Debian check_ldaps plugin needs cert permissions
William Edwards | Tuxis Internet Engineering <[email protected]> Mon, 1 Oct 2018 12:01:11 +0200
| Newsgroups | gmane.network.nagios.plugins |
|---|---|
| Message-ID | <789590777-7687__1472.07716149769$1538387954$gmane$org@kerio.tuxis.nl> |
--=-MTUZWvfU8vGtzCdLlWKE
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello all,
I am using the 'check_ldaps' check that gets shipped with the 'nagios-plugi=
ns' package on Debian. The check works fine, but it needs read permissions =
on the certificate mentioned in /etc/ldap/ldap.conf . I did a bit of straci=
ng.=C2=A0As you can see, the check returns 2 because it cannot read the cer=
tificate file. A workaround would be to execute the check command with sudo=
, but I'm hesitant to do so.
--
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) =3D 3
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libnsl.so.1", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320?\0\0\0\0\0\0"..=
., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p9\0\0\0\0\0\0"..., =
832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2", O_RDONLY|O_CLOEXEC) =
=3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\343\0\0\0\0\0\0=
"..., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/liblber-2.4.so.2", O_RDONLY|O_CLOEXEC) =3D =
3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3001\0\0\0\0\0\0"..=
., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libpthread.so.0", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0Pa\0\0\0\0\0\0"..., =
832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\r\0\0\0\0\0\0".=
.., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\4\2\0\0\0\0\0"...=
, 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libsasl2.so.2", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360-\0\0\0\0\0\0"..=
., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libgnutls.so.30", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\275\2\0\0\0\0\0"..=
., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libz.so.1", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300!\0\0\0\0\0\0"..=
., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libp11-kit.so.0", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\26\1\0\0\0\0\0"..=
., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libidn.so.11", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 .\0\0\0\0\0\0"..., =
832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libtasn1.so.6", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20+\0\0\0\0\0\0"...=
, 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libnettle.so.6", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\225\0\0\0\0\0\0"=
..., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libhogweed.so.4", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000x\0\0\0\0\0\0"...=
, 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libgmp.so.10", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\305\0\0\0\0\0\0=
"..., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libffi.so.6", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\31\0\0\0\0\0\0"=
..., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "# Dynamic resolv.conf(5) file fo"..., 4096) =3D 246
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
connect(3, {sa_family=3DAF_UNIX, sun_path=3D"/var/run/nscd/socket"}, 110) =
=3D -1 ENOENT (No such file or directory)
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
connect(3, {sa_family=3DAF_UNIX, sun_path=3D"/var/run/nscd/socket"}, 110) =
=3D -1 ENOENT (No such file or directory)
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) =3D 497
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) =3D 3
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libnss_files.so.2", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320!\0\0\0\0\0\0"..=
., 832) =3D 832
