X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=dsa-nagios-nrpe-config%2Fdebian%2Fpostinst;h=0749532da5516fa167ca51a6cf105f1b17665466;hb=5fc93977d9df38ff3ecf9edcd64babcd8d1f4fac;hp=e765ca954e6559d37cf58a35448c1679257de70c;hpb=de125a7de91870da7e8dd4eca075a71571f6f286;p=mirror%2Fdsa-nagios.git

diff --git a/dsa-nagios-nrpe-config/debian/postinst b/dsa-nagios-nrpe-config/debian/postinst
index e765ca9..0749532 100644
--- a/dsa-nagios-nrpe-config/debian/postinst
+++ b/dsa-nagios-nrpe-config/debian/postinst
@@ -12,7 +12,7 @@ if [ -e /etc/nagios/nrpe.cfg ] ; then
 	fi
 	if ! grep '^allowed_hosts=' /etc/nagios/nrpe.cfg > /dev/null; then
 		echo
-		echo "WARNING: /etc/nagios/nrpe.cfg does not define allowed_hosts.  Please fix."
+		echo "WARNING: /etc/nagios/nrpe.cfg does not define allowed_hosts.  Please fix (set allowed_hosts=$NAGIOS_MASTER)."
 		echo
 	else
 		found=0
@@ -38,6 +38,50 @@ if [ -e /etc/default/nagios-nrpe-server ] ; then
 	fi
 fi
 
+if [ -e /etc/sudoers ] ; then
+	if ! grep '^nagios.*/usr/lib/nagios/plugins/dsa-check-dabackup' /etc/sudoers > /dev/null; then
+		echo
+		echo 'WARNIG: Add this line to sudoers:'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-dabackup ""'
+		echo
+	fi
+fi
+
+if [ -e /etc/sudoers ] ; then
+	if ! grep '^nagios.*/usr/sbin/samhain' /etc/sudoers > /dev/null; then
+		echo 
+		echo 'WARNIG: Add this line to sudoers:'
+		echo 'nagios ALL=(ALL) NOPASSWD: /usr/sbin/samhain -t check --foreground -p err -s none -l none -m none'
+		echo 
+	fi
+fi
+
+if [ -e /usr/sbin/hpacucli ] && [ -e /dev/cciss/c0d0 ] ; then
+	if ! grep '^nagios.*hpacucli' /etc/sudoers > /dev/null; then
+		echo
+		echo 'WARNIG: Add these lines to sudoers:'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller all show'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd all show'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]\:[0-9] show'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]I\:[0-9]\:[0-9] show'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 show status'
+		echo
+	elif ! grep '^nagios.*hpacucli.* pd .*:.* show' /etc/sudoers > /dev/null; then
+		echo
+		echo 'WARNIG: Add these lines to sudoers:'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]\:[0-9] show'
+		echo 'nagios  ALL=(ALL) NOPASSWD: /usr/sbin/hpacucli controller slot=0 pd [0-9]I\:[0-9]\:[0-9] show'
+	fi
+fi
+
+if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then
+	invoke-rc.d nagios-nrpe-server restart || exit $?
+else
+	/etc/init.d/nagios-nrpe-server restart || exit $?
+fi
+
+/usr/share/dsa/weak-ssh-keys-check -s /var/cache/dsa/nagios/weak-ssh-keys
+
 #DEBHELPER#
 
 exit 0