77 lines
2.4 KiB
Plaintext
77 lines
2.4 KiB
Plaintext
|
NAME
|
||
|
check_ad - Nagios NRPE plugin for Active Directory health check
|
||
|
|
||
|
SYNOPSIS
|
||
|
check_ad [--dc] [--member] [--noeventlog] [--nokerberos][--help]
|
||
|
|
||
|
DESCRIPTION
|
||
|
check_ad works as a Nagios NRPE plugin for Active Directory health check.
|
||
|
|
||
|
OPTIONS
|
||
|
--dc
|
||
|
Checks domain controller functionality by using *dcdiag* tool from
|
||
|
Windows Support Tools. Following dcdiag tests are performed :
|
||
|
|
||
|
services, replications, advertising, fsmocheck, ridmanager, machineaccount, kccevent, frssysvol (post-Windows 2000 only), frsevent (post-Windows 2000 only),
|
||
|
|
||
|
--member
|
||
|
Checks domain member functionality by using *netdiag* tool from
|
||
|
Windows Support Tools. Following netdiag tests are performed :
|
||
|
|
||
|
member, netbt, dns, dsgetdc, ldap, kerberos
|
||
|
|
||
|
--noeventlog
|
||
|
Don't run the dc tests kccevent and frsevent, since their 24-hour
|
||
|
scope may not be too relevant for Nagios.
|
||
|
|
||
|
--nokerberos
|
||
|
Don't run the member test kerberos due to netdiag bug (See Microsoft
|
||
|
KB870692)
|
||
|
|
||
|
--help
|
||
|
Produces help message.
|
||
|
|
||
|
EXIT VALUES
|
||
|
0 OK
|
||
|
1 WARNING
|
||
|
2 CRITICAL
|
||
|
3 UNKNOWN
|
||
|
|
||
|
AUTHOR
|
||
|
Tevfik Karagulle <http://www.itefix.no>
|
||
|
|
||
|
SEE ALSO
|
||
|
Nagios web site <http://www.nagios.org>
|
||
|
Nagios NRPE documentation
|
||
|
<http://nagios.sourceforge.net/docs/nrpe/NRPE.pdf>
|
||
|
DCDIAG documentation
|
||
|
<http://technet2.microsoft.com/windowsserver/en/library/f7396ad6-0baa-4e6
|
||
|
6-8d18-17f83c5e4e6c1033.mspx>
|
||
|
NETDIAG documentation
|
||
|
<http://technet2.microsoft.com/windowsserver/en/library/cf4926db-87ea-4f7
|
||
|
a-9806-0b54e1c00a771033.mspx>
|
||
|
|
||
|
COPYRIGHT
|
||
|
This program is distributed under the Artistic License.
|
||
|
<http://www.opensource.org/licenses/artistic-license.php>
|
||
|
|
||
|
VERSION
|
||
|
Version 1.4, January 2009
|
||
|
|
||
|
CHANGELOG
|
||
|
changes from 1.3
|
||
|
- Windows 2008 support (checks are done in lowercase only)
|
||
|
- Dropped member test 'trust' as it requires domain admin privileges thus introducing a security weakness.
|
||
|
- Introducing option 'nokerberos' due to netdiag bug (see Microsoft KB870692)
|
||
|
|
||
|
changes from 1.2
|
||
|
- Add command line option 'noeventlog'.
|
||
|
|
||
|
changes from 1.1
|
||
|
- Support for Windows 2000 domains
|
||
|
- Use CRITICAL instead of ERROR
|
||
|
|
||
|
changes from 1.0
|
||
|
- remove sysevent test as it can be many other event producers than active directory.
|
||
|
|