NRPEServer
A server that listens for incoming NRPE connection and processes incoming requests.

NRPEServer — NRPEServer

A server that listens for incoming NRPE connection and processes incoming requests.

Commands (executable): TODO: Add command list

Configuration (Overview):

A list of all configuration options

Path / Section Key Default value Description
/settings/NRPE/server allow arguments 0 COMMAND ARGUMENT PROCESSING
/settings/NRPE/server use ssl 1 ENABLE SSL ENCRYPTION
/settings/NRPE/server port 5666 PORT NUMBER
/settings/NRPE/server allow nasty characters 0 COMMAND ALLOW NASTY META CHARS
/settings/default cache allowed hosts 1 CACHE ALLOWED HOSTS
/settings/default bind to   BIND TO ADDRESS
/settings/default allowed hosts 127.0.0.1 ALLOWED HOSTS
/settings/default inbox inbox INBOX
/settings/default timeout 30 TIMEOUT
/settings/default password   PASSWORD

Advanced keys:

Path / Section Key Default value Description
/settings/NRPE/server cache allowed hosts 1 CACHE ALLOWED HOSTS
/settings/NRPE/server certificate key   SSL CERTIFICATE
/settings/NRPE/server certificate format PEM CERTIFICATE FORMAT
/settings/NRPE/server socket queue size 0 LISTEN QUEUE
/settings/NRPE/server certificate ${certificate-path}/nrpe_dh_512.pem DH KEY
/settings/NRPE/server encoding   NRPE PAYLOAD ENCODING
/settings/NRPE/server verify mode none VERIFY MODE
/settings/NRPE/server ca ${certificate-path}/ca.pem CA
/settings/NRPE/server bind to   BIND TO ADDRESS
/settings/NRPE/server allowed hosts 127.0.0.1 ALLOWED HOSTS
/settings/NRPE/server timeout 30 TIMEOUT
/settings/NRPE/server thread pool 10 THREAD POOL
/settings/NRPE/server allowed ciphers ADH ALLOWED CIPHERS
/settings/NRPE/server performance data 1 PERFORMANCE DATA
/settings/NRPE/server payload length 1024 PAYLOAD LENGTH
/settings/default socket queue size 0 LISTEN QUEUE
/settings/default encoding   NRPE PAYLOAD ENCODING
/settings/default thread pool 10 THREAD POOL
/settings/default modern commands 1 Register modern aliases for built-in commands

Configuration

A quick reference for all avalible configuration options in the NRPEServer module.

... / settings / default

/settings/default (NRPEServer)
Key Default Value Description
allowed hosts 127.0.0.1 ALLOWED HOSTS
bind to   BIND TO ADDRESS
cache allowed hosts 1 CACHE ALLOWED HOSTS
inbox inbox INBOX
password   PASSWORD
timeout 30 TIMEOUT
encoding   NRPE PAYLOAD ENCODING
modern commands 1 Register modern aliases for built-in commands
socket queue size 0 LISTEN QUEUE
thread pool 10 THREAD POOL

Sample:

#
#
[/settings/default]
# CACHE ALLOWED HOSTS
# If host names (DNS entries) should be cached, improves speed and security somewhat but won't allow you to have dynamic IPs for your Nagios server.
cache allowed hosts=1
# LISTEN QUEUE
# Number of sockets to queue before starting to refuse new incoming connections. This can be used to tweak the amount of simultaneous sockets that the server accepts.
socket queue size=0
# NRPE PAYLOAD ENCODING
#
encoding=
# BIND TO ADDRESS
# Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses.
bind to=
# ALLOWED HOSTS
# A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges.
allowed hosts=127.0.0.1
# THREAD POOL
#
thread pool=10
# INBOX
# The default channel to post incoming messages on
inbox=inbox
# TIMEOUT
# Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out.
timeout=30
# PASSWORD
# Password to use
password=
# Register modern aliases for built-in commands
# Register modern alias for commands (ccheck_xxx as opposed of CheckXXX) these are the names which will be used in future version of NSClient++
modern commands=1
cache allowed hosts (NRPEServer, /settings/default)

CACHE ALLOWED HOSTS

If host names (DNS entries) should be cached, improves speed and security somewhat but won’t allow you to have dynamic IPs for your Nagios server.

