14 Mar
2014
14 Mar
'14
8:31 a.m.
Module: check_mk
Branch: master
Commit: 81b9f0fe06340f1bd06a1d43b7904eb6476b0725
URL:
http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=81b9f0fe06340f…
Author: Bernd Stroessenreuther <bs(a)mathias-kettner.de>
Date: Fri Mar 14 14:31:46 2014 +0100
check_bi_local.py now always has the possibility to use https protocol, if needed with
selfsigned certificates
---
doc/treasures/localchecks/check_bi_local.py | 34 +++++--
.../localchecks/check_bi_local_https_insecure.py | 99 --------------------
2 files changed, 28 insertions(+), 105 deletions(-)
diff --git a/doc/treasures/localchecks/check_bi_local.py
b/doc/treasures/localchecks/check_bi_local.py
index 3fb6568..1f7963a 100755
--- a/doc/treasures/localchecks/check_bi_local.py
+++ b/doc/treasures/localchecks/check_bi_local.py
@@ -49,25 +49,47 @@ automation_secret=""
# password = ""
# automation_secret = "LSEGRILPWQVLDBCYCKOC"
+# set "http" or "https" here
+protocol = "http"
+# protocol = "https"
+
+# Do you want to accept any Certificate when using HTTPS?
+# You may set this to True or False
+# You should leave it to False wherever possible
+# You need to change this to True if using a self signed certificate
+# Please note that this might be a security issue because then
+# *every* SSL certificate is accepted
+# If using http as protocol, this setting is ignored
+accept_any_certificate = False
+# accept_any_certificate = True
+
# Do not change anything below
import os, sys
+if protocol != "https":
+ protocol = "http"
+
+if protocol == "https" and accept_any_certificate == True:
+ cert_option = "--insecure"
+else:
+ cert_option = ""
+
if automation_secret != "":
- url =
'http://localhost/%scheck_mk/view.py?view_name=aggr_summary&output_format=python'
\
- '&_username=%s&_secret=%s' % (url_prefix, user,
automation_secret)
+ url =
'%s://localhost/%scheck_mk/view.py?view_name=aggr_summary&output_format=python'
\
+ '&_username=%s&_secret=%s' % (protocol, url_prefix, user,
automation_secret)
elif password != "":
- url =
'http://localhost/%scheck_mk/login.py?_login=1&_username=%s&_password=%s'
\
+ url =
'%s://localhost/%scheck_mk/login.py?_login=1&_username=%s&_password=%s' \
'&_origtarget=view.py%%3Fview_name=aggr_summary%%26output_format=python' % \
- (url_prefix, user, password)
+ (protocol, url_prefix, user, password)
else:
sys.stderr.write("You need to specify a password or an automation secret in the
script source\n")
sys.exit(1)
try:
- command = "curl -u \"%s:%s\" -b /dev/null -L --noproxy localhost
--silent '%s'" % \
- (user, password, url)
+ command = "curl -u \"%s:%s\" -b /dev/null -L --noproxy localhost %s
--silent '%s'" % \
+ (user, password, cert_option, url)
output = os.popen(command).read()
data = eval(output)
except:
diff --git a/doc/treasures/localchecks/check_bi_local_https_insecure.py
b/doc/treasures/localchecks/check_bi_local_https_insecure.py
deleted file mode 100755
index b1e6c92..0000000
--- a/doc/treasures/localchecks/check_bi_local_https_insecure.py
+++ /dev/null
@@ -1,99 +0,0 @@
-#!/usr/bin/python
-# -*- encoding: utf-8; py-indent-offset: 4 -*-
-# +------------------------------------------------------------------+
-# | ____ _ _ __ __ _ __ |
-# | / ___| |__ ___ ___| | __ | \/ | |/ / |
-# | | | | '_ \ / _ \/ __| |/ / | |\/| | ' / |
-# | | |___| | | | __/ (__| < | | | | . \ |
-# | \____|_| |_|\___|\___|_|\_\___|_| |_|_|\_\ |
-# | |
-# | Copyright Mathias Kettner 2013 mk(a)mathias-kettner.de |
-# +------------------------------------------------------------------+
-#
-# This file is part of Check_MK.
-# The official homepage is at http://mathias-kettner.de/check_mk.
-#
-# check_mk is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation in version 2. check_mk is distributed
-# in the hope that it will be useful, but WITHOUT ANY WARRANTY; with-
-# out even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE. See the GNU General Public License for more de-
-# ails. You should have received a copy of the GNU General Public
-# License along with GNU Make; see the file COPYING. If not, write
-# to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor,
-# Boston, MA 02110-1301 USA.
-
-# Example for creating real Nagios checks from BI aggregations.
-
-# use check_bi_local_https_insecure.py instead of check_bi_local.py
-# only if using https with selfsigned certificates.
-# please note: this might be an security issue, because *every* certificate
-# is accepted
-
-# Installation:
-# 1. Put this file in /usr/lib/check_mk_agent/local
-# 2. Make the file executable
-# 3. Add a correct url_prefix (OMD site and slash)
-# user with read access to Multisite.
-# 4. Add password OR automation secret of this user
-
-url_prefix = "" # non-OMD installations
-# url_prefix = "mysite/" # with OMD site name
-
-# Authentication credentials
-user = "omdadmin"
-
-# use password OR automation_secret (you do not need both of them!!)
-# set the other one to the empty string ""
-# either:
-password = "omd"
-automation_secret=""
-
-# or:
-# password = ""
-# automation_secret = "LSEGRILPWQVLDBCYCKOC"
-
-# Do not change anything below
-
-import os, sys
-
-if automation_secret != "":
- url =
'https://localhost/%scheck_mk/view.py?view_name=aggr_summary&output_format=python'
\
- '&_username=%s&_secret=%s' % (url_prefix, user,
automation_secret)
-elif password != "":
- url =
'https://localhost/%scheck_mk/login.py?_login=1&_username=%s&_password=%s'
\
-
'&_origtarget=view.py%%3Fview_name=aggr_summary%%26output_format=python' % \
- (url_prefix, user, password)
-else:
- sys.stderr.write("You need to specify a password or an automation secret in the
script source\n")
- sys.exit(1)
-
-
-try:
- command = "curl -u \"%s:%s\" -b /dev/null -L --noproxy localhost
--insecure --silent '%s'" % \
- (user, password, url)
- output = os.popen(command).read()
- data = eval(output)
-except:
- sys.stderr.write("Invalid output from URL %s:\n" % url)
- sys.stderr.write(output)
- sys.stderr.write("Command was: %s\n" % command)
- sys.exit(1)
-
-states = {
- "OK" : 0,
- "WARN" : 1,
- "CRIT" : 2,
- "UNKNOWN" : 3,
-}
-
-for name, state, output in data[1:]:
- state_nr = states.get(state, -1)
- descr = "BI_Aggr_" + name.replace(" ", "_")
- if state_nr != -1:
- text = "%d %s - %s" % (state_nr, descr, state)
- if output:
- text += " - " + output
- print text
-