diff options
Diffstat (limited to 'contrib/check_wins.pl')
| -rwxr-xr-x | contrib/check_wins.pl | 247 |
1 files changed, 0 insertions, 247 deletions
diff --git a/contrib/check_wins.pl b/contrib/check_wins.pl deleted file mode 100755 index f11f8645..00000000 --- a/contrib/check_wins.pl +++ /dev/null | |||
| @@ -1,247 +0,0 @@ | |||
| 1 | #!/usr/bin/perl -w | ||
| 2 | |||
| 3 | # $Id: check_wins.pl 940 2004-11-25 04:46:16Z stanleyhopcroft $ | ||
| 4 | |||
| 5 | # Revision 1.3 2004/11/25 04:46:16 stanleyhopcroft | ||
| 6 | # Non functional tidy ups to check_wins | ||
| 7 | # | ||
| 8 | # Revision 1.2 2003/08/20 08:31:49 tonvoon | ||
| 9 | # Changed netsaint to nagios in use lib | ||
| 10 | # | ||
| 11 | # Revision 1.1 2003/02/09 14:16:28 sghosh | ||
| 12 | # more contribs | ||
| 13 | # | ||
| 14 | |||
| 15 | use strict ; | ||
| 16 | |||
| 17 | use Getopt::Long ; | ||
| 18 | use vars qw($opt_H $opt_D $opt_W $opt_T $debug @my_dcs); | ||
| 19 | |||
| 20 | use lib '/usr/local/nagios/libexec/' ; | ||
| 21 | use utils qw($TIMEOUT %ERRORS &print_revision &support &usage); | ||
| 22 | |||
| 23 | my $PROGNAME = 'check_wins' ; | ||
| 24 | |||
| 25 | use constant SAMBA_DEBUG_LVL => 2 ; | ||
| 26 | use constant MY_DCS => ('dc1','dc2') ; | ||
| 27 | |||
| 28 | my $NMBLOOKUP_PATH = '/usr/bin/nmblookup' ; | ||
| 29 | my $NMBLOOKUP = sub { return `$NMBLOOKUP_PATH $_[2] -R -U $_[0] $_[1]` } ; | ||
| 30 | my $NMBLOOKUP_CMD = $NMBLOOKUP_PATH . ' -R -U' ; | ||
| 31 | |||
| 32 | sub print_help (); | ||
| 33 | sub print_usage (); | ||
| 34 | sub help (); | ||
| 35 | sub version (); | ||
| 36 | |||
| 37 | delete @ENV{'PATH', 'IFS', 'CDPATH', 'ENV', 'BASH_ENV'}; | ||
| 38 | |||
| 39 | $SIG{"ALRM"} = sub { die "Alarm clock restart" } ; | ||
| 40 | |||
| 41 | Getopt::Long::Configure('bundling', 'no_ignore_case'); | ||
| 42 | GetOptions | ||
| 43 | ("V|version" => \&version, | ||
| 44 | "h|help" => \&help, | ||
| 45 | "d|debug" => \$debug, | ||
| 46 | "C|controllers:s" => \@my_dcs, | ||
| 47 | "T|timeout:i" => \$opt_T, | ||
| 48 | "W|wins=s" => \$opt_W, | ||
| 49 | "D|domain=s" => \$opt_D); | ||
| 50 | |||
| 51 | |||
| 52 | ($opt_D) || usage("MS Domain name not specified\n"); | ||
| 53 | my $domain = $1 if $opt_D =~ m#(\w+)# ; # NetBIOS names allow __any__ characters (more than \w) | ||
| 54 | ($domain) || usage("Invalid MS D name: $opt_D\n"); | ||
| 55 | |||
| 56 | ($opt_W) || usage("WINS hostname or address not specified\n"); | ||
| 57 | my $wins = $1 if $opt_W =~ m#((?:^\w+$)|(?:\d+(?:\.\d+){3,3}$))# ; | ||
| 58 | ($wins) || usage("Invalid WINS hostname or address: $opt_W\n"); | ||
| 59 | |||
| 60 | usage("You must provide the names of your domain controllers by updating MY_DCS in the text or use -C dc_name1 -C dc_name2 ..\n") | ||
| 61 | unless (@my_dcs or MY_DCS) ; | ||
| 62 | |||
| 63 | @my_dcs = MY_DCS unless defined $my_dcs[0] ; | ||
| 64 | $TIMEOUT = $opt_T if defined $opt_T ; | ||
| 65 | |||
| 66 | my ($netbios_name, @dcs_of_domain, @dc_addresses) ; | ||
| 67 | my (@addr_dcs_of_domain, @found_dcs, %address2dc) ; | ||
| 68 | my (@dc_query) ; | ||
| 69 | |||
| 70 | # tsitc> /usr/local/samba/bin/nmblookup -R -U wins ipa01 | ||
| 71 | # Sending queries to 192.168.1.29 | ||
| 72 | # 192.168.1.16 ipa01<00> | ||
| 73 | |||
| 74 | eval { | ||
| 75 | alarm($TIMEOUT) ; | ||
| 76 | @dc_query = $debug ? map { $NMBLOOKUP->($wins, "$_#20", '-d ' . SAMBA_DEBUG_LVL) } @my_dcs : | ||
| 77 | map { ( $NMBLOOKUP->($wins, "$_#20", '') )[1] } @my_dcs ; | ||
| 78 | alarm(0) ; | ||
| 79 | } ; | ||
| 80 | |||
| 81 | if ($@ and $@ =~ /Alarm clock restart/) { | ||