Path: /settings/default

Key: cache allowed hosts

Default value: 1

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# CACHE ALLOWED HOSTS
# If host names (DNS entries) should be cached, improves speed and security somewhat but won't allow you to have dynamic IPs for your Nagios server.
[/settings/default]
cache allowed hosts=1
socket queue size (NRPEServer, /settings/default)

LISTEN QUEUE

Number of sockets to queue before starting to refuse new incoming connections. This can be used to tweak the amount of simultaneous sockets that the server accepts.

Advanced (means it is not commonly used)

Path: /settings/default

Key: socket queue size

Default value: 0

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# LISTEN QUEUE
# Number of sockets to queue before starting to refuse new incoming connections. This can be used to tweak the amount of simultaneous sockets that the server accepts.
[/settings/default]
socket queue size=0
encoding (NRPEServer, /settings/default)

NRPE PAYLOAD ENCODING


Advanced (means it is not commonly used)

Path: /settings/default

Key: encoding

Default value:

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# NRPE PAYLOAD ENCODING
#
[/settings/default]
encoding=
bind to (NRPEServer, /settings/default)

BIND TO ADDRESS

Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses.

Path: /settings/default

Key: bind to

Default value:

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# BIND TO ADDRESS
# Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses.
[/settings/default]
bind to=
allowed hosts (NRPEServer, /settings/default)

ALLOWED HOSTS

A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges.

Path: /settings/default

Key: allowed hosts

Default value: 127.0.0.1

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# ALLOWED HOSTS
# A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges.
[/settings/default]
allowed hosts=127.0.0.1
thread pool (NRPEServer, /settings/default)

THREAD POOL


Advanced (means it is not commonly used)

Path: /settings/default

Key: thread pool

Default value: 10

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# THREAD POOL
#
[/settings/default]
thread pool=10
inbox (NRPEServer, /settings/default)

INBOX

The default channel to post incoming messages on

Path: /settings/default

Key: inbox

Default value: inbox

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# INBOX
# The default channel to post incoming messages on
[/settings/default]
inbox=inbox
timeout (NRPEServer, /settings/default)

TIMEOUT

Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out.

Path: /settings/default

Key: timeout

Default value: 30

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# TIMEOUT
# Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out.
[/settings/default]
timeout=30
password (NRPEServer, /settings/default)

PASSWORD

Password to use

Path: /settings/default

Key: password

Default value:

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# PASSWORD
# Password to use
[/settings/default]
password=
modern commands (NRPEServer, /settings/default)

Register modern aliases for built-in commands

Register modern alias for commands (ccheck_xxx as opposed of CheckXXX) these are the names which will be used in future version of NSClient++

Advanced (means it is not commonly used)

Path: /settings/default

Key: modern commands

Default value: 1

Used by: CheckMKServer, CheckSystem, NRPEServer, NSCAServer, NSClientServer, NSCPServer

Sample:

# Register modern aliases for built-in commands
# Register modern alias for commands (ccheck_xxx as opposed of CheckXXX) these are the names which will be used in future version of NSClient++
[/settings/default]
modern commands=1

... / settings / NRPE / server

/settings/NRPE/server (NRPEServer)
Key Default Value Description
allow arguments 0 COMMAND ARGUMENT PROCESSING
allow nasty characters 0 COMMAND ALLOW NASTY META CHARS
port 5666 PORT NUMBER
use ssl 1 ENABLE SSL ENCRYPTION
allowed ciphers ADH ALLOWED CIPHERS
allowed hosts 127.0.0.1 ALLOWED HOSTS
bind to   BIND TO ADDRESS
ca ${certificate-path}/ca.pem CA
cache allowed hosts 1 CACHE ALLOWED HOSTS
certificate ${certificate-path}/nrpe_dh_512.pem DH KEY
certificate format PEM CERTIFICATE FORMAT
certificate key   SSL CERTIFICATE
encoding   NRPE PAYLOAD ENCODING
payload length 1024 PAYLOAD LENGTH
performance data 1 PERFORMANCE DATA
socket queue size 0 LISTEN QUEUE
thread pool 10 THREAD POOL
timeout 30 TIMEOUT
verify mode none VERIFY MODE

Sample:

