Thanks for the suggestion, gave that a try, or more precisely:

sudo su nagios -c "more /proc/loadavg"

after removing the password for user nagios and setting the shell to /bin/false.

This still produces no output. 

Very peculiar. I guess there must be something wrong with the authentication or 
setup on these machines, but can't figure out what is going on here. 

auth.log contains
"Successful su for nagios by root" 
right after this so that part seems all right. 

The systems are using ldap pam authentication for other users, though nagios 
and other such system accounts are local in the /etc/passwd and /etc/passwd 
files. The local accounts seem to work fine for this command if they have a 
password and shell is set to /bin/bash, rather than /bin/false.

cheers,
Peter


On Apr 27, 2012, at 9:22 AM, David Harbaugh wrote:

> 'su -' makes the shell a login shell ... which requires a real shell, not 
> /bin/false.
> 
> What if you do this?
> 
> sudo su nagios more /proc/loadavg
> 
> Skip the -, which should run more directly, which should work even with 
> /bin/false listed as the shell.
> 
> If that works, then you should be able to modify your nagios command 
> definition the same way ...




------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Reply via email to