NAME
check_ad - Nagios NRPE plugin for Active Directory health check
SYNOPSIS
check_ad [--dc] [--member] [--noeventlog] [--nokerberos][--help]
DESCRIPTION
check_ad works as a Nagios NRPE plugin for Active Directory health check.
OPTIONS
--dc
Checks domain controller functionality by using *dcdiag* tool from
Windows Support Tools. Following dcdiag tests are performed :
services, replications, advertising, fsmocheck, ridmanager, machineaccount, kccevent, frssysvol (post-Windows 2000 only), frsevent (post-Windows 2000 only),
--member
Checks domain member functionality by using *netdiag* tool from
Windows Support Tools. Following netdiag tests are performed :
member, netbt, dns, dsgetdc, ldap, kerberos
--noeventlog
Don't run the dc tests kccevent and frsevent, since their 24-hour
scope may not be too relevant for Nagios.
--nokerberos
Don't run the member test kerberos due to netdiag bug (See Microsoft
KB870692)
--help
Produces help message.
EXIT VALUES
0 OK
1 WARNING
2 CRITICAL
3 UNKNOWN
AUTHOR
Tevfik Karagulle <http://www.itefix.no>
SEE ALSO
Nagios web site <http://www.nagios.org>
Nagios NRPE documentation
<http://nagios.sourceforge.net/docs/nrpe/NRPE.pdf>
DCDIAG documentation
<http://technet2.microsoft.com/windowsserver/en/library/f7396ad6-0baa-4e6
6-8d18-17f83c5e4e6c1033.mspx>
NETDIAG documentation
<http://technet2.microsoft.com/windowsserver/en/library/cf4926db-87ea-4f7
a-9806-0b54e1c00a771033.mspx>
COPYRIGHT
This program is distributed under the Artistic License.
<http://www.opensource.org/licenses/artistic-license.php>
VERSION
Version 1.4, January 2009
CHANGELOG
changes from 1.3
- Windows 2008 support (checks are done in lowercase only)
- Dropped member test 'trust' as it requires domain admin privileges thus introducing a security weakness.
- Introducing option 'nokerberos' due to netdiag bug (see Microsoft KB870692)
changes from 1.2
- Add command line option 'noeventlog'.
changes from 1.1
- Support for Windows 2000 domains
- Use CRITICAL instead of ERROR
changes from 1.0
- remove sysevent test as it can be many other event producers than active directory.
af94960a58