Ajout : local/check-mk-agent-configure - +utilisateur check_mk

diff --git a/local/check-mk-agent-configure b/local/check-mk-agent-configure
index 3ccf1bb..bf2406a 100755 (executable)
--- a/local/check-mk-agent-configure
+++ b/local/check-mk-agent-configure
@@ -7,7 +7,7 @@ sudo install -m 664 -o root -g root /dev/stdin /etc/xinetd.d/check_mk <<-EOF
        service check_mk
        {
                #disable        = yes
-               #server         = /usr/bin/check_mk_caching_agent
+               #server         = /usr/bin/check_mk_agent
                log_on_success  = 
                only_from       = 127.0.0.1 91.216.110.7 91.224.149.11
                port            = 6556
@@ -20,6 +20,15 @@ sudo install -m 664 -o root -g root /dev/stdin /etc/xinetd.d/check_mk <<-EOF
                }
        EOF
 
+sudo adduser --system --home /var/lib/check_mk_agent --group check_mk_agent --shell /bin/sh
+sudo install -m 440 -o root -g root /dev/stdin /etc/sudoers.d/check_mk_agent <<-EOF
+       check_mk_agent        ALL=NOPASSWD: /usr/bin/check_mk_agent
+       EOF
+sudo install -m 700 -o check_mk_agent -g check_mk_agent -d /var/lib/check_mk_agent/.ssh
+sudo install -m 600 -o check_mk_agent -g check_mk_agent /dev/stdin /var/lib/check_mk_agent/.ssh/authorized_keys <<-EOF
+       command="sudo /usr/bin/check_mk_agent",no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-rsa 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 nagios@gaffe.grenode.net
+       EOF
+
 sudo install -m 640 -o root -g root /dev/stdin /etc/check_mk/mrpe.cfg <<-EOF
        check_gre_apt /usr/lib/nagios/plugins/check_apt -t 20
        check_gre_apt /usr/lib/nagios/plugins/check_swap -w 90% -c 25%