X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=plugins%2Fcheck_ssh.c;h=ba31df09bbc58d038b0d799ed0ca0752bd18e745;hb=0c2be6a608135d8a45c82a1c0ada5e8020bc2409;hp=ed36dd4187ed43c5826c06ef041303a77e41d702;hpb=6361f796172f240f5ecb2c21a60511634bbc6d47;p=nagiosplug.git diff --git a/plugins/check_ssh.c b/plugins/check_ssh.c index ed36dd4..ba31df0 100644 --- a/plugins/check_ssh.c +++ b/plugins/check_ssh.c @@ -1,23 +1,45 @@ -/* -* check_ssh.c -* -* Made by (Remi PAULMIER) -* Login -* -* Started on Fri Jul 9 09:18:23 1999 Remi PAULMIER -* Update Thu Jul 22 12:50:04 1999 remi paulmier -* $Id$ +/****************************************************************************** +* +* Nagios check_ssh plugin +* +* License: GPL +* Copyright (c) 1999-2006 nagios-plugins team +* +* Last Modified: $Date$ +* +* Description: +* +* This file contains the check_ssh plugin +* +* License Information: +* +* This program is free software; you can redistribute it and/or modify +* it under the terms of the GNU General Public License as published by +* the Free Software Foundation; either version 2 of the License, or +* (at your option) any later version. * -*/ +* This program is distributed in the hope that it will be useful, +* but WITHOUT ANY WARRANTY; without even the implied warranty of +* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +* GNU General Public License for more details. +* +* You should have received a copy of the GNU General Public License +* along with this program; if not, write to the Free Software +* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. +* +* $Id$ +* +******************************************************************************/ + +const char *progname = "check_ssh"; +const char *revision = "$Revision$"; +const char *copyright = "2000-2006"; +const char *email = "nagiosplug-devel@lists.sourceforge.net"; -#include "config.h" #include "common.h" #include "netutils.h" #include "utils.h" -#define PROGNAME "check_ssh" -#define REVISION "$Revision$" - #ifndef MSG_DONTWAIT #define MSG_DONTWAIT 0 #endif @@ -25,56 +47,66 @@ #define SSH_DFL_PORT 22 #define BUFF_SZ 256 -short port = -1; +int port = -1; char *server_name = NULL; +char *remote_version = NULL; int verbose = FALSE; int process_arguments (int, char **); -int call_getopt (int, char **); int validate_arguments (void); void print_help (void); void print_usage (void); -char *ssh_resolve (char *hostname); -int ssh_connect (char *haddr, short hport); +int ssh_connect (char *haddr, int hport, char *remote_version); + + int main (int argc, char **argv) { + int result = STATE_UNKNOWN; + + setlocale (LC_ALL, ""); + bindtextdomain (PACKAGE, LOCALEDIR); + textdomain (PACKAGE); if (process_arguments (argc, argv) == ERROR) - usage ("Could not parse arguments\n"); + usage4 (_("Could not parse arguments")); /* initialize alarm signal handling */ signal (SIGALRM, socket_timeout_alarm_handler); + alarm (socket_timeout); /* ssh_connect exits if error is found */ - ssh_connect (ssh_resolve (server_name), port); + result = ssh_connect (server_name, port, remote_version); alarm (0); - return (STATE_OK); + return (result); } + /* process command-line arguments */ int process_arguments (int argc, char **argv) { int c; -#ifdef HAVE_GETOPT_H - int option_index = 0; - static struct option long_options[] = { - {"version", no_argument, 0, 'V'}, + int option = 0; + static struct option longopts[] = { {"help", no_argument, 0, 'h'}, - {"verbose", no_argument, 0, 'v'}, - {"timeout", required_argument, 0, 't'}, + {"version", no_argument, 0, 'V'}, {"host", required_argument, 0, 'H'}, + {"port", required_argument, 0, 'p'}, + {"use-ipv4", no_argument, 0, '4'}, + {"use-ipv6", no_argument, 0, '6'}, + {"timeout", required_argument, 0, 't'}, + {"verbose", no_argument, 0, 'v'}, + {"remote-version", required_argument, 0, 'r'}, {0, 0, 0, 0} }; -#endif if (argc < 2) return ERROR; @@ -84,32 +116,45 @@ process_arguments (int argc, char **argv) strcpy (argv[c], "-t"); while (1) { -#ifdef HAVE_GETOPT_H - c = getopt_long (argc, argv, "+Vhvt:H:p:", long_options, &option_index); -#else - c = getopt (argc, argv, "+Vhvt:H:p:"); -#endif + c = getopt_long (argc, argv, "+Vhv46t:r:H:p:", longopts, &option); + if (c == -1 || c == EOF) break; switch (c) { case '?': /* help */ - usage (""); + usage2 (_("Unknown argument"), optarg); case 'V': /* version */ - print_revision (PROGNAME, REVISION); + print_revision (progname, revision); exit (STATE_OK); case 'h': /* help */ print_help (); exit (STATE_OK); - case 'v': /* verose */ + case 'v': /* verbose */ verbose = TRUE; break; case 't': /* timeout period */ if (!is_integer (optarg)) - usage ("Timeout Interval must be an integer!