Bug#851985: nrpe-ng: check_nrpe_ng - different behaviour with explicit use of CONFIG_FILE

[Chris Boot]

Control: tags -1 confirmed pending

On 20/01/17 10:29, John Lines wrote:
> Dear Maintainer,
> 
> I have specified a location for ssl_ca_file in
> /etc/nagios/check_nrpe_ng.cfg
> 
> If I call
>  /usr/lib/nagios/plugins/check_nrpe_ng -H somehost -c somecheck
> it fails, due to being unable to find a matching certificate.
> 
> If I call it as
>  /usr/lib/nagios/plugins/check_nrpe_ng -H somehost -C
>  /etc/nagios/check_nrpe_ng.cfg -c somecheck
> 
> the command succeeds.
> 
> I assume /etc/nagios/check_nrpe_ng.cfg is the default configuration
> file, so edits to it should be recognised.

Hi John,

Your assumption that check_nrpe_ng checks /etc/nagios/check_nrpe_ng.cfg
by default is not correct, and that's why your command doesn't work when
you don't specify the configuration file.

With my upstream hat on, I can't remember remember why I chose this as
the default. Possibly because the daemon requires an explicit config
file, and it didn't make sense to require specifying a config file for
the client. It doesn't make sense to me any more, so I'll get that
changed in the next release.

https://github.com/bootc/nrpe-ng/commit/597ed89e820de5b12a7e87ff0f6d045a4159da52

Regards,
Chris

-- 
Chris Boot
Tiger Computing Ltd
"Linux for Business"

Tel: 01600 483 484
Web: http://www.tiger-computing.co.uk
Follow us on Facebook: http://www.facebook.com/TigerComputing

Registered in England. Company number: 3389961
Registered address: Wyastone Business Park,
 Wyastone Leys, Monmouth, NP25 3SR

Bug#851985: nrpe-ng: check_nrpe_ng - different behaviour with explicit use of CONFIG_FILE

[John Lines]

Package: nrpe-ng
Version: 0.1.2-1
Severity: normal

Dear Maintainer,

I have specified a location for ssl_ca_file in
/etc/nagios/check_nrpe_ng.cfg

If I call
 /usr/lib/nagios/plugins/check_nrpe_ng -H somehost -c somecheck
it fails, due to being unable to find a matching certificate.

If I call it as
 /usr/lib/nagios/plugins/check_nrpe_ng -H somehost -C
 /etc/nagios/check_nrpe_ng.cfg -c somecheck

the command succeeds.

I assume /etc/nagios/check_nrpe_ng.cfg is the default configuration
file, so edits to it should be recognised.

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: armel (armv5tel)

Kernel: Linux 4.8.0-2-marvell
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages nrpe-ng depends on:
ii  adduser3.115
ii  init-system-helpers1.46
ii  lsb-base   9.20161125
ii  python3-pkg-resources  32.3.1-1
pn  python3:any
ii  ssl-cert   1.0.38

nrpe-ng recommends no packages.

nrpe-ng suggests no packages.

-- Configuration Files:
/etc/nagios/check_nrpe_ng.cfg changed:
ssl_ca_file=/etc/nagios/nrpe-ng-certs.pem


-- no debconf information