X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=plugins%2Fcheck_ssh.c;h=5617addc66baded12d9ead64636878626471b551;hb=45b373ebdad0c82296342f4ad774db2ff643e511;hp=faaead6a36725ef8e27a286067b567a169ec07de;hpb=0c3386274ef5002dffc20337ef02407f24d7400c;p=nagiosplug.git diff --git a/plugins/check_ssh.c b/plugins/check_ssh.c index faaead6..5617add 100644 --- a/plugins/check_ssh.c +++ b/plugins/check_ssh.c @@ -1,23 +1,32 @@ -/* -* check_ssh.c -* -* Made by (Remi PAULMIER) -* Login -* -* Started on Fri Jul 9 09:18:23 1999 Remi PAULMIER -* Update Thu Jul 22 12:50:04 1999 remi paulmier -* $Id$ -* -*/ +/****************************************************************************** + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + + $Id$ + +******************************************************************************/ + +const char *progname = "check_ssh"; +const char *revision = "$Revision$"; +const char *copyright = "2000-2004"; +const char *email = "nagiosplug-devel@lists.sourceforge.net"; -#include "config.h" #include "common.h" #include "netutils.h" #include "utils.h" -const char *progname = "check_ssh"; -#define REVISION "$Revision$" - #ifndef MSG_DONTWAIT #define MSG_DONTWAIT 0 #endif @@ -25,8 +34,9 @@ const char *progname = "check_ssh"; #define SSH_DFL_PORT 22 #define BUFF_SZ 256 -short port = -1; +int port = -1; char *server_name = NULL; +char *remote_version = NULL; int verbose = FALSE; int process_arguments (int, char **); @@ -34,46 +44,56 @@ int validate_arguments (void); void print_help (void); void print_usage (void); -char *ssh_resolve (char *hostname); -int ssh_connect (char *haddr, short hport); +int ssh_connect (char *haddr, int hport, char *remote_version); + + int main (int argc, char **argv) { + int result = STATE_UNKNOWN; + + setlocale (LC_ALL, ""); + bindtextdomain (PACKAGE, LOCALEDIR); + textdomain (PACKAGE); if (process_arguments (argc, argv) == ERROR) - usage ("Could not parse arguments\n"); + usage4 (_("Could not parse arguments")); /* initialize alarm signal handling */ signal (SIGALRM, socket_timeout_alarm_handler); + alarm (socket_timeout); /* ssh_connect exits if error is found */ - ssh_connect (ssh_resolve (server_name), port); + result = ssh_connect (server_name, port, remote_version); alarm (0); - return (STATE_OK); + return (result); } + /* process command-line arguments */ int process_arguments (int argc, char **argv) { int c; -#ifdef HAVE_GETOPT_H - int option_index = 0; - static struct option long_options[] = { - {"version", no_argument, 0, 'V'}, + int option = 0; + static struct option longopts[] = { {"help", no_argument, 0, 'h'}, - {"verbose", no_argument, 0, 'v'}, - {"timeout", required_argument, 0, 't'}, + {"version", no_argument, 0, 'V'}, {"host", required_argument, 0, 'H'}, + {"port", required_argument, 0, 'p'}, + {"use-ipv4", no_argument, 0, '4'}, + {"use-ipv6", no_argument, 0, '6'}, + {"timeout", required_argument, 0, 't'}, + {"verbose", no_argument, 0, 'v'}, + {"remote-version", required_argument, 0, 'r'}, {0, 0, 0, 0} }; -#endif if (argc < 2) return ERROR; @@ -83,32 +103,45 @@ process_arguments (int argc, char **argv) strcpy (argv[c], "-t"); while (1) { -#ifdef HAVE_GETOPT_H - c = getopt_long (argc, argv, "+Vhvt:H:p:", long_options, &option_index); -#else - c = getopt (argc, argv, "+Vhvt:H:p:"); -#endif + c = getopt_long (argc, argv, "+Vhv46t:r:H:p:", longopts, &option); + if (c == -1 || c == EOF) break; switch (c) { case '?': /* help */ - usage (""); + usage2 (_("Unknown argument"), optarg); case 'V': /* version */ - print_revision (progname, REVISION); + print_revision (progname, revision); exit (STATE_OK); case 'h': /* help */ print_help (); exit (STATE_OK); - case 'v': /* verose */ + case 'v': /* verbose */ verbose = TRUE; break; case 't': /* timeout period */ if (!is_integer (optarg)) - usage ("Timeout Interval must be an integer!