Check_WMI_Plus Services

[GeraldGeniaut]

Hi,
after check all possibility find on www I come here.
I have setup a nagios core, and add the plugin check_wmi_plus.
I get some strange result on the services check.

I explain : I create a user in Active Directory whose account name is "Nagios". I put this user in domain admin group and I check Domain Member server with this account. When I check :

"/usr/lib/nagios/plugins/check_wmi_plus.pl -H 172.20.16.145 -u Nagios@Domain -p Azerty0123654789 -m checkservice -a vmtools"
(password, IP and domain have been changed).
I get correct andswer. No problem.

For Windows Server which are not in Domain. I create the user Nagios on local and add it in local administrator group.

When I check :

"/usr/lib/nagios/plugins/check_wmi_plus.pl -H 172.20.16.145 -u [email protected] -p Azerty0123654789 -m checkservice -a vmtools"

I get OK - Found 0 Services(s), 0 OK and 0 with problems (0 excluded). |'Total Service Count'=0; 'Service Count OK State'=0; 'Service Count Problem State'=0; 'Excluded Service Count'=0;

Like I can't access to information.

If I modify my command and use the administror account I get a good result.

(OK - Found 1 Services(s), 1 OK and 0 with problems (0 excluded). 'VMware Tools' (VMTools) is Running.|'Total Service Count'=1; 'Service Count OK State'=1; 'Service Count Problem State'=0; 'Excluded Service Count'=0;)

It seems, there is some right on services who are setup on account Administrtaor and not on admin group.

The best exemple is on automatic services. If I check with Nagios Account I get 14 services and if I check with admin account I get 53 services....

This happen on W2K8R2 server and W2K12R2 server.

Note All perm on DCOM, WMI Class are done. The problem is on services and eventviewer.

Someone have an idea ?

Thanks

Gérald

[mcapra]

It seems, there is some right on services who are setup on account Administrtaor and not on admin group.

This KB article has some good general WMI troubleshooting steps specific to that plugin:
https://support.nagios.com/kb/article/n ... g-579.html

Though I don't think the specific solution you need is contained in that article. Check out the "Configure A WMI User Account On The Windows Machine" section of this documentation:
https://assets.nagios.com/downloads/nag ... ios-XI.pdf

I realize the document is for "Nagios XI", but the same concepts apply to Nagios Core in this case.

[GeraldGeniaut]

Hi mcapra,

thanks for read my problem and try to help me.

All the param 's told in documentation have been done. If I didn't, I do not have any result.

The section "configure a wmi user on the windows machine" is almost old, but I did it. My user Nagios was create and I set the permission in DCOM pannel. I had the SID of my account with sc manager too.

When I did the debug mode on check service, the list of service with my account in adiministrator group is less than when I do with administrator account. There is somewhere the right is not on a group but on an account. And I can't find where.

Like I say in my first post, I done all the things find in newsgroups, and Internet help page on the subject. Maybe it is a bug, and if we are many, perhaps we can open a bugtrack. ^^

Thanks.

Gérald

[kyang]

Thanks @mcapra!

GeraldGeniaut, thanks for viewing the articles.

Are you experiencing something similar to this past forum thread or no?

https://support.nagios.com/forum/viewto ... 35&t=31641

There may be something useful from the kb article that also links to a previous thread issue.

https://support.nagios.com/kb/article.php?id=476

Let us know if this helps!

[GeraldGeniaut]

Hi Kyang,

I miss this article in my search https://support.nagios.com/kb/article.php?id=476

I think I am in this case. I can add information, It is not only on Win2K8 but the problem is the same with win2012.

I'll bookmark this KB and wait for a solution. I hope the conclusion won't stay at this position : "There is no way to change this behavior." ....

I don't have solution but I have almost an explanation ^^

Thanks a lot.

See you.

Gérald

[tgriep]

Take a look at this KB article under the Additional Permissions sections and see if that helps out in the Authenication issue.

https://support.nagios.com/kb/article/n ... g-579.html