Changelog 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371
  1. **************
  2. NRPE Changelog
  3. **************
  4. 2.16 = xx/xx/xxxx
  5. -----------------
  6. ENHANCEMENTS
  7. - Added listen_queue_size as configuration option (Vadim Antipov, Kaspersky Lab)
  8. - Reworked SSL/TLS. See the README.SSL.md file for full info. (John Frickson)
  9. - Added support for version 3 variable sized packets up to 64KB. nrpe will
  10. accept either version from check_nrpe. check_nrpe will try to send a
  11. version 3 packet first, and fall back to version 2. check_nrpe can be forced
  12. to only send version 2 packets if the switch `-2` is used. (John Frickson)
  13. FIXES
  14. - Added ifdefs for complete_SSL_shutdown to compile without SSL. (Matthew L. Daniel)
  15. - Renamed configure.in to configure.ac and added check for sigaction (John Frickson)
  16. - Replaced all instances of signal() with sigaction() + blocking (John Frickson)
  17. - check_nrpe does not parse passed arguments correctly (John Frickson)
  18. - NRPE should not start if cannot write pid file (John Frickson)
  19. - Fixed out-of-bounds error (return code 255) for some failures (John Frickson)
  20. - Connection Timeout and Connection Refused messages need a new line (Andrew Widdersheim)
  21. - allowed_hosts doesn't work, if one of the hostnames can't be resolved by dns (John Frickson)
  22. - allowed_hosts doesn't work with a hostname resolving to an IPv6 address (John Frickson)
  23. - Return UNKNOWN when issues occur (Andrew Widdersheim)
  24. 2.15 - 09/06/2013
  25. -----------------
  26. - Now compiles on HP-UX (Grant Byers)
  27. - Added support for IPv6 (Leo Baltus, Eric Stanley)
  28. 2.14 - 12/21/2012
  29. -----------------
  30. - Added configure option to allow bash command substitutions, disabled by default [bug #400] (Eric Stanley)
  31. - Patched to shutdown SSL connection completely (Jari Takkala)
  32. - Added SRC support on AIX (Thierry Bertaud)
  33. - Updated RPM SPEC file to support creating RPMs on AIX (Eric Stanley)
  34. - Updated logging to support compiling on AIX (Eric Stanley)
  35. 2.13 - 11/11/2011
  36. -----------------
  37. - Applied Kaspersky Labs supplied patch for extending allowed_hosts (Konstantin Malov)
  38. - Fixed bug in allowed_hosts parsing (Eric Stanley)
  39. - Updated to support compiling on Solaris 10 (thanks to Kevin Pendleton)
  40. 2.12 - 03/10/2008
  41. -----------------
  42. - Fix for unterminated multiline plugin (garbage) output (Krzysztof Oledzki)
  43. 2.11 - 12/26/2007
  44. -----------------
  45. - Added lib64 library paths to configure script for 64-bit systems (John Maag)
  46. - Added --with-ssl-lib configure script option
  47. - Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki)
  48. 2.10 - 10/19/2007
  49. -----------------
  50. - Moved PDF docs to docs/ subdirectory, added OpenOffice source document
  51. - A critical result is now returned for child processed that die due to a signal (Klas Lindfors)
  52. 2.9 - 08/13/2007
  53. ----------------
  54. - Fixed bug with --with-nrpe-group configure script option (Graham Collinson)
  55. - Fixed bug with check_disk thresholds in sample config file (Patric Wust)
  56. - Added NRPE_PROGRAMVERSION and NRPE_MULTILINESUPPORT environment variables
  57. for scripts that need to detect NRPE version and capabilities (Gerhard Lausser)
  58. - Added asprintf() support for systems that are missing it (Samba team)
  59. 2.8.1 - 05/10/2007
  60. -----------------
  61. - Fixed configure script error with user-specified NRPE group
  62. 2.8 - 05/08/2007
  63. ---------------
  64. - Added support for multiline plugin output (limited to 1KB at the moment) (Matthias Flacke)
  65. 2.8b1 - 03/14/2007
  66. -----------------
  67. - Changes to sample config files
  68. - Added ';' as an additional prohibited metachar for command arguments
  69. - Updated documentation and added easier installation commands
  70. 2.7.1 - 03/08/2007
  71. ------------------
  72. - Changed C++ style comment to C style to fix compilation errors on AIX (Ryan McGarry)
  73. 2.7 - 02/18/2007
  74. ----------------
  75. - Patches for detection SSL header and library locations (Andrew Boyce-Lewis)
  76. - NRPE daemon will now partially ignore non-fatal configuration file errors and attempt to startup (Andrew Boyce-Lewis)
  77. 2.6 - 12/11/2006
  78. ----------------
  79. - Added -u option to check_nrpe to return UNKNOWN states on socket timeouts (Bjoern Beutel)
  80. - Added connection_timeout variable to NRPE daemon to catch dead client connections (Ton Voon)
  81. - Added graceful timeout to check_nrpe to ensure connection to NRPE daemon is properly closed (Mark Plaksin)