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/host.conf", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "multi on\n", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =3D 9
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/hosts", O_RDONLY|O_CLOEXEC) =C2=A0=3D 3
read(3, "## Ansible managed: /etc/ansible"..., 4096) =3D 472
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/sasl2", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_C=
LOEXEC) =3D 3
open("/usr/lib/x86_64-linux-gnu/sasl2/libntlm.so", O_RDONLY|O_CLOEXEC) =3D =
4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\27\0\0\0\0\0\0"..=
., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) =3D 4
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) =3D =
4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\340\7\0\0\0\0\0".=
.., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so", O_RDONLY|O_CLOEXEC)=
=3D 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\20\0\0\0\0\0\0".=
.., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so", O_RDONLY|O_CLOEXEC) =
=3D 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\21\0\0\0\0\0\0".=
.., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/sasl2/libplain.so", O_RDONLY|O_CLOEXEC) =3D=
4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\20\0\0\0\0\0\0"...=
, 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) =3D 4
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/lib/x86_64-linux-gnu/libcrypt.so.1", O_RDONLY|O_CLOEXEC) =3D 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\v\0\0\0\0\0\0"...,=
832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so", O_RDONLY|O_CLOEXEC) =
=3D 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\23\0\0\0\0\0\0"=
..., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) =3D 4
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/libdb-5.3.so", O_RDONLY|O_CLOEXEC) =3D 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\347\2\0\0\0\0\0"=
..., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so", O_RDONLY|O_CLOEXEC)=
=3D 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\31\0\0\0\0\0\0"=
..., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/x86_64-linux-gnu/sasl2/liblogin.so", O_RDONLY|O_CLOEXEC) =3D=
4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\20\0\0\0\0\0\0".=
.., 832) =3D 832
close(4) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/usr/lib/sasl2", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) =3D 3
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/ldap/ldap.conf", O_RDONLY) =C2=A0 =3D 3
read(3, "#\n# LDAP Defaults\n#\n\n# See ldap."..., 4096) =3D 414
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/opt/sensu/ldaprc", O_RDONLY) =C2=A0 =C2=A0 =3D -1 ENOENT (No such fi=
le or directory)
open("/opt/sensu/.ldaprc", O_RDONLY) =C2=A0 =C2=A0=3D -1 ENOENT (No such fi=
le or directory)
open("ldaprc", O_RDONLY) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0=3D -1 ENOENT (No such file or directory)
open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "# Dynamic resolv.conf(5) file fo"..., 4096) =3D 246
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/hosts", O_RDONLY|O_CLOEXEC) =C2=A0=3D 3
read(3, "## Ansible managed: /etc/ansible"..., 4096) =3D 472
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
open("/etc/gai.conf", O_RDONLY|O_CLOEXEC) =3D 3
read(3, "# Configuration for getaddrinfo("..., 4096) =3D 2584
read(3, "", 4096) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
connect(3, {sa_family=3DAF_INET, sin_port=3Dhtons(636), sin_addr=3Dinet_add=
r("127.0.0.1")}, 16) =3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
connect(3, {sa_family=3DAF_INET6, sin6_port=3Dhtons(636), inet_pton(AF_INET=
6, "::1", &sin6_addr), sin6_flowinfo=3Dhtonl(0), sin6_scope_id=3D0}, 28) =
=3D 0
close(3) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=3D 0
connect(3, {sa_family=3DAF_INET6, sin6_port=3Dhtons(636), inet_pton(AF_INET=
6, "::1", &sin6_addr), sin6_flowinfo=3Dhtonl(0), sin6_scope_id=3D0}, 28) =
