[Nagiosplug-devel] check_ldaps plugin help needed

[Thomas Guyot-Sionnest]

> -----Original Message-----
> From: nagiosplug-devel-bounces at lists.sourceforge.net [mailto:nagiosplug-
> devel-bounces at lists.sourceforge.net] On Behalf Of John P. Rouillard
> Sent: July 11, 2007 22:27
> To: Nagios Plugin Development Mailing List
> Cc: dave.worthy at hp.com
> Subject: Re: [Nagiosplug-devel] check_ldaps plugin help needed
> 
> 
> In message <4694B695.6090905 at hp.com>,
> Dave Worthy writes:
> >Found the fix. For whatever reason, the check_ldaps would not bind using
> >the IP address whilst with the hostname it worked beautifully( using
> >$HOSTALIAS$ instead of $HOSTADDRESS$) <--this being the diff from nagios
> >binary to command line...i was running cmd line with hostname
> 
> The certificate's CN needs to match the argument to -H
> (hostname). Unless your ldaps cert has the ip address as the CN, it's
> not going to work.

We should add an argument to allow specifying a hostname to use for
certificate verification (or to skip cert verification, or even both). I
always use IP addresses for monitoring so that DNS failures won't affect me.

Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3076 bytes
Desc: not available
URL: <https://www.monitoring-plugins.org/archive/devel/attachments/20070712/9d9477b6/attachment.bin>