Installation and configuration

Start by copying check_kadmin.pl to your Nagios plugins directory, eg. /usr/lib/nagios/plugins.

Next create a Nagios command definition:

define command{
    command_name check_kadmin
    command_line /usr/lib/nagios/plugins/check_kadmin.pl -w 10 -u $ARG1$ -k $ARG2$ -r $ARG3$
}

Now create a service definition:

define service {
    host_name server1
    service_description Kadmin
    check_command check_kadmin!user/admin@REALM.COM!/etc/user.keytab!REALM.COM
    use generic-service
    notification_interval 0
}

Make sure that the Kerberos realm exits in your krb5.conf for the realms that you want to monitor:

REALM.COM = {
    kdc = server1.realm.com
    admin_server = server1.realm.com
    default_domain = realm.com
}

Now create an admin user and keytab to be used for checks:

kadmin.local: addprinc -randkey user/admin
ktadd -k /etc/user.keytab user/admin

Give user user minimal permissions in the kadm5.acl file:

user/admin@REALM.COM l

You should now be able to reload the Nagios config and hey presto!

About
=====

check_kadmin was written by BOfH.

Homepage: www.norgie.net/tools/check_kadmin

Flames, abuse, mailbombs, etc can be sent to bofh@norgie.net