NRDP and external commands
Posted: Thu Mar 21, 2013 10:54 pm
Hi guys,
I would like to start by saying I like NRDP, I like NRDP a lot. Despite that I have to be careful about how and where I code/script in connections that use NRDP to submit data to Nagios due to its dual use nature. I would like to be able to disable the external commands processing portion of NRDP or even better change it to a different token so that it is no longer shared with check data submission.
A rogue user with the NRDP token would be able to do something mildly irritating with the check interface, which isn't too bad... but they could potentially do something rather damaging with the external commands interface which is a problem.
Thanks!
I would like to start by saying I like NRDP, I like NRDP a lot. Despite that I have to be careful about how and where I code/script in connections that use NRDP to submit data to Nagios due to its dual use nature. I would like to be able to disable the external commands processing portion of NRDP or even better change it to a different token so that it is no longer shared with check data submission.
A rogue user with the NRDP token would be able to do something mildly irritating with the check interface, which isn't too bad... but they could potentially do something rather damaging with the external commands interface which is a problem.
Thanks!