How to monitor Host in different Domain

[Mitchell]

Hi ,

we have nagios xi server and we have NRPE agent installed on remote windows server , currently we are monitoring bunch of host from domain A and NRPE service running as domain A user which has access to remote hosts on Domain A , now we are implementing cross forest domain which is Domain B existing NRPE service user doesn't work with domain B because they are different domains , is thee any way we can monitor Hosts under Domain B uisng same NRPE service without changing or creating another nagiois hosts and NRPE service , please let me know what you guys think on this

Thanks,
Ramesh

[mcapra]

is thee any way we can monitor Hosts under Domain B uisng same NRPE service without changing or creating another nagiois hosts and NRPE service

It's very doubtful. You'd at a bare minimum need a user on Domain B with the permissions to execute the proper plugins, and NRPE would need to run under that user (I think, i'm not a Windows expert). Though we don't have any specific documentation/testing done for this specific use case, so I could be wrong.

[Mitchell]

yes we do have user account under Domain B same as of user of the user exist in Domain A , problem is current NRPE service is running as Domain A user if i want to monitor the host in Domain B it doesn't work it gives access denied error , how should i go about monitoring hosts in Domain B with existing configuration

[mcapra]

You would have to change the NSClient++ service on the Domain B hosts to run under the Domain B account. The NSClient++ configuration file (nsclient.ini) should still work, you'd just need the Windows service to run under a user with the proper permissions.

[Mitchell]

we are not planning to install another NRPE client , question is with existing NRPE can we monitor hosts in domain B which has different domain than Domain A hosts , our existing NRPE service user uses credentials which exist in domain A , how can we monitor the domain B hosts with the existing NRPE , is there any way ? or we need to create seperate cluster for this ?

[tacolover101]

probably better asked here - https://www.nsclient.org/support/

[mcapra]

our existing NRPE service user uses credentials which exist in domain A

I'm not 100% sure what you mean by this. NSClient++ doesn't have a concept of "credentials" in it's configuration set other than the token used by check_nt. Are you using some sort of special checks that need to run Powershell as a specific domain user? Can you share your NSClient++ configuration file and point out where the "credentials" you are referring to are configured?

[Mitchell]

as i said we are not using NSClient++ , we are using NRPE and it installed on the separate windows box and its running NRPE service and that service running as username for domain A , no we are not using any power shell script

[mcapra]

That doesn't look like any application we produce or maintain. You'd probably have better luck contacting the vendor. Where did you acquire this application from?

[Mitchell]

we are taking from this document but instead of Linux/Unix , we installed NRPE on windows
https://assets.nagios.com/downloads/nag ... e/NRPE.pdf