The pfSense Store

Author Topic: [ US $75 per hour ] Update/fix NRPE package  (Read 14825 times)

0 Members and 1 Guest are viewing this topic.

Offline Briantist

  • Full Member
  • ***
  • Posts: 222
  • Karma: +0/-0
  • p-p-p-purple!
    • LinkedIn
    • View Profile
    • briantist.com
[ US $75 per hour ] Update/fix NRPE package
« on: February 02, 2010, 03:35:32 pm »
There are currently several problems with the NRPE package.

Critical Issues:
  • The package requires additional dependencies that must be installed from the command line with pkg_add (installing libiconv and texinfo seems to do the trick)
  • It appears as though changes made in the GUI must be saved twice before they are written out to the /usr/local/etc/nrpe.cfg file. After one save, the GUI saves the changes, but the cfg file never receives them. After a second save the changes are written out.
  • Several issues regarding stopping/starting the service. Whether the service starts or stops seems to be a total crapshoot. It seems independent of the "enabled" setting, and at times I haven't been able to get it to start from the GUI at all, requiring it to be manually started from the command line (when this is done, it can't be stopped in the GUI).

Important but non-critical issues:
  • SSL is not used there is no option to turn it on. To my knowledge NRPE runs with SSL by default and a command line option (-n) is given to turn it off. Is there a reason why it's disabled, and why a simple check box can't be added to make this an option?

Other:
  • Changing the GUI to have a list box for allowed hosts would be nice. Being able to give subnets and/or ranges in addition to individual IPs would be great, but I realize it may add complexity, since it seems that the comma-separated list is how the config file needs it listed, so a subnet or range would have to be expanded out.

All critical issues must be solved to complete the bounty. At this time, the "Important" issue must also be solved, but I may take that off the table if there are additional complexity issues that I'm unaware of; would like some feedback on the feasibility of that. This should be available for 1.2.3.

The changes in "Other" would be great to have, but aren't strictly necessary. If they are possible but require additional funds, let me know and if I can get approval for it, I will.

PMs are fine but e-mail contact would be better. BrianS {at\] bri-tech (d0t> com

Thanks!
« Last Edit: March 10, 2010, 11:22:22 pm by Briantist »

Offline Briantist

  • Full Member
  • ***
  • Posts: 222
  • Karma: +0/-0
  • p-p-p-purple!
    • LinkedIn
    • View Profile
    • briantist.com
Re: [ $100 ] Update/fix NRPE package
« Reply #1 on: March 02, 2010, 02:09:41 pm »
It's been a month and no responses, so I've upped this to $100. If someone is at all interested, please let me know even if the money isn't enough. If you want to do it but need more, please tell me and I will see what I can do. Thanks!

Offline Briantist

  • Full Member
  • ***
  • Posts: 222
  • Karma: +0/-0
  • p-p-p-purple!
    • LinkedIn
    • View Profile
    • briantist.com
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #2 on: March 10, 2010, 12:31:07 pm »
Based on feedback in another thread, I've changed the bounty. I'm offering $75 USD per hour, but would like a reasonable estimate before any work starts. If there isn't enough information to create an estimate please let me know, and I will do whatever I can to provide it.

Offline Evgeny

  • Hero Member
  • *****
  • Posts: 1808
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #3 on: March 31, 2010, 03:03:22 pm »
Bounty is completed in terms of solving all critical issues and making nrpe deamon work in SSL mode. We need somebody to implement patches into pfSense packages repository. Thanks.

Offline Briantist

  • Full Member
  • ***
  • Posts: 222
  • Karma: +0/-0
  • p-p-p-purple!
    • LinkedIn
    • View Profile
    • briantist.com
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #4 on: March 31, 2010, 04:14:04 pm »
Bounty is completed in terms of solving all critical issues and making nrpe deamon work in SSL mode. We need somebody to implement patches into pfSense packages repository. Thanks.
Eugene has done a great job with the changes, which I tested by loading the package from his repo. All we need now is for a developer to put the changes into the official repository.

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14978
  • Karma: +4/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #5 on: March 31, 2010, 04:47:44 pm »
Bounty is completed in terms of solving all critical issues and making nrpe deamon work in SSL mode. We need somebody to implement patches into pfSense packages repository. Thanks.