\n\n"); - socket_timeout = atoi (optarg); + usage2 (_("Timeout interval must be a positive integer"), optarg); + else + socket_timeout = atoi (optarg); + break; + case '4': + address_family = AF_INET; + break; + case '6': +#ifdef USE_IPV6 + address_family = AF_INET6; +#else + usage4 (_("IPv6 support not available")); +#endif + break; + case 'r': /* remote version */ + remote_version = optarg; break; case 'H': /* host */ + if (is_host (optarg) == FALSE) + usage2 (_("Invalid hostname/address"), optarg); server_name = optarg; break; case 'p': /* port */ @@ -116,18 +149,19 @@ process_arguments (int argc, char **argv) port = atoi (optarg); } else { - printf ("Port number nust be a positive integer: %s\n", optarg); - usage (""); + usage2 (_("Port number must be a positive integer"), optarg); } } - } c = optind; - if (server_name == NULL && argv[c]) { - server_name = argv[c++]; + if (server_name == NULL && c < argc) { + if (is_host (argv[c])) { + server_name = argv[c++]; + } } - else if (port == -1 && argv[c]) { + + if (port == -1 && c < argc) { if (is_intpos (argv[c])) { port = atoi (argv[c++]); } @@ -151,70 +185,36 @@ validate_arguments (void) } -/************************************************************************ -* -* Resolve hostname into IP address -* -*-----------------------------------------------------------------------*/ - -char * -ssh_resolve (char *hostname) -{ - struct hostent *host; - - host = gethostbyname (hostname); - if (!host) { - herror (hostname); - exit (STATE_CRITICAL); - } - return (host->h_addr); -} - - /************************************************************************ * * Try to connect to SSH server at specified server and port * *-----------------------------------------------------------------------*/ + int -ssh_connect (char *haddr, short hport) +ssh_connect (char *haddr, int hport, char *remote_version) { - int s; - struct sockaddr_in addr; - int addrlen; - int len; + int sd; + int result; char *output = NULL; char *buffer = NULL; char *ssh_proto = NULL; char *ssh_server = NULL; - char revision[20]; + char rev_no[20]; - sscanf ("$Revision$", "$Revision: %[0123456789.]", revision); + sscanf ("$Revision$", "$Revision: %[0123456789.]", rev_no); - addrlen = sizeof (addr); - memset (&addr, 0, addrlen); - addr.sin_port = htons (hport); - addr.sin_family = AF_INET; - bcopy (haddr, (void *) &addr.sin_addr.s_addr, 4); + result = my_tcp_connect (haddr, hport, &sd); - s = socket (AF_INET, SOCK_STREAM, 0); - if (!s) { - printf ("socket(): %s for %s:%d\n", strerror (errno), server_name, hport); - exit (STATE_CRITICAL); - } - - if (connect (s, (struct sockaddr *) &addr, addrlen)) { - printf ("connect(): %s for %s:%d\n", strerror (errno), server_name, - hport); - exit (STATE_CRITICAL); - } + if (result != STATE_OK) + return result; output = (char *) malloc (BUFF_SZ + 1); memset (output, 0, BUFF_SZ + 1); - recv (s, output, BUFF_SZ, 0); + recv (sd, output, BUFF_SZ, 0); if (strncmp (output, "SSH", 3)) { - printf ("Server answer: %s", output); + printf (_("Server answer: %s"), output); exit (STATE_CRITICAL); } else { @@ -224,34 +224,67 @@ ssh_connect (char *haddr, short hport) ssh_proto = output + 4; ssh_server = ssh_proto + strspn (ssh_proto, "-0123456789. "); ssh_proto[strspn (ssh_proto, "0123456789. ")] = 0; - printf - ("SSH ok - %s (protocol %s)\n", - ssh_server, ssh_proto); - asprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, revision); - send (s, buffer, strlen (buffer), MSG_DONTWAIT); + + asprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, rev_no); + send (sd, buffer, strlen (buffer), MSG_DONTWAIT); if (verbose) printf ("%s\n", buffer); + + if (remote_version && strcmp(remote_version, ssh_server)) { + printf + (_("SSH WARNING - %s (protocol %s) version mismatch, expected '%s'\n"), + ssh_server, ssh_proto, remote_version); + exit (STATE_WARNING); + } + + printf + (_("SSH OK - %s (protocol %s)\n"), + ssh_server, ssh_proto); + close(sd); exit (STATE_OK); } } + + void print_help (void) { - print_revision (progname, REVISION); - printf ("Copyright (c) 1999 Remi Paulmier (remi@sinfomic.fr)\n\n"); + char *myport; + asprintf (&myport, "%d", SSH_DFL_PORT); + + print_revision (progname, revision); + + printf ("Copyright (c) 1999 Remi Paulmier \n"); + printf (COPYRIGHT, copyright, email); + + printf (_("Try to connect to an SSH server at specified server and port\n\n")); + print_usage (); - printf ("by default, port is %d\n", SSH_DFL_PORT); + + printf (_(UT_HELP_VRSN)); + + printf (_(UT_HOST_PORT), 'p', myport); + + printf (_(UT_IPv46)); + + printf (_(UT_TIMEOUT), DEFAULT_SOCKET_TIMEOUT); + + printf (_("\ + -r, --remote-version=STRING\n\ + Warn if string doesn't match expected server version (ex: OpenSSH_3.9p1)\n")); + + printf (_(UT_VERBOSE)); + + printf (_(UT_SUPPORT)); } + + void print_usage (void) { - printf - ("Usage:\n" - " %s -t [timeout] -p [port] \n" - " %s -V prints version info\n" - " %s -h prints more detailed help\n", progname, progname, progname); + printf ("\ +Usage: %s [-46] [-t ] [-r ] [-p ] \n", progname); } -/* end of check_ssh.c */