Hi, I recently learned of a secure replacement for nrpe. The check-mk nagios add on provides 'mrpe' which is a drop in replacement for nrpe, you can use it with existing nrpe checks but they get run via check-mk's transport, which can use ssh. I moved some of my existing nrpe scripts to that, and I plan to eventually transition them to native check-mk scripts for performance reasons.
In addition to replacing nrpe, there is also a check-mk agent that replaces the also insecurce nagios-statd (agent 'ps'). It took some effort to transition, but now everything is done over ssh (even on private networks) and also check-mk comes with so many plugins that I have a lot more checks now and was able to get rid of some custom checks. Check it out, I think you'll like it. I have some notes on how to transition things I should post somewhere... -- Matt Taggart tagg...@debian.org -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