=3D 0
open("/etc/samba/tls/cert.pem", O_RDONLY) =3D -1 EACCES (Permission denied)
write(1, "Could not bind to the LDAP serve"..., 34Could not bind to the LDA=
P server
) =3D 34
+++ exited with 2 +++
--
My questions:
- Why does the 'check_ldaps' plugin need permissions for the certificate ch=
eck?
- Is there a workaround without having to grant permissions or use `sudo`?
Met vriendelijke groet,
William Edwards
Tuxis Internet Engineering
E. [email protected]
T. 0318 - 200 208=
--=-MTUZWvfU8vGtzCdLlWKE
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div>Hello all,</div><div><br></div>I am using the=
'check_ldaps' check that gets shipped with the 'nagios-plugins' package on=
Debian. The check works fine, but it needs read permissions on the certifi=
cate mentioned in /etc/ldap/ldap.conf . I did a bit of stracing. As yo=
u can see, the check returns 2 because it cannot read the certificate file.=
A workaround would be to execute the check command with sudo, but I'm hesi=
tant to do so.<div><br></div><div>--</div><div><div>open("/etc/ld.so.cache"=
, O_RDONLY|O_CLOEXEC) =3D 3</div><div>close(3) =
 =
; =3D 0</div><div>open("/lib/x86_64-linux-gnu/libnsl.so.1", O_RDONLY|=
O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>=
\0\1\0\0\0\320?\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(3) &nb=
sp; &=
nbsp; =3D 0</div><div>open("/lib/x86_64-linux-gnu/libre=
solv.so.2", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\=
0\0\0\0\0\0\0\3\0>\0\1\0\0\0p9\0\0\0\0\0\0"..., 832) =3D 832</div><div>c=
lose(3) &nbs=
p; =3D 0</div><div>open("/usr/lib/=
x86_64-linux-gnu/libldap_r-2.4.so.2", O_RDONLY|O_CLOEXEC) =3D 3</div><div>r=
ead(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\343\0\0\0\0\0=
\0"..., 832) =3D 832</div><div>close(3) =
 =
;=3D 0</div><div>open("/usr/lib/x86_64-linux-gnu/liblber-2.4.so.2", O_RDONL=
Y|O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&g=
t;\0\1\0\0\0\3001\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(3) &=
nbsp; =
=3D 0</div><div>open("/lib/x86_64-linux-gnu/lib=
pthread.so.0", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0=
\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0Pa\0\0\0\0\0\0"..., 832) =3D 832</div><di=
v>close(3) &=
nbsp; =3D 0</div><div>open("/lib/x=
86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "\=
177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\r\0\0\0\0\0\0"..., 832=
) =3D 832</div><div>close(3) &nbs=
p; =3D 0</div=
><div>open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) =3D 3</di=
v><div>read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\4\2\0\0=
\0\0\0"..., 832) =3D 832</div><div>close(3) &nb=
sp; &=
nbsp;=3D 0</div><div>open("/usr/lib/x86_64-linux-gnu/libsasl2.so.2", O_RDON=
LY|O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&=
gt;\0\1\0\0\0\360-\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(3) =
 =
; =3D 0</div><div>open("/usr/lib/x86_64-linux-gn=
u/libgnutls.so.30", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\=
1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\275\2\0\0\0\0\0"..., 832) =3D 832<=
/div><div>close(3) =
=3D 0</div><div>open=
("/lib/x86_64-linux-gnu/libz.so.1", O_RDONLY|O_CLOEXEC) =3D 3</div><div>rea=
d(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300!\0\0\0\0\0\0"..=
., 832) =3D 832</div><div>close(3)  =
; =3D =
0</div><div>open("/usr/lib/x86_64-linux-gnu/libp11-kit.so.0", O_RDONLY|O_CL=
OEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1=
\0\0\0\0\26\1\0\0\0\0\0"..., 832) =3D 832</div><div>close(3) =
 =
; =3D 0</div><div>open("/lib/x86_64-linux-gnu/libidn.so=
.11", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\=
0\0\0\0\3\0>\0\1\0\0\0 .\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(3=
) &nb=
sp; =3D 0</div><div>open("/usr/lib/x86_64=
-linux-gnu/libtasn1.so.6", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "\17=
7ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20+\0\0\0\0\0\0"..., 832) =
