Page 1 of 1

Monitoring Windows Host with LM and NTLM disabled/refused

Posted: Tue Jan 28, 2014 2:41 pm
by richieroo
I'm trying to configure a windows host using NSClinet++. This particular host has LM and NTLM set to refuse and allows NTMLv2 authentication only (reason being we have a service automatically blacklisting RDP attemps and this is required for it to work).

since we have made the NTLM changes, nagios is not listening to this host. Does anyone know of a workaround for this? I'm not sure if I need to reconfigure nagios, or nsclient or both - or if I am SOL :)

Thanks

Re: Monitoring Windows Host with LM and NTLM disabled/refuse

Posted: Tue Jan 28, 2014 4:34 pm
by sreinhardt
I would imagine this is purely with nsclient, as the communication between nsclient and nagios is not dependent on any windows based authentication other than what the nsclient service is started as. Let's start by verifying your hardening didn't restrict the nsclient ports. Also are you using check_nt checks or check_nrpe?

Code: Select all

nmap -p 5666 [host\IP]
nmap -p 12489 [host\IP]