Hi,
We do not use NSCA in our infrastructure and as part of a hardening project we are thinking about disabling NSCA and xinetd. I can see and nrpe xinetd service file but I don't this is being used as I tested disabling xinetd service and checks were still coming trough.
In there an official way for disable NSCA and xinetd? can both be safely disabled?
Disable NSCA and xinetd
-
npolovenko
- Support Tech
- Posts: 3457
- Joined: Mon May 15, 2017 5:00 pm
Re: Disable NSCA and xinetd
Hello, @monit_burb. You should be able to open the NSCA configuration file under:
And change:/etc/xinetd.d
To:disable = no
Then run:disable = yes
Or if you just want to stop the xinetd service you can run:service xinetd restart
service xinetd stop
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
-
monit_burb
- Posts: 52
- Joined: Fri Sep 23, 2016 3:00 am
Re: Disable NSCA and xinetd
Hi npolovenko,
My question really is if its needed by NagiosXI? I disabled xinetd and saw that checks were still being processed so I guess is just there for legacy purpose.
My question really is if its needed by NagiosXI? I disabled xinetd and saw that checks were still being processed so I guess is just there for legacy purpose.
-
npolovenko
- Support Tech
- Posts: 3457
- Joined: Mon May 15, 2017 5:00 pm
Re: Disable NSCA and xinetd
@monit_burb, It's used by NSCA and NRPE. If you're not using either one of these feel free to turn it off. Nagios performance will not be affected.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
-
monit_burb
- Posts: 52
- Joined: Fri Sep 23, 2016 3:00 am
Re: Disable NSCA and xinetd
Hi,
The think is that I do use NRPE but after turning the whole xinetd service off, checks were being processed anyway and that puzzled me.
The think is that I do use NRPE but after turning the whole xinetd service off, checks were being processed anyway and that puzzled me.
-
npolovenko
- Support Tech
- Posts: 3457
- Joined: Mon May 15, 2017 5:00 pm
Re: Disable NSCA and xinetd
@monit_burb, Sorry, I forgot to add that if you compiled the latest NRPE v3 from Source it will run as a standalone "Nagios" daemon and not under xinetd. Either way, NRPE is only used when you're collecting data on this particular server and sending it over to another server. If all you do is checking services on different remote servers, the local NRPE agent is not used.
You do not have the required permissions to view the files attached to this post.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
-
monit_burb
- Posts: 52
- Joined: Fri Sep 23, 2016 3:00 am
Re: Disable NSCA and xinetd
HI,
Now I get that what might not work if I disable xinetd are the local checks of the Nagios server itself. I have NRPE 3.2.1 that was installed by the Nagios installer itself but I do not know if it was compiled from sources or the installer downloaded some .rpm from Nagios servers.
We have is a fresh install of nagiosXI 5.4 so I guess it was compiled from source during the install because I just tested to force check some local services with xinted service disabled and they do work.
Thank you for your support, fell free to close the post.
Now I get that what might not work if I disable xinetd are the local checks of the Nagios server itself. I have NRPE 3.2.1 that was installed by the Nagios installer itself but I do not know if it was compiled from sources or the installer downloaded some .rpm from Nagios servers.
We have is a fresh install of nagiosXI 5.4 so I guess it was compiled from source during the install because I just tested to force check some local services with xinted service disabled and they do work.
Thank you for your support, fell free to close the post.