=3D 832</div><div>close(3) =
=3D 0</div><=
div>open("/usr/lib/x86_64-linux-gnu/libnettle.so.6", O_RDONLY|O_CLOEXEC) =
=3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\=
20\225\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(3)  =
; &nb=
sp; =3D 0</div><div>open("/usr/lib/x86_64-linux-gnu/libhogweed=
.so.4", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\=
0\0\0\0\0\3\0>\0\1\0\0\0000x\0\0\0\0\0\0"..., 832) =3D 832</div><div>clo=
se(3) =
=3D 0</div><div>open("/usr/lib/x8=
6_64-linux-gnu/libgmp.so.10", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "=
\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\305\0\0\0\0\0\0"..., =
832) =3D 832</div><div>close(3) &=
nbsp; =3D 0</=
div><div>open("/usr/lib/x86_64-linux-gnu/libffi.so.6", O_RDONLY|O_CLOEXEC) =
=3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\=
240\31\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(3)  =
; &nb=
sp; =3D 0</div><div>open("/etc/resolv.conf", O_RDONLY|O_CLOEXE=
C) =3D 3</div><div>read(3, "# Dynamic resolv.conf(5) file fo"..., 4096) =3D=
246</div><div>read(3, "", 4096) =
=3D 0</div><div>close(3) &=
nbsp; =
=3D 0</div><div>connect(3, {sa_family=3DAF_UNIX, sun_p=
ath=3D"/var/run/nscd/socket"}, 110) =3D -1 ENOENT (No such file or director=
y)</div><div>close(3) &nbs=
p; =3D 0</div><div>c=
onnect(3, {sa_family=3DAF_UNIX, sun_path=3D"/var/run/nscd/socket"}, 110) =
=3D -1 ENOENT (No such file or directory)</div><div>close(3) =
 =
; =3D 0</div><div>open("/etc/nsswitch.conf", O_RDONLY|O=
_CLOEXEC) =3D 3</div><div>read(3, "# /etc/nsswitch.conf\n#\n# Example"..., =
4096) =3D 497</div><div>read(3, "", 4096)  =
; =3D 0</div><div>close(3) =
&nbs=
p; =3D 0</div><div>open("/etc/ld.so.cache", O_RD=
ONLY|O_CLOEXEC) =3D 3</div><div>close(3) =
&nbs=
p;=3D 0</div><div>open("/lib/x86_64-linux-gnu/libnss_files.so.2", O_RDONLY|=
O_CLOEXEC) =3D 3</div><div>read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>=
\0\1\0\0\0\320!\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(3) &nb=
sp; &=
nbsp; =3D 0</div><div>open("/etc/host.conf", O_RDONLY|O=
_CLOEXEC) =3D 3</div><div>read(3, "multi on\n", 4096) =
=3D 9</div><div>read(3, "", 4096) =
=3D 0</div><div>cl=
ose(3)  =
; =3D 0</div><div>open("/etc/hosts=
", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read(3, "## Ansible managed: /=
etc/ansible"..., 4096) =3D 472</div><div>read(3, "", 4096) &n=
bsp; =3D 0</div><di=
v>close(3) &=
nbsp; =3D 0</div><div>open("/usr/l=
ib/x86_64-linux-gnu/sasl2", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) =3D =
3</div><div>open("/usr/lib/x86_64-linux-gnu/sasl2/libntlm.so", O_RDONLY|O_C=
LOEXEC) =3D 4</div><div>read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\=
1\0\0\0\0\27\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(4) =
&nbs=
p; =3D 0</div><div>open("/etc/ld.so.cache", O_RDONLY|O_=
CLOEXEC) =3D 4</div><div>close(4) =
=3D 0=
</div><div>open("/usr/lib/x86_64-linux-gnu/libcrypto.so.1.1", O_RDONLY|O_CL=
OEXEC) =3D 4</div><div>read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1=
\0\0\0\0\340\7\0\0\0\0\0"..., 832) =3D 832</div><div>close(4) =
&nbs=
p; =3D 0</div><div>open("/usr/lib/x86_64-linux-gnu/sasl=
2/libanonymous.so", O_RDONLY|O_CLOEXEC) =3D 4</div><div>read(4, "\177ELF\2\=
1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\20\0\0\0\0\0\0"..., 832) =3D 832=
</div><div>close(4) =
=3D 0</div><div>ope=
n("/usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so", O_RDONLY|O_CLOEXEC) =3D =
4</div><div>read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\2=
1\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(4) &nb=
sp; &=
nbsp; =3D 0</div><div>open("/usr/lib/x86_64-linux-gnu/sasl2/libplain.=
so", O_RDONLY|O_CLOEXEC) =3D 4</div><div>read(4, "\177ELF\2\1\1\0\0\0\0\0\0=
\0\0\0\3\0>\0\1\0\0\0p\20\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(=
4) &n=
bsp; =3D 0</div><div>open("/etc/ld.so.cac=
he", O_RDONLY|O_CLOEXEC) =3D 4</div><div>close(4) &nbs=
