2
0
mirror of https://github.com/munin-monitoring/contrib.git synced 2018-11-08 00:59:34 +01:00
contrib-munin/plugins/other/heimdal_kdc_requests

169 lines
4.0 KiB
Plaintext
Raw Normal View History

2009-12-15 15:04:07 +01:00
#!/usr/bin/perl
#
# Plugin to monitor KDC server requests.
# Based on kdc-log-analyze.pl script from heimdal.
#
# Contributed by Jan Rękorajski <baggins@pld-linux.org>
#
# Example configuration:
#
# [heimdal_kdc_*]
# env.logdir /var/log
# env.logfile secure
# env.realms REALM1.COM REALM2.COM
#
use strict;
use Munin::Plugin;
my $LOGDIR = $ENV{'logdir'} || '/var/log';
my $LOGFILE = $ENV{'logfile'} || 'secure';
my @REALMS = $ENV{'realms'} ? split(' ', $ENV{'realms'}) : ();
my $pos = undef;
my $as_req = 0;
my $no_such_princ = 0;
my $tgs_req = 0;
my $tgs_xrealm_out = 0;
my $tgs_xrealm_in = 0;
my $referrals = 0;
my $pa_failed = 0;
my %ip;
$ip{'4'} = $ip{'6'} = 0;
sub islocalrealm {
my ($princ) = @_;
my $realm;
foreach $realm (@REALMS) {
return 1 if ($princ eq $realm);
return 1 if ($princ =~ /[^@]+\@${realm}/);
}
return 0;
}
sub parseLogfile {
my ($fname, $start) = @_;
my ($LOGFILE,$rotated) = tail_open($fname,$start);
my $line;
while (<$LOGFILE>) {
chomp ($_);
if (/AS-REQ (.*) from IPv([46]):([0-9\.:a-fA-F]+) for (.*)$/) {
$as_req++;
$ip{$2}++;
} elsif (/TGS-REQ (.+) from IPv([46]):([0-9\.:a-fA-F]+) for (.*?)( \[.*\]){0,1}$/) {
$tgs_req++;
$ip{$2}++;
my $source = $1;
my $dest = $4;
if (!islocalrealm($source)) {
$tgs_xrealm_in++;
}
if ($dest =~ /krbtgt\/([^@]+)@[^@]+/) {
if (!islocalrealm($1)) {
$tgs_xrealm_out++;
}
}
} elsif (/: No such entry in the database/) {
$no_such_princ++;
} elsif (/Lookup .* succeeded$/) {
# Nothing
} elsif (/returning a referral to realm (.*) for server (.*) that was not found/) {
$referrals++;
} elsif (/Failed to decrypt PA-DATA -- (.+)$/) {
$pa_failed++;
}
}
return tail_close($LOGFILE);
}
if ( $ARGV[0] and $ARGV[0] eq "autoconf" ) {
print "no\n";
exit 0;
}
if ( $ARGV[0] and $ARGV[0] eq "config" ) {
print "graph_title Heimdal KDC requests\n";
print "graph_args --base 1000\n";
print "graph_vlabel requests / \${graph_period}\n";
print "graph_scale yes\n";
print "graph_category Heimdal\n";
print "ipv4.label IPv4 requests\n";
print "ipv4.type ABSOLUTE\n";
print "ipv4.min 0\n";
print "ipv6.label IPv6 requests\n";
print "ipv6.type ABSOLUTE\n";
print "ipv6.min 0\n";
print "lookupfail.label Failed lookups\n";
print "lookupfail.type ABSOLUTE\n";
print "lookupfail.min 0\n";
print "asreq.label AS-REQ requests\n";
print "asreq.type ABSOLUTE\n";
print "asreq.min 0\n";
print "tgsreq.label TGS-REQ requests\n";
print "tgsreq.type ABSOLUTE\n";
print "tgsreq.min 0\n";
print "pafail.label Preauth failed requests\n";
print "pafail.type ABSOLUTE\n";
print "pafail.min 0\n";
print "xrout.label Cross-realm tgs out\n";
print "xrout.type ABSOLUTE\n";
print "xrout.min 0\n";
print "xrin.label Cross-realm tgs in\n";
print "xrin.type ABSOLUTE\n";
print "xrin.min 0\n";
print "referrals.label Referrals\n";
print "referrals.type ABSOLUTE\n";
print "referrals.min 0\n";
exit 0;
}
my $logfile = "$LOGDIR/$LOGFILE";
if (! -f $logfile) {
print "ipv4.value U\n";
print "ipv6.value U\n";
print "lookupfail.value U\n";
print "asreq.value U\n";
print "tgsreq.value U\n";
print "pafail.value U\n";
print "xrout.value U\n";
print "xrin.value U\n";
print "referrals.value U\n";
exit 1;
}
($pos) = restore_state();
if (!defined($pos)) {
# No state file present. Avoid startup spike: Do not read log
# file up to now, but remember how large it is now, and next
# time read from there.
$pos = (stat $logfile)[7]; # File size
} else {
$pos = parseLogfile ($logfile, $pos);
}
print "ipv4.value $ip{'4'}\n";
print "ipv6.value $ip{'6'}\n";
print "lookupfail.value $no_such_princ\n";
print "asreq.value $as_req\n";
print "tgsreq.value $tgs_req\n";
print "pafail.value $pa_failed\n";
print "xrout.value $tgs_xrealm_out\n";
print "xrin.value $tgs_xrealm_in\n";
print "referrals.value $referrals\n";
save_state($pos);
# vim:syntax=perl