# NRPE SERVER SECTION
# Section for NRPE (NRPEServer.dll) (check_nrpe) protocol options.
[/settings/NRPE/server]
# CACHE ALLOWED HOSTS
# If host names (DNS entries) should be cached, improves speed and security somewhat but won't allow you to have dynamic IPs for your Nagios server. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
cache allowed hosts=1
# SSL CERTIFICATE
#
certificate key=
# CERTIFICATE FORMAT
#
certificate format=PEM
# LISTEN QUEUE
# Number of sockets to queue before starting to refuse new incoming connections. This can be used to tweak the amount of simultaneous sockets that the server accepts. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
socket queue size=0
# DH KEY
#
certificate=${certificate-path}/nrpe_dh_512.pem
# NRPE PAYLOAD ENCODING
#  parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
encoding=
# VERIFY MODE
#
verify mode=none
# CA
#
ca=${certificate-path}/ca.pem
# BIND TO ADDRESS
# Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
bind to=
# ALLOWED HOSTS
# A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
allowed hosts=127.0.0.1
# TIMEOUT
# Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
timeout=30
# THREAD POOL
#  parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
thread pool=10
# ALLOWED CIPHERS
#
allowed ciphers=ADH
# COMMAND ARGUMENT PROCESSING
# This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments=0
# PERFORMANCE DATA
# Send performance data back to nagios (set this to 0 to remove all performance data).
performance data=1
# PAYLOAD LENGTH
# Length of payload to/from the NRPE agent. This is a hard specific value so you have to "configure" (read recompile) your NRPE agent to use the same value for it to work.
payload length=1024
# ENABLE SSL ENCRYPTION
# This option controls if SSL should be enabled.
use ssl=1
# PORT NUMBER
# Port to use for NRPE.
port=5666
# COMMAND ALLOW NASTY META CHARS
# This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters=0
cache allowed hosts (NRPEServer, /settings/NRPE/server)

CACHE ALLOWED HOSTS

If host names (DNS entries) should be cached, improves speed and security somewhat but won’t allow you to have dynamic IPs for your Nagios server. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: cache allowed hosts

Default value: 1

Used by: NRPEServer

Sample:

# CACHE ALLOWED HOSTS
# If host names (DNS entries) should be cached, improves speed and security somewhat but won't allow you to have dynamic IPs for your Nagios server. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
[/settings/NRPE/server]
cache allowed hosts=1
certificate key (NRPEServer, /settings/NRPE/server)

SSL CERTIFICATE


Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: certificate key

Default value:

Used by: NRPEServer

Sample:

# SSL CERTIFICATE
#
[/settings/NRPE/server]
certificate key=
certificate format (NRPEServer, /settings/NRPE/server)

CERTIFICATE FORMAT


Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: certificate format

Default value: PEM

Used by: NRPEServer

Sample:

# CERTIFICATE FORMAT
#
[/settings/NRPE/server]
certificate format=PEM
socket queue size (NRPEServer, /settings/NRPE/server)

LISTEN QUEUE

Number of sockets to queue before starting to refuse new incoming connections. This can be used to tweak the amount of simultaneous sockets that the server accepts. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: socket queue size

Default value: 0

Used by: NRPEServer

Sample:

# LISTEN QUEUE
# Number of sockets to queue before starting to refuse new incoming connections. This can be used to tweak the amount of simultaneous sockets that the server accepts. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
[/settings/NRPE/server]
socket queue size=0
certificate (NRPEServer, /settings/NRPE/server)

DH KEY


Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: certificate

Default value: ${certificate-path}/nrpe_dh_512.pem

Used by: NRPEServer

Sample:

# DH KEY
#
[/settings/NRPE/server]
certificate=${certificate-path}/nrpe_dh_512.pem
encoding (NRPEServer, /settings/NRPE/server)

NRPE PAYLOAD ENCODING

parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: encoding

Default value:

Used by: NRPEServer

Sample:

# NRPE PAYLOAD ENCODING
#  parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
[/settings/NRPE/server]
encoding=
verify mode (NRPEServer, /settings/NRPE/server)

VERIFY MODE


Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: verify mode

Default value: none

Used by: NRPEServer

Sample:

# VERIFY MODE
#
[/settings/NRPE/server]
verify mode=none
ca (NRPEServer, /settings/NRPE/server)

CA


Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: ca

Default value: ${certificate-path}/ca.pem

Used by: NRPEServer

Sample:

