Nagios Support Forum

Hi ,

we have nagios xi server and we have NRPE agent installed on remote windows server , currently we are monitoring bunch of host from domain A and NRPE service running as domain A user which has access to remote hosts on Domain A , now we are implementing cross forest domain which is Domain B existing NRPE service user doesn't work with domain B because they are different domains , is thee any way we can monitor Hosts under Domain B uisng same NRPE service without changing or creating another nagiois hosts and NRPE service , please let me know what you guys think on this

Thanks,
Ramesh

Mitchell wrote:is thee any way we can monitor Hosts under Domain B uisng same NRPE service without changing or creating another nagiois hosts and NRPE service

It's very doubtful. You'd at a bare minimum need a user on Domain B with the permissions to execute the proper plugins, and NRPE would need to run under that user (I think, i'm not a Windows expert). Though we don't have any specific documentation/testing done for this specific use case, so I could be wrong.

yes we do have user account under Domain B same as of user of the user exist in Domain A , problem is current NRPE service is running as Domain A user if i want to monitor the host in Domain B it doesn't work it gives access denied error , how should i go about monitoring hosts in Domain B with existing configuration

You would have to change the NSClient++ service on the Domain B hosts to run under the Domain B account. The NSClient++ configuration file (nsclient.ini) should still work, you'd just need the Windows service to run under a user with the proper permissions.

we are not planning to install another NRPE client , question is with existing NRPE can we monitor hosts in domain B which has different domain than Domain A hosts , our existing NRPE service user uses credentials which exist in domain A , how can we monitor the domain B hosts with the existing NRPE , is there any way ? or we need to create seperate cluster for this ?

probably better asked here - https://www.nsclient.org/support/

Mitchell wrote:our existing NRPE service user uses credentials which exist in domain A

I'm not 100% sure what you mean by this. NSClient++ doesn't have a concept of "credentials" in it's configuration set other than the token used by check_nt. Are you using some sort of special checks that need to run Powershell as a specific domain user? Can you share your NSClient++ configuration file and point out where the "credentials" you are referring to are configured?

as i said we are not using NSClient++ , we are using NRPE and it installed on the separate windows box and its running NRPE service and that service running as username for domain A , no we are not using any power shell script

That doesn't look like any application we produce or maintain. You'd probably have better luck contacting the vendor. Where did you acquire this application from?

we are taking from this document but instead of Linux/Unix , we installed NRPE on windows
https://assets.nagios.com/downloads/nag ... e/NRPE.pdf