X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=plugins%2Fcheck_ssh.c;h=9a1934383111ff5b5b738d82bb7731b8af546dc6;hb=25d1ee331dbe4977a4a1a756c67f32bd51d9b070;hp=421fc01c74df794b9fa51c3096ea31d9999ff862;hpb=d77d183ddb8bdff5069ba5fa008406087162d117;p=nagiosplug.git diff --git a/plugins/check_ssh.c b/plugins/check_ssh.c index 421fc01..9a19343 100644 --- a/plugins/check_ssh.c +++ b/plugins/check_ssh.c @@ -1,23 +1,41 @@ -/* -* check_ssh.c +/***************************************************************************** * -* Made by (Remi PAULMIER) -* Login +* Nagios check_ssh plugin * -* Started on Fri Jul 9 09:18:23 1999 Remi PAULMIER -* Update Thu Jul 22 12:50:04 1999 remi paulmier -* $Id$ -* -*/ +* License: GPL +* Copyright (c) 2000-2007 Nagios Plugins Development Team +* +* Description: +* +* This file contains the check_ssh plugin +* +* Try to connect to an SSH server at specified server and port +* +* +* This program is free software: you can redistribute it and/or modify +* it under the terms of the GNU General Public License as published by +* the Free Software Foundation, either version 3 of the License, or +* (at your option) any later version. +* +* This program is distributed in the hope that it will be useful, +* but WITHOUT ANY WARRANTY; without even the implied warranty of +* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +* GNU General Public License for more details. +* +* You should have received a copy of the GNU General Public License +* along with this program. If not, see . +* +* +*****************************************************************************/ + +const char *progname = "check_ssh"; +const char *copyright = "2000-2007"; +const char *email = "nagiosplug-devel@lists.sourceforge.net"; -#include "config.h" #include "common.h" #include "netutils.h" #include "utils.h" -const char *progname = "check_ssh"; -#define REVISION "$Revision$" - #ifndef MSG_DONTWAIT #define MSG_DONTWAIT 0 #endif @@ -25,8 +43,9 @@ const char *progname = "check_ssh"; #define SSH_DFL_PORT 22 #define BUFF_SZ 256 -short port = -1; +int port = -1; char *server_name = NULL; +char *remote_version = NULL; int verbose = FALSE; int process_arguments (int, char **); @@ -34,22 +53,32 @@ int validate_arguments (void); void print_help (void); void print_usage (void); -int ssh_connect (char *haddr, short hport); +int ssh_connect (char *haddr, int hport, char *remote_version); + + int main (int argc, char **argv) { - int result; + int result = STATE_UNKNOWN; + + setlocale (LC_ALL, ""); + bindtextdomain (PACKAGE, LOCALEDIR); + textdomain (PACKAGE); + + /* Parse extra opts if any */ + argv=np_extra_opts (&argc, argv, progname); if (process_arguments (argc, argv) == ERROR) - usage ("Could not parse arguments\n"); + usage4 (_("Could not parse arguments")); /* initialize alarm signal handling */ signal (SIGALRM, socket_timeout_alarm_handler); + alarm (socket_timeout); /* ssh_connect exits if error is found */ - result = ssh_connect (server_name, port); + result = ssh_connect (server_name, port, remote_version); alarm (0); @@ -57,22 +86,25 @@ main (int argc, char **argv) } + /* process command-line arguments */ int process_arguments (int argc, char **argv) { int c; - char *tmp = NULL; - int option_index = 0; - static struct option long_options[] = { - {"version", no_argument, 0, 'V'}, + int option = 0; + static struct option longopts[] = { {"help", no_argument, 0, 'h'}, + {"version", no_argument, 0, 'V'}, + {"host", required_argument, 0, 'H'}, /* backward compatibility */ + {"hostname", required_argument, 0, 'H'}, + {"port", required_argument, 0, 'p'}, {"use-ipv4", no_argument, 0, '4'}, {"use-ipv6", no_argument, 0, '6'}, - {"verbose", no_argument, 0, 'v'}, {"timeout", required_argument, 0, 't'}, - {"host", required_argument, 0, 'H'}, + {"verbose", no_argument, 0, 'v'}, + {"remote-version", required_argument, 0, 'r'}, {0, 0, 0, 0} }; @@ -84,37 +116,45 @@ process_arguments (int argc, char **argv) strcpy (argv[c], "-t"); while (1) { - c = getopt_long (argc, argv, "+Vhv46t:H:p:", long_options, &option_index); + c = getopt_long (argc, argv, "+Vhv46t:r:H:p:", longopts, &option); if (c == -1 || c == EOF) break; switch (c) { case '?': /* help */ - usage (""); + usage5 (); case 'V': /* version */ - print_revision (progname, REVISION); + print_revision (progname, NP_VERSION); exit (STATE_OK); case 'h': /* help */ print_help (); exit (STATE_OK); - case 'v': /* verose */ + case 'v': /* verbose */ verbose = TRUE; break; case 't': /* timeout period */ if (!is_integer (optarg)) - usage ("Timeout Interval must be an integer!