  82. 2.5.2 - 06/30/2006
  83. ------------------
  84. - Fixed incorrect service name in sample xinetd config file
  85. - Added note on how to restart inetd for OpenBSD users (Robert Peaslee)
  86. - Fix for nonblocking accept()s on systems that define EAGAIN differently than EWOULDBLOCK (Gerhard Lausser)
  87. - Fix to (re)allow week random seed (Gerhard Lausser)
  88. 2.5.1 - 04/09/2006
  89. ------------------
  90. - Patch to fix segfault if --no-ssl option is used (Sean Finney/Peter Palfrader)
  91. 2.5 - 04/06/2006
  92. ----------------
  93. - (Re)added allowed_hosts option for systems that don't support TCP wrappers
  94. - Fix for SSL errors under Solaris 8 (Niels Endres)
  95. - Fix for config file directory inclusion on ReiserFS (Gerhard Lausser)
  96. 2.4 - 02/22/2006
  97. ----------------
  98. - Added option to allow week random seed (Gerhard Lausser)
  99. - Added optional command line prefix (Sean Finney)
  100. - Added ability to reload config file with SIGHUP
  101. - Fixed bug with location of dh.h include file
  102. - Fixed bug with disconnect message in debug mode
  103. 2.3 - 01/23/2006
  104. ----------------
  105. - Spec file fixes
  106. - Removed errant PID file debugging code
  107. - Fixed problem with trimming command definitions
  108. 2.2 - 01/22/2006
  109. ----------------
  110. - Spec file fix
  111. - Patch to add Tru64 and IRIX support (Ton Voon)
  112. - Updated config.sub and config.guess
  113. - Fixed bug with config file lines with only whitespace
  114. - Fixed bug with missing getopt() command line option for -V
  115. - Removed sample FreeBSD init script (now maintained by FreeBSD port)
  116. - Added config file option for writing a PID file
  117. 2.1 - 01/19/2004
  118. ----------------
  119. - Replaced host access list with TCP wrapper support
  120. - Removed length restrictions for command names and command lines
  121. - Configure script patch for getopt_long on Solaris
  122. - Bug fixes for accept() on HP-UX 11.0
  123. - Init script for SUSE Linux (Subhendu Ghosh)
  124. - SSL protocol used is now limited to TLSv1
  125. - Any output from plugins after first line is now ignored before
  126. plugin process is closed
  127. 2.0 - 09/08/2003
  128. ----------------
  129. - Added support for passing arguments to command
  130. - NRPE daemon can no longer be run as root user/group
  131. - Added getopt support
  132. - Added 'include' variable to config file to allow inclusion
  133. of external config files
  134. - Added 'include_dir' variable to allow inclusion of external
  135. config files in directories (with recursion)
  136. - Added native SSL support (Derrick Bennett)
  137. - Added my_strsep(), as Solaris doesn't have strsep()
  138. - Added license exemption for use with OpenSSL
  139. 1.8 - 01/16/2003
  140. ----------------
  141. - Daemon now closes stdio/out/err properly (James Peterson)
  142. - Makefile changes (James Peterson)
  143. - Mode command line option bug fix in daemon
  144. - Fixed incorrect command line options in check_nrpe plugin
  145. 1.7 - 01/08/2003
  146. ----------------
  147. - Spec file updates and minor bug fixes (James Peterson)
  148. - Bug fix with default nrpe port definition
  149. - Added sample xinetd config file (nrpe.xinetd)
  150. - Bug fix for command_timeout variable (James Peterson)
  151. 1.6 - 12/30/2002
  152. ----------------
  153. - Updated sample commands to match new plugin argument format
  154. - Added sample init scripts for FreeBSD and Debian (Andrew Ryder)
  155. - Syntax changes (-H option specifies host name in check_nrpe,
  156. -c option specifies config file in nrpe)
  157. - Added command_timeout directive to config file to allow user
  158. to specify timeout for executing plugins
  159. - Added spec file and misc patches for building RPMs (James Peterson)
  160. - Added --with-nrpe-port config directive (James Peterson)
  161. 1.5 - 06/03/2002
  162. ----------------
  163. - Added setuid/setgid option to config file (suggested by Marek Cervenka)
  164. 1.4 - 06/01/2002
  165. ----------------
  166. - Changed STATE_UNKNOWN to value of 3 instead of -1 (old style)
  167. - Minor doc and sample config file changes
  168. 1.3 - 02/21/2002
  169. ----------------
  170. - Name and version change
  171. - Ignore SIGHUP, minor cleanup (Jon Andrews)
  172. 1.2.5 - 12/22/2001
  173. ------------------
  174. - Implemented Beej's sendall() to handle partial send()s
  175. - Added instructions on running under xinetd to README
  176. - Removed some old crud
  177. 1.2.4 - 02/22/2001
  178. ------------------
  179. - I forgot what changes I made. Go figure...