\n\n"); - socket_timeout = atoi (optarg); + usage2 (_("Timeout interval must be a positive integer"), optarg); + else + socket_timeout = atoi (optarg); + break; + case '4': + address_family = AF_INET; + break; + case '6': +#ifdef USE_IPV6 + address_family = AF_INET6; +#else + usage4 (_("IPv6 support not available")); +#endif + break; + case 'r': /* remote version */ + remote_version = optarg; break; case 'H': /* host */ + if (is_host (optarg) == FALSE) + usage2 (_("Invalid hostname/address"), optarg); server_name = optarg; break; case 'p': /* port */ @@ -117,18 +162,19 @@ process_arguments (int argc, char **argv) port = atoi (optarg); } else { - printf ("Port number nust be a positive integer: %s\n", optarg); - usage (""); + usage2 (_("Port number must be a positive integer"), optarg); } } - } c = optind; - if (server_name == NULL && argv[c]) { - server_name = argv[c++]; + if (server_name == NULL && c < argc) { + if (is_host (argv[c])) { + server_name = argv[c++]; + } } - else if (port == -1 && argv[c]) { + + if (port == -1 && c < argc) { if (is_intpos (argv[c])) { port = atoi (argv[c++]); } @@ -152,70 +198,36 @@ validate_arguments (void) } -/************************************************************************ -* -* Resolve hostname into IP address -* -*-----------------------------------------------------------------------*/ - -char * -ssh_resolve (char *hostname) -{ - struct hostent *host; - - host = gethostbyname (hostname); - if (!host) { - herror (hostname); - exit (STATE_CRITICAL); - } - return (host->h_addr); -} - - /************************************************************************ * * Try to connect to SSH server at specified server and port * *-----------------------------------------------------------------------*/ + int -ssh_connect (char *haddr, short hport) +ssh_connect (char *haddr, int hport, char *remote_version) { - int s; - struct sockaddr_in addr; - int addrlen; - int len; + int sd; + int result; char *output = NULL; char *buffer = NULL; char *ssh_proto = NULL; char *ssh_server = NULL; - char revision[20]; - - sscanf ("$Revision$", "$Revision: %[0123456789.]", revision); + char rev_no[20]; - addrlen = sizeof (addr); - memset (&addr, 0, addrlen); - addr.sin_port = htons (hport); - addr.sin_family = AF_INET; - bcopy (haddr, (void *) &addr.sin_addr.s_addr, 4); + sscanf ("$Revision$", "$Revision: %[0123456789.]", rev_no); - s = socket (AF_INET, SOCK_STREAM, 0); - if (!s) { - printf ("socket(): %s for %s:%d\n", strerror (errno), server_name, hport); - exit (STATE_CRITICAL); - } + result = my_tcp_connect (haddr, hport, &sd); - if (connect (s, (struct sockaddr *) &addr, addrlen)) { - printf ("connect(): %s for %s:%d\n", strerror (errno), server_name, - hport); - exit (STATE_CRITICAL); - } + if (result != STATE_OK) + return result; output = (char *) malloc (BUFF_SZ + 1); memset (output, 0, BUFF_SZ + 1); - recv (s, output, BUFF_SZ, 0); + recv (sd, output, BUFF_SZ, 0); if (strncmp (output, "SSH", 3)) { - printf ("Server answer: %s", output); + printf (_("Server answer: %s"), output); exit (STATE_CRITICAL); } else { @@ -225,34 +237,68 @@ ssh_connect (char *haddr, short hport) ssh_proto = output + 4; ssh_server = ssh_proto + strspn (ssh_proto, "-0123456789. "); ssh_proto[strspn (ssh_proto, "0123456789. ")] = 0; - printf - ("SSH ok - %s (protocol %s)\n", - ssh_server, ssh_proto); - asprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, revision); - send (s, buffer, strlen (buffer), MSG_DONTWAIT); + + asprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, rev_no); + send (sd, buffer, strlen (buffer), MSG_DONTWAIT); if (verbose) printf ("%s\n", buffer); + + if (remote_version && strcmp(remote_version, ssh_server)) { + printf + (_("SSH WARNING - %s (protocol %s) version mismatch, expected '%s'\n"), + ssh_server, ssh_proto, remote_version); + exit (STATE_WARNING); + } + + printf + (_("SSH OK - %s (protocol %s)\n"), + ssh_server, ssh_proto); + close(sd); exit (STATE_OK); } } + + void print_help (void) { - print_revision (PROGNAME, REVISION); - printf ("Copyright (c) 1999 Remi Paulmier (remi@sinfomic.fr)\n\n"); + char *myport; + asprintf (&myport, "%d", SSH_DFL_PORT); + + print_revision (progname, revision); + + printf ("Copyright (c) 1999 Remi Paulmier \n"); + printf (COPYRIGHT, copyright, email); + + printf ("%s\n", _("Try to connect to an SSH server at specified server and port")); + + printf ("\n\n"); + print_usage (); - printf ("by default, port is %d\n", SSH_DFL_PORT); + + printf (_(UT_HELP_VRSN)); + + printf (_(UT_HOST_PORT), 'p', myport); + + printf (_(UT_IPv46)); + + printf (_(UT_TIMEOUT), DEFAULT_SOCKET_TIMEOUT); + + printf (" %s\n", "-r, --remote-version=STRING"); + printf (" %s\n", _("Warn if string doesn't match expected server version (ex: OpenSSH_3.9p1)")); + + printf (_(UT_VERBOSE)); + + printf (_(UT_SUPPORT)); } + + void print_usage (void) { - printf - ("Usage:\n" - " %s -t [timeout] -p [port] \n" - " %s -V prints version info\n" - " %s -h prints more detailed help\n", PROGNAME, PROGNAME, PROGNAME); + printf (_("Usage:")); + printf ("%s [-46] [-t ] [-r ] [-p ] \n", progname); } -/* end of check_ssh.c */