| 82 | print qq(Failed. Timeout while waiting for response from (one of) "$NMBLOOKUP_CMD $wins @my_dcs"\n) ; | ||
| 83 | exit $ERRORS{"CRITICAL"} ; | ||
| 84 | } | ||
| 85 | |||
| 86 | if ($@ and $@ !~ /Alarm clock restart/) { | ||
| 87 | print qq(Failed. "$@" in response to "NMBLOOKUP_CMD $wins @my_dcs"\n) ; | ||
| 88 | exit $ERRORS{"UNKNOWN"} ; | ||
| 89 | } | ||
| 90 | |||
| 91 | chomp @dc_query ; | ||
| 92 | if ( scalar grep(/name_query failed/, @dc_query) ) { | ||
| 93 | print qq(Failed. WINS "$wins" failed to resolve), scalar @my_dcs > 1 ? ' at least one of ' : ' ', qq("@my_dcs", the domain controller(s) of "$domain". Got "@dc_query"\n) ; | ||
| 94 | exit $ERRORS{"CRITICAL"} ; | ||
| 95 | } | ||
| 96 | |||
| 97 | =begin comment | ||
| 98 | |||
| 99 | the results of looking up the DCs (by their name) in the WINS | ||
| 100 | |||
| 101 | 192.168.1.16 ipa01<20> | ||
| 102 | 192.168.1.1 ipa02<20> | ||
| 103 | 192.168.1.104 ipa03<20> | ||
| 104 | |||
| 105 | =end comment | ||
| 106 | |||
| 107 | =cut | ||
| 108 | |||
| 109 | @dc_addresses = () ; | ||
| 110 | foreach (@dc_query) { | ||
| 111 | next unless /^(\S+)\s+(\S+?)<\S+?>$/ ; | ||
| 112 | $address2dc{$1} = $2 ; | ||
| 113 | push @dc_addresses, $1 ; | ||
| 114 | } | ||
| 115 | |||
| 116 | $netbios_name = "$domain#1C" ; | ||
| 117 | |||
| 118 | eval { | ||
| 119 | alarm($TIMEOUT) ; | ||
| 120 | @dcs_of_domain = $NMBLOOKUP->($wins, $netbios_name, defined $debug ? '-d ' . SAMBA_DEBUG_LVL : '') ; | ||
| 121 | alarm(0) ; | ||
| 122 | |||
| 123 | } ; | ||
| 124 | |||
| 125 | if ($@ and $@ =~ /Alarm clock restart/) { | ||
| 126 | print qq(Failed. Timeout while waiting for response from "$NMBLOOKUP_CMD $wins $netbios_name"\n) ; | ||
| 127 | exit $ERRORS{"CRITICAL"} ; | ||
| 128 | } | ||
| 129 | |||
| 130 | if ($@ and $@ !~ /Alarm clock restart/) { | ||
| 131 | print qq(Failed. "$@" in response to "$NMBLOOKUP_CMD $wins $netbios_name"\n) ; | ||
| 132 | exit $ERRORS{"UNKNOWN"} ; | ||
| 133 | } | ||
| 134 | |||
| 135 | shift @dcs_of_domain ; | ||
| 136 | chomp @dcs_of_domain ; | ||
| 137 | @addr_dcs_of_domain = map /^(\S+)/, @dcs_of_domain ; | ||
| 138 | |||
| 139 | =begin comment | ||
| 140 | |||
| 141 | tsitc> /usr/local/samba/bin/nmblookup -R -U wins ipaustralia#1c | ||
| 142 | Sending queries to 192.168.1.29 | ||
| 143 | 192.168.1.114 ipaustralia<1c> | ||
| 144 | 192.168.1.221 ipaustralia<1c> | ||
| 145 | 192.168.1.61 ipaustralia<1c> | ||
| 146 | 192.168.1.129 ipaustralia<1c> | ||
| 147 | 192.168.1.128 ipaustralia<1c> | ||
| 148 | 192.168.1.214 ipaustralia<1c> | ||
| 149 | 192.168.1.67 ipaustralia<1c> | ||
| 150 | tsitc> | ||
| 151 | |||
| 152 | =end comment | ||
| 153 | |||
| 154 | =cut | ||
| 155 | |||
| 156 | |||
| 157 | my %x ; | ||
| 158 | @found_dcs = grep { ! $x{$_}++ } @address2dc{ grep exists $address2dc{$_}, @addr_dcs_of_domain} ; | ||
| 159 | # @found_dcs = grep { defined $_} @address2dc{ grep exists $address2dc{$_}, @addr_dcs_of_domain} ; | ||
| 160 | # Gotcha. | ||
| 161 | # 'exists' is necessary to prevent autovivificatiton | ||
| 162 | # of keys in %address2dc | ||
| 163 | |||
| 164 | if ( &set_eq( \@found_dcs, [ values %address2dc ] ) ) { | ||
| 165 | print $debug ? qq(Ok. WINS named "$wins" resolved addresses of "@my_dcs" as "@dc_query" and controllers of domain "$domain" as "@dcs_of_domain"\n) : | ||
| 166 | qq(Ok. Found controllers named "@my_dcs" in response to "$domain#1C" name query from WINS named "$wins".\n) ; | ||
| 167 | exit $ERRORS{"OK"} ; | ||
| 168 | } elsif ( scalar @found_dcs == 0 ) { | ||
| 169 | print qq(Failed. Found __no__ controllers named "@my_dcs" in response to "$domain#1C" query from WINS named "$wins". Got "@dcs_of_domain"\n) ; | ||