# CA
#
[/settings/NRPE/server]
ca=${certificate-path}/ca.pem
bind to (NRPEServer, /settings/NRPE/server)

BIND TO ADDRESS

Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: bind to

Default value:

Used by: NRPEServer

Sample:

# BIND TO ADDRESS
# Allows you to bind server to a specific local address. This has to be a dotted ip address not a host name. Leaving this blank will bind to all available IP addresses. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
[/settings/NRPE/server]
bind to=
allowed hosts (NRPEServer, /settings/NRPE/server)

ALLOWED HOSTS

A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: allowed hosts

Default value: 127.0.0.1

Used by: NRPEServer

Sample:

# ALLOWED HOSTS
# A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
[/settings/NRPE/server]
allowed hosts=127.0.0.1
timeout (NRPEServer, /settings/NRPE/server)

TIMEOUT

Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: timeout

Default value: 30

Used by: NRPEServer

Sample:

# TIMEOUT
# Timeout when reading packets on incoming sockets. If the data has not arrived within this time we will bail out. parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
[/settings/NRPE/server]
timeout=30
thread pool (NRPEServer, /settings/NRPE/server)

THREAD POOL

parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: thread pool

Default value: 10

Used by: NRPEServer

Sample:

# THREAD POOL
#  parent for this key is found under: /settings/default this is marked as advanced in favor of the parent.
[/settings/NRPE/server]
thread pool=10
allowed ciphers (NRPEServer, /settings/NRPE/server)

ALLOWED CIPHERS


Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: allowed ciphers

Default value: ADH

Used by: NRPEServer

Sample:

# ALLOWED CIPHERS
#
[/settings/NRPE/server]
allowed ciphers=ADH
allow arguments (NRPEServer, /settings/NRPE/server)

COMMAND ARGUMENT PROCESSING

This option determines whether or not the we will allow clients to specify arguments to commands that are executed.

Path: /settings/NRPE/server

Key: allow arguments

Default value: 0

Used by: NRPEServer

Sample:

# COMMAND ARGUMENT PROCESSING
# This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
[/settings/NRPE/server]
allow arguments=0
performance data (NRPEServer, /settings/NRPE/server)

PERFORMANCE DATA

Send performance data back to nagios (set this to 0 to remove all performance data).

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: performance data

Default value: 1

Used by: NRPEServer

Sample:

# PERFORMANCE DATA
# Send performance data back to nagios (set this to 0 to remove all performance data).
[/settings/NRPE/server]
performance data=1
payload length (NRPEServer, /settings/NRPE/server)

PAYLOAD LENGTH

Length of payload to/from the NRPE agent. This is a hard specific value so you have to “configure” (read recompile) your NRPE agent to use the same value for it to work.

Advanced (means it is not commonly used)

Path: /settings/NRPE/server

Key: payload length

Default value: 1024

Used by: NRPEServer

Sample:

# PAYLOAD LENGTH
# Length of payload to/from the NRPE agent. This is a hard specific value so you have to "configure" (read recompile) your NRPE agent to use the same value for it to work.
[/settings/NRPE/server]
payload length=1024
use ssl (NRPEServer, /settings/NRPE/server)

ENABLE SSL ENCRYPTION

This option controls if SSL should be enabled.

Path: /settings/NRPE/server

Key: use ssl

Default value: 1

Used by: NRPEServer

Sample:

# ENABLE SSL ENCRYPTION
# This option controls if SSL should be enabled.
[/settings/NRPE/server]
use ssl=1
port (NRPEServer, /settings/NRPE/server)

PORT NUMBER

Port to use for NRPE.

Path: /settings/NRPE/server

Key: port

Default value: 5666

Used by: NRPEServer

Sample:

# PORT NUMBER
# Port to use for NRPE.
[/settings/NRPE/server]
port=5666
allow nasty characters (NRPEServer, /settings/NRPE/server)

COMMAND ALLOW NASTY META CHARS

This option determines whether or not the we will allow clients to specify nasty (as in |`&><’”[]{}) characters in arguments.

Path: /settings/NRPE/server

Key: allow nasty characters

Default value: 0

Used by: NRPEServer

Sample:

# COMMAND ALLOW NASTY META CHARS
# This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
[/settings/NRPE/server]
allow nasty characters=0
comments powered by Disqus

Table Of Contents

Previous topic

NRPEClient — NRPEClient

Next topic

NSCAClient — NSCAClient

This Page