user that manage the nrpe and nsclient agent

[s.wiki]

Hi,
One of my client policy is to have a user that manage the agent.
As my understanding, administrator/root account is required while installing the nrpe/nsclient agent.
My client wants to create a user for installation, and revert the user to normal priviledge user after installation is done, while still able to manage the agent.(e.g. modify the configuration,restart the services)
The OS included solaris,hpux,aix,linux,windows.
May I know is this achievable , is this the right way to do this?

Thanks

[mcapra]

You should be able to add whatever user you want to manage NRPE to whatever group NRPE is installed with. Typically, this is the nagios group.

You would also need to be sure that the nagios group has write permissions for nrpe.cfg. I don't think it does by default:

Code: Select all

[root@localhost etc]# ls -al
total 12
drwxrwxr-x 2 nagios nagios    21 Mar 17 15:11 .
drwxr-xr-x 7 root   root      62 Mar  8 21:54 ..
-rw-r--r-- 1 nagios nagios 10344 Mar  9 14:38 nrpe.cfg

That's the file that holds all the nrpe configurations. The user should also have permissions to restart the nrpe or xinetd services, depending on how the NRPE agent is running.

[s.wiki]

Hi ,
Thanks for your reply.
I believe the solution you have given works on redhat, may i know is it applicable to all other linux/unix ? and also for windows

Thanks

[mcapra]

I would think that would work for most linux systems, but we don't have specific documentation regarding the setup for any particular operating system. The same goes for Windows; policy management on a user/group level is more in the wheelhouse of traditional sysadmin topics than it is NRPE.