X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=plugins%2Fcheck_ssh.c;h=9a1934383111ff5b5b738d82bb7731b8af546dc6;hb=25d1ee331dbe4977a4a1a756c67f32bd51d9b070;hp=79e17017ba24755631d0891df01336fc81acd13c;hpb=22bd672d19c378f1e6124ee18e64e5a88cf53739;p=nagiosplug.git diff --git a/plugins/check_ssh.c b/plugins/check_ssh.c index 79e1701..9a19343 100644 --- a/plugins/check_ssh.c +++ b/plugins/check_ssh.c @@ -1,30 +1,41 @@ -/****************************************************************************** +/***************************************************************************** +* +* Nagios check_ssh plugin +* +* License: GPL +* Copyright (c) 2000-2007 Nagios Plugins Development Team +* +* Description: +* +* This file contains the check_ssh plugin +* +* Try to connect to an SSH server at specified server and port +* +* +* This program is free software: you can redistribute it and/or modify +* it under the terms of the GNU General Public License as published by +* the Free Software Foundation, either version 3 of the License, or +* (at your option) any later version. +* +* This program is distributed in the hope that it will be useful, +* but WITHOUT ANY WARRANTY; without even the implied warranty of +* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +* GNU General Public License for more details. +* +* You should have received a copy of the GNU General Public License +* along with this program. If not, see . +* +* +*****************************************************************************/ - This program is free software; you can redistribute it and/or modify - it under the terms of the GNU General Public License as published by - the Free Software Foundation; either version 2 of the License, or - (at your option) any later version. - - This program is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - GNU General Public License for more details. - - You should have received a copy of the GNU General Public License - along with this program; if not, write to the Free Software - Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. - -******************************************************************************/ +const char *progname = "check_ssh"; +const char *copyright = "2000-2007"; +const char *email = "nagiosplug-devel@lists.sourceforge.net"; #include "common.h" #include "netutils.h" #include "utils.h" -const char *progname = "check_ssh"; -const char *revision = "$Revision$"; -const char *copyright = "2000-2003"; -const char *email = "nagiosplug-devel@lists.sourceforge.net"; - #ifndef MSG_DONTWAIT #define MSG_DONTWAIT 0 #endif @@ -34,6 +45,7 @@ const char *email = "nagiosplug-devel@lists.sourceforge.net"; int port = -1; char *server_name = NULL; +char *remote_version = NULL; int verbose = FALSE; int process_arguments (int, char **); @@ -41,26 +53,32 @@ int validate_arguments (void); void print_help (void); void print_usage (void); -int ssh_connect (char *haddr, int hport); +int ssh_connect (char *haddr, int hport, char *remote_version); + + int main (int argc, char **argv) { - int result; + int result = STATE_UNKNOWN; setlocale (LC_ALL, ""); bindtextdomain (PACKAGE, LOCALEDIR); textdomain (PACKAGE); + /* Parse extra opts if any */ + argv=np_extra_opts (&argc, argv, progname); + if (process_arguments (argc, argv) == ERROR) - usage (_("Could not parse arguments\n")); + usage4 (_("Could not parse arguments")); /* initialize alarm signal handling */ signal (SIGALRM, socket_timeout_alarm_handler); + alarm (socket_timeout); /* ssh_connect exits if error is found */ - result = ssh_connect (server_name, port); + result = ssh_connect (server_name, port, remote_version); alarm (0); @@ -68,6 +86,7 @@ main (int argc, char **argv) } + /* process command-line arguments */ int process_arguments (int argc, char **argv) @@ -78,12 +97,14 @@ process_arguments (int argc, char **argv) static struct option longopts[] = { {"help", no_argument, 0, 'h'}, {"version", no_argument, 0, 'V'}, - {"host", required_argument, 0, 'H'}, + {"host", required_argument, 0, 'H'}, /* backward compatibility */ + {"hostname", required_argument, 0, 'H'}, {"port", required_argument, 0, 'p'}, {"use-ipv4", no_argument, 0, '4'}, {"use-ipv6", no_argument, 0, '6'}, {"timeout", required_argument, 0, 't'}, {"verbose", no_argument, 0, 'v'}, + {"remote-version", required_argument, 0, 'r'}, {0, 0, 0, 0} }; @@ -95,26 +116,26 @@ process_arguments (int argc, char **argv) strcpy (argv[c], "-t"); while (1) { - c = getopt_long (argc, argv, "+Vhv46t:H:p:", longopts, &option); + c = getopt_long (argc, argv, "+Vhv46t:r:H:p:", longopts, &option); if (c == -1 || c == EOF) break; switch (c) { case '?': /* help */ - usage (""); + usage5 (); case 'V': /* version */ - print_revision (progname, revision); + print_revision (progname, NP_VERSION); exit (STATE_OK); case 'h': /* help */ print_help (); exit (STATE_OK); - case 'v': /* verose */ + case 'v': /* verbose */ verbose = TRUE; break; case 't': /* timeout period */ if (!is_integer (optarg)) - usage (_("Timeout Interval must be an integer!