Do you have a patch set or a set of files with the needed changes?
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline Evgeny

  • Hero Member
  • *****
  • Posts: 1808
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #6 on: March 31, 2010, 04:59:12 pm »
Bounty is completed in terms of solving all critical issues and making nrpe deamon work in SSL mode. We need somebody to implement patches into pfSense packages repository. Thanks.

Do you have a patch set or a set of files with the needed changes?
Yes, I've requested merge here https://rcs.pfsense.org/projects/pfsense-packages/repos/Eugene-clone
Plus I had to recompile nrpe-2.12_1.tbz to support SSL.

Offline jimp

  • Administrator
  • Hero Member
  • *****
  • Posts: 14978
  • Karma: +4/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #7 on: March 31, 2010, 05:04:21 pm »
If one of the other maintainers can't get to this I can commit it later this evening after I finish up another project.

I can also upload that binary to files.pfsense.org where it needs to go, just get me a URL to download your copy of nrpe-2.12_1.tbz.
Need help fast? Commercial Support!

Co-Author of pfSense: The Definitive Guide. - Check the Doc Wiki for FAQs.

Do not PM for help!

Offline esoteric

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #8 on: March 31, 2010, 05:09:13 pm »
Eugene, thanks for the work.

I hadn't been watching the forums, thats my bad.

I had just recently been notified about the config save issue and was working on that.

I'll review your changes and merge providing I don't find any inconsistencies.

Thanks for the hard work!

-Erik
Erik Kristensen (pfS Dev)
-----------------------
Programmer, Interface Design, Network Security, Computer Forensics
Certs: GCFA, Sec+, SFCP, RHCT, CEH

Offline esoteric

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #9 on: March 31, 2010, 05:50:23 pm »
We need the tbz files ... can you please email me the ones you have or email them to me ...

Thanks ...
Erik Kristensen (pfS Dev)
-----------------------
Programmer, Interface Design, Network Security, Computer Forensics
Certs: GCFA, Sec+, SFCP, RHCT, CEH

Offline Evgeny

  • Hero Member
  • *****
  • Posts: 1808
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #10 on: March 31, 2010, 07:29:35 pm »
We need the tbz files ... can you please email me the ones you have or email them to me ...

Thanks ...
Hi Erik!
I do not know your e-mail, you can pick up all files at http://38.99.140.197/packages
Thank you!

Offline esoteric

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #11 on: March 31, 2010, 08:14:45 pm »
Sorry I guess I should have posted my email in my post ... oh well.

Jim grabbed them and pushed them up to the server.

I merged your changes after testing into mainline. Thanks for the fixes.

-Erik
Erik Kristensen (pfS Dev)
-----------------------
Programmer, Interface Design, Network Security, Computer Forensics
Certs: GCFA, Sec+, SFCP, RHCT, CEH

Offline Evgeny

  • Hero Member
  • *****
  • Posts: 1808
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #12 on: April 01, 2010, 08:55:45 am »
Thank you guys! Just tested - everything works properly. Great job!
Erik, thanks for the package.

Offline esoteric

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #13 on: April 01, 2010, 09:34:10 am »
No problem. Thanks for the fixes.
Erik Kristensen (pfS Dev)
-----------------------
Programmer, Interface Design, Network Security, Computer Forensics
Certs: GCFA, Sec+, SFCP, RHCT, CEH

Offline Briantist

  • Full Member
  • ***
  • Posts: 222
  • Karma: +0/-0
  • p-p-p-purple!
    • LinkedIn
    • View Profile
    • briantist.com
Re: [ US $75 per hour ] Update/fix NRPE package
« Reply #14 on: April 01, 2010, 01:25:05 pm »
This is excellent news! From my test machine, all seems to be working properly. I'm still having a problem with a machine that had the older NRPE package installed though. The package manager doesn't see this as a new version of the package, so even if I reinstall the package, or uninstall and reinstall it, it doesn't seem to be updating anything to the new versions. Is there some way I can manually rip out the package so that when I install it again it will download everything fresh? Or better yet, will simply changing the version number in the repo allow anyone with an existing NRPE installation to "upgrade" to this new version?