */ + printf (_("Could not init TLS at port %i!\n"), ld_port); + return STATE_CRITICAL; + } +#else + printf (_("TLS not supported by the libraries!\n"), ld_port); + return STATE_CRITICAL; +#endif /* LDAP_OPT_X_TLS */ + } else { + asprintf (&SERVICE, "LDAP-TLS"); +#if defined(HAVE_LDAP_SET_OPTION) && defined(HAVE_LDAP_START_TLS_S) + /* ldap with startTLS: set option version */ + if (ldap_get_option(ld,LDAP_OPT_PROTOCOL_VERSION, &version) == LDAP_OPT_SUCCESS ) + { + if (version < LDAP_VERSION3) + { + version = LDAP_VERSION3; + ldap_set_option(ld, LDAP_OPT_PROTOCOL_VERSION, &version); + } + } + /* call start_tls */ + if (ldap_start_tls_s(ld, NULL, NULL) != LDAP_SUCCESS) + { + /*ldap_perror(ld, "ldap_start_tls"); */ + printf (_("Could not init startTLS at port %i!\n"), ld_port); + return STATE_CRITICAL; + } +#else + printf (_("startTLS not supported by the library, needs LDAPv3!\n")); + return STATE_CRITICAL; +#endif /* HAVE_LDAP_START_TLS_S */ + } + } + /* bind to the ldap server */ if (ldap_bind_s (ld, ld_binddn, ld_passwd, LDAP_AUTH_SIMPLE) != LDAP_SUCCESS) { @@ -167,26 +189,28 @@ main (int argc, char *argv[]) /* reset the alarm handler */ alarm (0); - /* get the finish time */ - time (&time1); - /* calcutate the elapsed time and compare to thresholds */ - t_diff = time1 - time0; - if (crit_time!=UNDEFINED && t_diff>=crit_time) { - printf (_("LDAP CRITICAL - %i seconds response time\n"), t_diff); - return STATE_CRITICAL; - } + microsec = deltime (tv); + elapsed_time = (double)microsec / 1.0e6; - if (warn_time!=UNDEFINED && t_diff>=warn_time) { - printf (_("LDAP WARNING - %i seconds response time\n"), t_diff); - return STATE_WARNING; - } + if (crit_time!=UNDEFINED && elapsed_time>crit_time) + status = STATE_CRITICAL; + else if (warn_time!=UNDEFINED && elapsed_time>warn_time) + status = STATE_WARNING; + else + status = STATE_OK; /* print out the result */ - printf (_("LDAP OK - %i seconds response time\n"), t_diff); - - return STATE_OK; + printf (_("LDAP %s - %.3f seconds response time|%s\n"), + state_text (status), + elapsed_time, + fperfdata ("time", elapsed_time, "s", + (int)warn_time, warn_time, + (int)crit_time, crit_time, + TRUE, 0, FALSE, 0)); + + return status; } /* process command-line arguments */ @@ -195,7 +219,7 @@ process_arguments (int argc, char **argv) { int c; - int option_index = 0; + int option = 0; /* initialize the long option struct */ static struct option longopts[] = { {"help", no_argument, 0, 'h'}, @@ -227,7 +251,7 @@ process_arguments (int argc, char **argv) } while (1) { - c = getopt_long (argc, argv, "hV2346t:c:w:H:b:p:a:D:P:", longopts, &option_index); + c = getopt_long (argc, argv, "hV2346t:c:w:H:b:p:a:D:P:", longopts, &option); if (c == -1 || c == EOF) break; @@ -241,8 +265,9 @@ process_arguments (int argc, char **argv) exit (STATE_OK); case 't': /* timeout period */ if (!is_intnonneg (optarg)) - usage2 (_("timeout interval must be a positive integer"), optarg); - socket_timeout = atoi (optarg); + usage2 (_("Timeout interval must be a positive integer"), optarg); + else + socket_timeout = atoi (optarg); break; case 'H': ld_host = optarg; @@ -263,10 +288,10 @@ process_arguments (int argc, char **argv) ld_passwd = optarg; break; case 'w': - warn_time = atoi (optarg); + warn_time = strtod (optarg, NULL); break; case 'c': - crit_time = atoi (optarg); + crit_time = strtod (optarg, NULL); break; #ifdef HAVE_LDAP_SET_OPTION case '2': @@ -287,31 +312,96 @@ process_arguments (int argc, char **argv) #endif break; default: - usage (_("check_ldap: could not parse unknown arguments\n")); - break; + usage2 (_("Unknown argument"), optarg); } } c = optind; - if (strlen(ld_host) == 0 && is_host(argv[c])) { - asprintf (&ld_host, "%s", argv[c++]); - } - if (strlen(ld_base) == 0 && argv[c]) { - asprintf (&ld_base, "%s", argv[c++]); - } + if (ld_host == NULL && is_host(argv[c])) + ld_host = strdup (argv[c++]); + + if (ld_base == NULL && argv[c]) + ld_base = strdup (argv[c++]); return validate_arguments (); } + int validate_arguments () { - if (strlen(ld_host) == 0) - usage (_("please specify the host name\n")); + if (ld_host==NULL || strlen(ld_host)==0) + usage4 (_("Please specify the host name\n")); - if (strlen(ld_base) == 0) - usage (_("please specify the LDAP base\n")); + if (ld_base==NULL || strlen(ld_base)==0) + usage4 (_("Please specify the LDAP base\n")); return OK; +} + + +void +print_help (void) +{ + char *myport; + asprintf (&myport, "%d", DEFAULT_PORT); + print_revision (progname, revision); + + printf ("Copyright (c) 1999 Didi Rieder (adrieder@sbox.tu-graz.ac.at)\n"); + printf (COPYRIGHT, copyright, email); + + print_usage (); + + printf (_(UT_HELP_VRSN)); + + printf (_(UT_HOST_PORT), 'p', myport); + + printf (_(UT_IPv46)); + + printf (_("\ + -a [--attr]\n\ + ldap attribute to search (default: \"(objectclass=*)\"\n\ + -b [--base]\n\ + ldap base (eg. ou=my unit, o=my org, c=at)\n\ + -D [--bind]\n\ + ldap bind DN (if required)\n\ + -P [--pass]\n\ + ldap password (if required)\n")); + +#ifdef HAVE_LDAP_SET_OPTION + printf (_("\ + -2 [--ver2]\n\ + use ldap protocol version 2\n\ + -3 [--ver3]\n\ + use ldap protocol version 3\n\ + (default protocol version: %d)\n"), + DEFAULT_PROTOCOL); +#endif + + printf (_(UT_WARN_CRIT)); + + printf (_(UT_TIMEOUT), DEFAULT_SOCKET_TIMEOUT); + + printf (_(UT_VERBOSE)); + + printf (_(UT_SUPPORT)); +} + + +void +print_usage (void) +{ + printf ("\ +Usage: %s -H -b [-p ] [-a ] [-D ]\n\ + [-P ] [-w ] [-c ]\n\ + [-t timeout]%s\n", +//(Note: all times are in seconds.)\n", + progname, +#ifdef HAVE_LDAP_SET_OPTION + " [-2|-3] [-4|-6]" +#else + "" +#endif + ); }