\n\n")); + usage2 (_("Timeout interval must be a positive integer"), optarg); else socket_timeout = atoi (optarg); break; @@ -125,12 +146,15 @@ process_arguments (int argc, char **argv) #ifdef USE_IPV6 address_family = AF_INET6; #else - usage (_("IPv6 support not available\n")); + usage4 (_("IPv6 support not available")); #endif break; + case 'r': /* remote version */ + remote_version = optarg; + break; case 'H': /* host */ if (is_host (optarg) == FALSE) - usage ("Invalid hostname/address\n"); + usage2 (_("Invalid hostname/address"), optarg); server_name = optarg; break; case 'p': /* port */ @@ -138,11 +162,9 @@ process_arguments (int argc, char **argv) port = atoi (optarg); } else { - printf ("Port number nust be a positive integer: %s\n", optarg); - usage (""); + usage2 (_("Port number must be a positive integer"), optarg); } } - } c = optind; @@ -182,8 +204,9 @@ validate_arguments (void) * *-----------------------------------------------------------------------*/ + int -ssh_connect (char *haddr, int hport) +ssh_connect (char *haddr, int hport, char *remote_version) { int sd; int result; @@ -191,9 +214,7 @@ ssh_connect (char *haddr, int hport) char *buffer = NULL; char *ssh_proto = NULL; char *ssh_server = NULL; - char rev_no[20]; - - sscanf ("$Revision$", "$Revision: %[0123456789.]", rev_no); + static char *rev_no = VERSION; result = my_tcp_connect (haddr, hport, &sd); @@ -205,6 +226,7 @@ ssh_connect (char *haddr, int hport) recv (sd, output, BUFF_SZ, 0); if (strncmp (output, "SSH", 3)) { printf (_("Server answer: %s"), output); + close(sd); exit (STATE_CRITICAL); } else { @@ -214,51 +236,76 @@ ssh_connect (char *haddr, int hport) ssh_proto = output + 4; ssh_server = ssh_proto + strspn (ssh_proto, "-0123456789. "); ssh_proto[strspn (ssh_proto, "0123456789. ")] = 0; - printf - (_("SSH OK - %s (protocol %s)\n"), - ssh_server, ssh_proto); + asprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, rev_no); send (sd, buffer, strlen (buffer), MSG_DONTWAIT); if (verbose) printf ("%s\n", buffer); + + if (remote_version && strcmp(remote_version, ssh_server)) { + printf + (_("SSH WARNING - %s (protocol %s) version mismatch, expected '%s'\n"), + ssh_server, ssh_proto, remote_version); + close(sd); + exit (STATE_WARNING); + } + + printf + (_("SSH OK - %s (protocol %s)\n"), + ssh_server, ssh_proto); + close(sd); exit (STATE_OK); } } + + void print_help (void) { char *myport; asprintf (&myport, "%d", SSH_DFL_PORT); - print_revision (progname, revision); + print_revision (progname, NP_VERSION); - printf (_("Copyright (c) 1999 Remi Paulmier \n")); - printf (_(COPYRIGHT), copyright, email); + printf ("Copyright (c) 1999 Remi Paulmier \n"); + printf (COPYRIGHT, copyright, email); - printf (_("Try to connect to SSH server at specified server and port\n\n")); + printf ("%s\n", _("Try to connect to an SSH server at specified server and port")); + + printf ("\n\n"); print_usage (); - printf (_(UT_HELP_VRSN)); + printf (UT_HELP_VRSN); + printf (UT_EXTRA_OPTS); + + printf (UT_HOST_PORT, 'p', myport); - printf (_(UT_HOST_PORT), 'p', myport); + printf (UT_IPv46); - printf (_(UT_IPv46)); + printf (UT_TIMEOUT, DEFAULT_SOCKET_TIMEOUT); - printf (_(UT_TIMEOUT), DEFAULT_SOCKET_TIMEOUT); + printf (" %s\n", "-r, --remote-version=STRING"); + printf (" %s\n", _("Warn if string doesn't match expected server version (ex: OpenSSH_3.9p1)")); - printf (_(UT_VERBOSE)); + printf (UT_VERBOSE); - printf (_(UT_SUPPORT)); +#ifdef NP_EXTRA_OPTS + printf ("\n"); + printf ("%s\n", _("Notes:")); + printf (UT_EXTRA_OPTS_NOTES); +#endif + + printf (UT_SUPPORT); } + + void print_usage (void) { - printf (_("\ -Usage: %s [-46] [-t ] [-p ] \n"), progname); - printf (_(UT_HLP_VRS), progname, progname); + printf (_("Usage:")); + printf ("%s [-46] [-t ] [-r ] [-p ] \n", progname); } -/* end of check_ssh.c */