Nagios Support Forum

Hello All,

Could you provide me download link or file of nrpe agent for AIX 7.1.

Appreciate your help.

Thanks,
Vani

Don't waste your time.
Use check_by_shh and spare yourself all the audit findings and headache.

Been waiting for ages for the check_nrpe vulnerabilities to be addressed.
At least with Unix you can use check_by_ssh, Windows no solution yet.

Thanks for reply.
Does AIX 7.1 supported by Nagios support?

Could you please clarify below statements.
Been waiting for ages for the check_nrpe vulnerabilities to be addressed.
At least with Unix you can use check_by_ssh, Windows no solution yet.

Please update on this request as we are having some urgent requirement.

AIX 7.1 is supported, but as with all nrpe daemons, you will have to compile it on the platform yourself. We don't provide packaged binaries.

What rajasegar is referencing is a long-standing vulnerability in that nrpe uses weak SSL ciphers. We know about this and it is on our roadmap to resolve the issue.

http://tracker.nagios.org/view.php?id=90

Regarding Windows, I'm not sure what he's referencing, nsclient actually supports quite strong security.

http://blog.medin.name/blog/2012/12/02/ ... ntication/

Thanks. Is there any plan to release official binaries for AIX 7.1.

Thanks,
Vani

bsivavani wrote:Thanks. Is there any plan to release official binaries for AIX 7.1

I believe this is what @jdalrymple was addressing when he said the following in his last post:

jdalrymple wrote:AIX 7.1 is supported, but as with all nrpe daemons, you will have to compile it on the platform yourself. We don't provide packaged binaries.

We get a lot of request to "provide X binary on Y system running version Z" and the fact of the matter is that we just don't have all of those systems. Even if we hit the popular stuff like AIX, Solaris, and HP-UX, inevitably someone will want NRPE binaries built for their ENIAC emulator. A ridiculous example to be sure, but the point stands - at what point to we go from software developers to a build shop? The line has to be drawn somewhere, and historically the answer has been similar to what many other software companies will say: "Here's the source and build instructions, we can provide support once it is running but getting the binaries is up to you".

One thought that has been brought up is why we don't accept binaries from people that do have those systems and just distribute those? That would be easier certainly, but we have no way of verifying whether those binaries are clean/untampered with. I would rather tell people they need to compile on their own, than be held responsible for distributing infected binaries.

Thanks for clarification.

Did this resolve your issue? Are you okay if we close this thread or do you need more assistance?

Please be open for couple of days. I will post to this thread.