slauger/check_netscaler

Check the expiry date of a local license file

hampe4460 opened this issue ยท 2 comments

Hi,
it's for sure not the right way to post this here, but I don't know another way.
Even if I do the configuration as you wrote in your README, I don't get the check for the license files running with another user than nsroot. With nsroot ev. is working properly.

Always get this error --> NetScaler UNKNOWN - { "errorcode": 2138, "message": "Not authorized to execute this command [show system file -fileLocation "/nsconfig/license"]", "severity": "ERROR" }

I tried already to set the "add system cmdPolicy" command with user nagios and the effective user I use in the commend line.
I am using the newest Version: v1.6.1

Thanks in advance

It seems that the cmdPolicy in the README.md does no longer work. I did a quick test and it is sufficent to grant read permissions to the system command for the license check.

add system cmdPolicy nagios_custom ALLOW "(^show\\s+system\\s+\\S+)|(^show\\s+system\\s+\\S+\\s+.*)"

This can be combined with the global (predefined) read-only policy for the other checks.

Bildschirmfoto 2021-07-10 um 22 00 07

๐ŸŽ‰ This issue has been resolved in version 1.6.2 ๐ŸŽ‰

The release is available on GitHub release

Your semantic-release bot ๐Ÿ“ฆ๐Ÿš€