> -----Ursprüngliche Nachricht-----
> Von: icinga-users [mailto:[email protected]] Im Auftrag
> von Michael Friedrich
> Gesendet: Donnerstag, 26. November 2015 12:38
> An: [email protected]
> Betreff: Re: [icinga-users] Beginners question smtpauth check
>
>
> > On 26 Nov 2015, at 12:33, Andreas Grabner <andreas.grabner@fenz-
> software.at> wrote:
> >
> >> -----Ursprüngliche Nachricht-----
> >> Von: icinga-users [mailto:[email protected]] Im
> >> Auftrag von Michael Friedrich
> >> Gesendet: Donnerstag, 26. November 2015 12:25
> >> An: [email protected]
> >> Betreff: Re: [icinga-users] Beginners question smtpauth check
> >>
> >>
> >>> On 26 Nov 2015, at 11:48, Andreas Grabner <andreas.grabner@fenz-
> >> software.at> wrote:
> >>>
> >>> Hi,
> >>>
> >>> i used nagios around 10 years ago. Now I start with incinga and have
> >>> some
> >> questions. The most concrete is:
> >>>
> >>> I want to check a SMTP Server with TLS and authentication. The setup
> >>> on a
> >> debian jessie looks like this:
> >>>
> >>> object Host "any.host.at" {
> >>> import "generic-host"
> >>> address = "any.host.at"
> >>> // address6 = "::1"
> >>> vars.os = "Windows"
> >>> vars.smtp_authtype = "LOGIN"
> >>> vars.smtp_authuser = "user1"
> >>> vars.smtp_authpass = "xxxxxxxxxxxxxx"
> >>> vars.smtp_starttls = true
> >>> vars.smtp_mail_from = "[email protected]"
> >>> /* Define notification mail attributes for notification apply rules
> >>> in
> >> `notifications.conf`. */
> >>> vars.notification["mail"] = {
> >>> /* The UserGroup `icingaadmins` is defined in `users.conf`. */
> >>> groups = [ "icingaadmins" ]
> >>> }
> >>> }
> >>>
> >>> Icinga2 reports: SMTP CRITICAL - no authuser specified, 0.143 sec.
> >>> response time
> >>
> >> And your service object configuration looks like?
> >>
> > This:
> >
> > apply Service "smtp" {
> > import "generic-service"
> >
> > check_command = "smtp"
> >
> > assign where host.name == " any.host.at"
> > }
> >
> > vars.smtp_authtype = "LOGIN"
> > is used, without it the service is OK
>
> The CheckCommand parameters are described here:
> http://docs.icinga.org/icinga2/latest/doc/module/icinga2/chapter/plugin-
> check-commands#plugin-check-command-smtp
> In case you want to debug the executed command line for your plugin, either
> enable the debug log and force a check, or use the Icinga 2 console cli
> command connected to the API (requires that you did setup it in 2.4) to fetch
> the service check result and its command line.
>
> http://docs.icinga.org/icinga2/latest/doc/module/icinga2/chapter/cli-
> commands#cli-command-console
Thanks for the debug log tip. The problem is the "vars.smtp_starttls = true"
because the command looks like
/usr/lib/nagios/plugins/check_smtp -A 'LOGIN' '-H' 'xxxxxxxxxx '-P' 'xxxxxxx'
'-S' 'true' '-U' 'xxxxxxxxxxxxxxx' '-f' 'xxxxxxxxxxxxxxx'
-S does not take an argument
(-S, --starttls
Use STARTTLS for the connection. )
/usr/lib/nagios/plugins/check_smtp -A 'LOGIN' '-H' 'xxxxxxxxxx '-P' 'xxxxxxx'
'-U' 'xxxxxxxxxxxxxxx' '-f' 'xxxxxxxxxxxxxxx' '-S' 'true'
Is working, but don`t know how to put it there.
I think it is an misconfiguration or ab bug. I think the mistake is in
command-plugins.conf
object CheckCommand "smtp" {
import "plugin-check-command"
import "ipv4-or-ipv6"
command = [ PluginDir + "/check_smtp" ]
arguments = {
"-H" = "$smtp_address$"
"-p" = "$smtp_port$"
"-f" = "$smtp_mail_from$"
"-e" = "$smtp_expect$"
"-C" = "$smtp_command$"
"-R" = "$smtp_response$"
"-F" = "$smtp_helo_fqdn$"
"-D" = "$smtp_certificate_age$"
"-A" = "$smtp_authtype$"
"-U" = "$smtp_authuser$"
"-P" = "$smtp_authpass$"
"-q" = "$smtp_ignore_quit$"
"-w" = "$smtp_warning$"
"-c" = "$smtp_critical$"
"-t" = "$smtp_timeout$"
"-S" = "$smtp_starttls$"
}
vars.smtp_address = "$check_address$"
}
Whats your opinion?
Andreas
_______________________________________________
icinga-users mailing list
[email protected]
https://lists.icinga.org/mailman/listinfo/icinga-users