\n\n"); - socket_timeout = atoi (optarg); + usage2 (_("Timeout interval must be a positive integer"), optarg); + else + socket_timeout = atoi (optarg); break; case '4': address_family = AF_INET; break; case '6': +#ifdef USE_IPV6 address_family = AF_INET6; +#else + usage4 (_("IPv6 support not available")); +#endif + break; + case 'r': /* remote version */ + remote_version = optarg; break; case 'H': /* host */ if (is_host (optarg) == FALSE) - usage ("Invalid hostname/address\n"); + usage2 (_("Invalid hostname/address"), optarg); server_name = optarg; break; case 'p': /* port */ @@ -122,11 +162,9 @@ process_arguments (int argc, char **argv) port = atoi (optarg); } else { - printf ("Port number nust be a positive integer: %s\n", optarg); - usage (""); + usage2 (_("Port number must be a positive integer"), optarg); } } - } c = optind; @@ -166,8 +204,9 @@ validate_arguments (void) * *-----------------------------------------------------------------------*/ + int -ssh_connect (char *haddr, short hport) +ssh_connect (char *haddr, int hport, char *remote_version) { int sd; int result; @@ -175,9 +214,7 @@ ssh_connect (char *haddr, short hport) char *buffer = NULL; char *ssh_proto = NULL; char *ssh_server = NULL; - char revision[20]; - - sscanf ("$Revision$", "$Revision: %[0123456789.]", revision); + static char *rev_no = VERSION; result = my_tcp_connect (haddr, hport, &sd); @@ -188,7 +225,8 @@ ssh_connect (char *haddr, short hport) memset (output, 0, BUFF_SZ + 1); recv (sd, output, BUFF_SZ, 0); if (strncmp (output, "SSH", 3)) { - printf ("Server answer: %s", output); + printf (_("Server answer: %s"), output); + close(sd); exit (STATE_CRITICAL); } else { @@ -198,37 +236,76 @@ ssh_connect (char *haddr, short hport) ssh_proto = output + 4; ssh_server = ssh_proto + strspn (ssh_proto, "-0123456789. "); ssh_proto[strspn (ssh_proto, "0123456789. ")] = 0; - printf - ("SSH OK - %s (protocol %s)\n", - ssh_server, ssh_proto); - asprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, revision); + + asprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, rev_no); send (sd, buffer, strlen (buffer), MSG_DONTWAIT); if (verbose) printf ("%s\n", buffer); + + if (remote_version && strcmp(remote_version, ssh_server)) { + printf + (_("SSH WARNING - %s (protocol %s) version mismatch, expected '%s'\n"), + ssh_server, ssh_proto, remote_version); + close(sd); + exit (STATE_WARNING); + } + + printf + (_("SSH OK - %s (protocol %s)\n"), + ssh_server, ssh_proto); + close(sd); exit (STATE_OK); } } + + void print_help (void) { - print_revision (progname, REVISION); - printf ("Copyright (c) 1999 Remi Paulmier (remi@sinfomic.fr)\n\n"); + char *myport; + asprintf (&myport, "%d", SSH_DFL_PORT); + + print_revision (progname, NP_VERSION); + + printf ("Copyright (c) 1999 Remi Paulmier \n"); + printf (COPYRIGHT, copyright, email); + + printf ("%s\n", _("Try to connect to an SSH server at specified server and port")); + + printf ("\n\n"); + print_usage (); - printf ("by default, port is %d\n", SSH_DFL_PORT); + + printf (UT_HELP_VRSN); + printf (UT_EXTRA_OPTS); + + printf (UT_HOST_PORT, 'p', myport); + + printf (UT_IPv46); + + printf (UT_TIMEOUT, DEFAULT_SOCKET_TIMEOUT); + + printf (" %s\n", "-r, --remote-version=STRING"); + printf (" %s\n", _("Warn if string doesn't match expected server version (ex: OpenSSH_3.9p1)")); + + printf (UT_VERBOSE); + +#ifdef NP_EXTRA_OPTS + printf ("\n"); + printf ("%s\n", _("Notes:")); + printf (UT_EXTRA_OPTS_NOTES); +#endif + + printf (UT_SUPPORT); } + + void print_usage (void) { - printf - ("Usage:\n" - " %s -t [timeout] -p [port] \n" - " %s -V prints version info\n" - " %s -4 use IPv4 connection\n" - " %s -6 use IPv6 connection\n" - " %s -h prints more detailed help\n", - progname, progname, progname, progname, progname); + printf (_("Usage:")); + printf ("%s [-46] [-t ] [-r ] [-p ] \n", progname); } -/* end of check_ssh.c */