  180. 1.2.3 - 12/21/2000
  181. ------------------
  182. - A bit more documentation on configuring command definitions for the plugin
  183. 1.2.2 - 06/05/2000
  184. ------------------
  185. - Fixed error in docs for running under inetd using TCP wrappers
  186. - Replaced old email address in src/netutils.h with new one
  187. 1.2.1 - 05/07/2000
  188. ------------------
  189. - Removed trapping of SIGCHLD
  190. - Changed wait4() to waitpid() to allow compilation on HP-UX and AIX
  191. 1.2.0 - 04/18/2000
  192. ------------------
  193. - Server forks twice after accepting a client connection, so as to prevent the
  194. creation of zombies
  195. 1.1.5 - 04/07/2000
  196. ------------------
  197. - Fixed a small bug where one debug message was not getting logged properly
  198. 1.1.4 - 03/30/2000
  199. ------------------
  200. - Added option to disable/enable debug messages using the debug option in the
  201. config file
  202. 1.1.3 - 03/11/2000
  203. ------------------
  204. - Changed config file to use an absolute path
  205. - Changed all debug output to use syslog (Rene Klootwijk)
  206. - No convert all data to network order before sending it and convert it back to
  207. host order when receiving it. This makes it possible to mix Solaris and Linux,
  208. e.g. running check_nrpe on Linux and nrpe on Solaris. (Rene Klootwijk)
  209. 1.1.2 - 03/07/2000
  210. ------------------
  211. - Removed unnecessary code in signal handler routine
  212. - Unused signals are no longer trapper
  213. 1.1.1 - 02/28/2000 - RKL
  214. ---------------------------
  215. - Modified syslog code to include string describing the error code.
  216. - Changed hardcoded number in signal handler to its name. This prevented nrpe
  217. to run on Solaris.
  218. - Fixed race condition in accept loop. The result of accept should also be
  219. checked for EINTR.
  220. - Modified recv and send function calls to compile without warnings on Solaris.
  221. - Modified configure.in,configure and Makefile.in to include nsl and socket libs
  222. for Solaris.
  223. - Modified the signal handler to reestablish itself after being called.
  224. 1.1 - 02/24/2000 - Rene Klootwijk <rene@klootwijk.org>
  225. -----------------
  226. - Added ability to bind nrpe to a specific interface by specifying the address
  227. of this interface in the nrpe.cfg file (e.g. server_address=192.168.2.3)
  228. 1.0 - 02/16/2000
  229. ------------------
  230. - Added ability to run as a service under inetd
  231. 1.0b6 - 02/01/2000
  232. ------------------
  233. - Added configure script
  234. - Netutils functions from the NetSaint plugins is now used
  235. - Reset SIGCHLD to default behavior before calling popen() to
  236. prevent race condition with pclose() (Reported by Rene Klootwijk)
  237. - Cleaned up code
  238. 1.0b5 - 01/10/2000
  239. ------------------
  240. - Added init script contributed by Jacob L
  241. - Incorporated syslog code and other patches contributed by Jacob L
  242. 1.0b4 - 11/04/1999
  243. ------------------
  244. - Changed 'allowed_ip' option in configuration file to
  245. 'allowed_hosts' and added support for multiple hosts
  246. - Minor buffer overflow protection fixes
  247. - main() returned STATE_UNKNOWN on successful launch, changed to STATE_OK (jaclu@grm.se)
  248. - Added syslog support (jaclu@grm.se)