p; &n=
bsp; =3D 0</div><div>open("/lib/x86_64-linux-gnu/libcrypt.so.1", O_RD=
ONLY|O_CLOEXEC) =3D 4</div><div>read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\=
0>\0\1\0\0\0p\v\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(4) =
 =
; =3D 0</div><div>open("/usr/lib/x86_64-linux-gn=
u/sasl2/libsasldb.so", O_RDONLY|O_CLOEXEC) =3D 4</div><div>read(4, "\177ELF=
\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\23\0\0\0\0\0\0"..., 832) =3D=
832</div><div>close(4) &n=
bsp; =3D 0</div><div=
>open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) =3D 4</div><div>close(4) &nbs=
p; &n=
bsp; =3D 0</div><div>open("/usr/lib/x86_64-linux=
-gnu/libdb-5.3.so", O_RDONLY|O_CLOEXEC) =3D 4</div><div>read(4, "\177ELF\2\=
1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\347\2\0\0\0\0\0"..., 832) =3D 83=
2</div><div>close(4)  =
; =3D 0</div><div>op=
en("/usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so", O_RDONLY|O_CLOEXEC) =
=3D 4</div><div>read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\=
240\31\0\0\0\0\0\0"..., 832) =3D 832</div><div>close(4)  =
; &nb=
sp; =3D 0</div><div>open("/usr/lib/x86_64-linux-gnu/sasl2/libl=
ogin.so", O_RDONLY|O_CLOEXEC) =3D 4</div><div>read(4, "\177ELF\2\1\1\0\0\0\=
0\0\0\0\0\0\3\0>\0\1\0\0\0000\20\0\0\0\0\0\0"..., 832) =3D 832</div><div=
>close(4) &n=
bsp; =3D 0</div><div>close(3) &nbs=
p; &n=
bsp; =3D 0</div><div>open("/usr/lib/sasl2", O_RD=
ONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) =3D 3</div><div>close(3) &nbs=
p; &n=
bsp; =3D 0</div><div>open("/etc/ldap/ldap.conf", O_RDON=
LY) =3D 3</div><div>read(3, "#\n# LDAP Defaults\n#\n\n# See ldap."..=
., 4096) =3D 414</div><div>read(3, "", 4096) &n=
bsp; =3D 0</div><div>close(3) &nb=
sp; &=
nbsp; =3D 0</div><div>open("/opt/sensu/ldaprc", =
O_RDONLY) =3D -1 ENOENT (No such file or directory)</div><div=
>open("/opt/sensu/.ldaprc", O_RDONLY) =3D -1 ENOENT (No such f=
ile or directory)</div><div>open("ldaprc", O_RDONLY) &=
nbsp; =3D -1 ENOENT (No such file or directory)<=
/div><div>open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) =3D 3</div><div>read=
(3, "# Dynamic resolv.conf(5) file fo"..., 4096) =3D 246</div><div>read(3, =
"", 4096) &n=
bsp; =3D 0</div><div>close(3) &nb=
sp; =
=3D 0</div><div>open("/etc/hosts", O_RDONLY|O_CLOEXEC) =3D 3</div><di=
v>read(3, "## Ansible managed: /etc/ansible"..., 4096) =3D 472</div><div>re=
ad(3, "", 4096) &nb=
sp; =3D 0</div><div>close(3) &nbs=
p; &n=
bsp;=3D 0</div><div>open("/etc/gai.conf", O_RDONLY|O_CLOEXEC) =3D 3</div><d=
iv>read(3, "# Configuration for getaddrinfo("..., 4096) =3D 2584</div><div>=
read(3, "", 4096) &=
nbsp; =3D 0</div><div>close(3) &n=
bsp; =
=3D 0</div><div>close(3) &n=
bsp; =3D 0</d=
iv><div>connect(3, {sa_family=3DAF_INET, sin_port=3Dhtons(636), sin_addr=3D=
inet_addr("127.0.0.1")}, 16) =3D 0</div><div>close(3) =
 =
; =3D 0</div><div>connect(3, {sa_family=3DAF_INET6, sin6_port=
=3Dhtons(636), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=3D=
htonl(0), sin6_scope_id=3D0}, 28) =3D 0</div><div>close(3) &n=
bsp; =
=3D 0</div><div>connect(3, {sa_family=3DAF_INET6, sin6_=
port=3Dhtons(636), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinf=
o=3Dhtonl(0), sin6_scope_id=3D0}, 28) =3D 0</div><div>open("/etc/samba/tls/=
cert.pem", O_RDONLY) =3D -1 EACCES (Permission denied)</div><div>write(1, "=
Could not bind to the LDAP serve"..., 34Could not bind to the LDAP server</=
div><div>) =3D 34</div><div>+++ exited with 2 +++</div><div>--</div><div><b=
r></div><div>My questions:</div><div><br></div><div>- Why does the 'check_l=
daps' plugin need permissions for the certificate check?</div><div>- Is the=
re a workaround without having to grant permissions or use `sudo`?</div><br=
><div>Met vriendelijke groet,</div><div>William Edwards</div><div>Tuxis Int=
ernet Engineering</div><div><br></div><div>E. [email protected]</div><div>T. 03=
18 - 200 208</div></div></body></html>=
--=-MTUZWvfU8vGtzCdLlWKE--