Nagios Support Forum

I have a request to use Nagios XI to watch a subset of Active Directory groups for changes (adds, deletions. modifications, etc.). Is there a plugin that works with NRPE, NSClient++, or other method that can be used to do this? I'm a linux admin with little to no windows scripting experience, and I'd rather not reinvent the wheel [poorly] by using ldapsearch from a linux host with NRPE.

Thanks in advance.

I would start by taking a look at this list of plugins available on the Nagios Exchange site, from here you can see the plugins shown after searching "LDAP."

http://exchange.nagios.org/index.php?op ... hword=ldap

Do any of these plugins meet your needs?

Thanks for the tip slansing. I should have mentioned that I searched the Exchange before posting, although I searched for Active Directory, and not LDAP as you suggested. Many of the results from either query were concerned with authentication for the Nagios UI, and not actually watching groups for changes. I didn't see anything from either indicating such a capability.

I hate to say it, but I don't believe any of those will really do what you want. You certainly could look at ldap scripting solutions within linux and use it to authenticate and check groups. However as I mentioned, I don't think any of those will actually allow you to monitor groups like you wish. If you did want to look at windows solutions, the quest active directory modules for powershell will make quick work of any powershell scripting you wish to do. I would also be happy to help with such a script(big powershell guy), but won't have a chance to write it.