| 170 | exit $ERRORS{"CRITICAL"} ; | ||
| 171 | } elsif ( scalar @found_dcs < scalar keys %address2dc ) { | ||
| 172 | print qq(Warning. Not all domain controllers found in response to "$domain#1C" query from WINS named "$wins". Expected "@my_dcs", got "@found_dcs"\n) ; | ||
| 173 | exit $ERRORS{"WARNING"} ; | ||
| 174 | } | ||
| 175 | |||
| 176 | sub set_eq { | ||
| 177 | |||
| 178 | return 0 unless scalar @{$_[0]} == scalar @{$_[1]} ; | ||
| 179 | foreach my $a ( @{$_[0]} ) { | ||
| 180 | return 0 unless scalar grep { $a eq $_ } @{$_[1]} ; | ||
| 181 | } | ||
| 182 | return 1 ; | ||
| 183 | |||
| 184 | } | ||
| 185 | |||
| 186 | |||
| 187 | sub print_usage () { | ||
| 188 | print "Usage: $PROGNAME -W <wins> -D <domain>\n"; | ||
| 189 | } | ||
| 190 | |||
| 191 | sub print_help () { | ||
| 192 | print_revision($PROGNAME,'$Revision: 940 $ '); | ||
| 193 | print "Copyright (c) 2001 Karl DeBisschop/S Hopcroft | ||
| 194 | |||
| 195 | Perl Check WINS plugin for NetSaint. | ||
| 196 | |||
| 197 | Returns OK if the addresses of domain controllers are found in the list of domain controllers returned in the WINS response to a 'domain controllers query' | ||
| 198 | |||
| 199 | Why would you want to do this ? | ||
| 200 | |||
| 201 | MS File server clients insist on connecting to file servers using NetBIOS names. | ||
| 202 | If they __don't__ resolve NetBIOS names with a WINS (NBNS) then they'll either fail to logon and connect to shares or they will | ||
| 203 | broadcast requsts for names. | ||
| 204 | Both problems are eliminated by a healthy WINS. | ||
| 205 | Also, you may have a MS domain spanning a number of WAN connected sites, with domain controllers far away from powerful local | ||
| 206 | domain controllers. | ||
| 207 | In this case, you want your local clients to have their logon requests validated by the local controllers. | ||
| 208 | |||
| 209 | The plugin works by | ||
| 210 | asking the WINS to resolve the addresses of the domain controllers (supplied by -C or from the constant MY_DCS) | ||
| 211 | asking the WINS to return the list of addresses of the domain controllers able to validate requests for the domain | ||
| 212 | whose name is given by -D | ||
| 213 | returning Ok if all controller addresses are in that list (of addresses of domain controllers) or | ||
| 214 | returning WARNING if not all the controller addresses are in the list or | ||
| 215 | returning CRITICAL if there is no reply from the WINS or the list contains none of the contoller addresses | ||
| 216 | |||
| 217 | "; | ||
| 218 | print_usage(); | ||
| 219 | print ' | ||
| 220 | -W, --wins=STRING | ||
| 221 | Hostname or address of the WINS (Either Samba/nmbd or MS product) | ||
| 222 | -D, --domain=STRING | ||
| 223 | MS Domain name to find the Domain controllers of. | ||
| 224 | -C, --controllers:STRING | ||
| 225 | Optional __name(s)__ of domain controller that __must__ be found in the response to a domain controller name query. | ||
| 226 | If not defined, then use the constant value MY_DCS. You must use either -C or make sure that MY_DCS contains the names | ||
| 227 | of __your__ domain controllers. | ||
| 228 | -T, --timeout:INTEGER | ||
| 229 | -d, --debug | ||
| 230 | Debugging output. | ||
| 231 | -h, --help | ||
| 232 | This stuff. | ||
| 233 | |||
| 234 | '; | ||
| 235 | support(); | ||
| 236 | } | ||
| 237 | |||
| 238 | sub version () { | ||
| 239 | print_revision($PROGNAME,'$Revision: 940 $ '); | ||
| 240 | exit $ERRORS{'OK'}; | ||
| 241 | } | ||
| 242 | |||
| 243 | sub help () { | ||
| 244 | print_help(); | ||
| 245 | exit $ERRORS{'OK'}; | ||
| 246 | } | ||
| 247 | |||
