Changelog 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383
  1. **************
  2. NRPE Changelog
  3. **************
  4. 2.16 = xx/xx/xxxx
  5. -----------------
  6. ENHANCEMENTS
  7. - Added listen_queue_size as configuration option (Vadim Antipov, Kaspersky Lab)
  8. - Reworked SSL/TLS. See the README.SSL.md file for full info. (John Frickson)
  9. - Added support for version 3 variable sized packets up to 64KB. nrpe will
  10. accept either version from check_nrpe. check_nrpe will try to send a
  11. version 3 packet first, and fall back to version 2. check_nrpe can be forced
  12. to only send version 2 packets if the switch `-2` is used. (John Frickson)
  13. FIXES
  14. - Added ifdefs for complete_SSL_shutdown to compile without SSL. (Matthew L. Daniel)
  15. - Renamed configure.in to configure.ac and added check for sigaction (John Frickson)
  16. - Replaced all instances of signal() with sigaction() + blocking (John Frickson)
  17. - check_nrpe does not parse passed arguments correctly (John Frickson)
  18. - NRPE should not start if cannot write pid file (John Frickson)
  19. - Fixed out-of-bounds error (return code 255) for some failures (John Frickson)
  20. - Connection Timeout and Connection Refused messages need a new line (Andrew Widdersheim)
  21. - allowed_hosts doesn't work, if one of the hostnames can't be resolved by dns (John Frickson)
  22. - allowed_hosts doesn't work with a hostname resolving to an IPv6 address (John Frickson)
  23. - Return UNKNOWN when issues occur (Andrew Widdersheim)
  24. - NRPE returns OK if check can't be executed (Andrew Widdersheim)
  25. - nrpe 2.15 [regression in Added SRC support on AIX - 2.14] (frphoebus)
  26. - compile nrpe - Solaris 9 doesn't have isblank() (lilo, John Frickson)
  27. - sample configuration for check_load has crazy sample load avg (ernestoongaro)
  28. 2.15 - 09/06/2013
  29. -----------------
  30. - Now compiles on HP-UX (Grant Byers)
  31. - Added support for IPv6 (Leo Baltus, Eric Stanley)
  32. 2.14 - 12/21/2012
  33. -----------------
  34. - Added configure option to allow bash command substitutions, disabled by default [bug #400] (Eric Stanley)
  35. - Patched to shutdown SSL connection completely (Jari Takkala)
  36. - Added SRC support on AIX (Thierry Bertaud)
  37. - Updated RPM SPEC file to support creating RPMs on AIX (Eric Stanley)
  38. - Updated logging to support compiling on AIX (Eric Stanley)
  39. 2.13 - 11/11/2011
  40. -----------------
  41. - Applied Kaspersky Labs supplied patch for extending allowed_hosts (Konstantin Malov)
  42. - Fixed bug in allowed_hosts parsing (Eric Stanley)
  43. - Updated to support compiling on Solaris 10 (thanks to Kevin Pendleton)
  44. 2.12 - 03/10/2008
  45. -----------------
  46. - Fix for unterminated multiline plugin (garbage) output (Krzysztof Oledzki)
  47. 2.11 - 12/26/2007
  48. -----------------
  49. - Added lib64 library paths to configure script for 64-bit systems (John Maag)
  50. - Added --with-ssl-lib configure script option
  51. - Added --with-log-facility option to control syslog logging (Ryan Ordway and Brian Seklecki)
  52. 2.10 - 10/19/2007
  53. -----------------
  54. - Moved PDF docs to docs/ subdirectory, added OpenOffice source document
  55. - A critical result is now returned for child processed that die due to a signal (Klas Lindfors)
  56. 2.9 - 08/13/2007
  57. ----------------
  58. - Fixed bug with --with-nrpe-group configure script option (Graham Collinson)
  59. - Fixed bug with check_disk thresholds in sample config file (Patric Wust)
  60. - Added NRPE_PROGRAMVERSION and NRPE_MULTILINESUPPORT environment variables
  61. for scripts that need to detect NRPE version and capabilities (Gerhard Lausser)
  62. - Added asprintf() support for systems that are missing it (Samba team)
  63. 2.8.1 - 05/10/2007
  64. -----------------
  65. - Fixed configure script error with user-specified NRPE group
  66. 2.8 - 05/08/2007
  67. ---------------
  68. - Added support for multiline plugin output (limited to 1KB at the moment) (Matthias Flacke)
  69. 2.8b1 - 03/14/2007
  70. -----------------
  71. - Changes to sample config files
  72. - Added ';' as an additional prohibited metachar for command arguments
  73. - Updated documentation and added easier installation commands
  74. 2.7.1 - 03/08/2007
  75. ------------------
  76. - Changed C++ style comment to C style to fix compilation errors on AIX (Ryan McGarry)
  77. 2.7 - 02/18/2007
  78. ----------------
  79. - Patches for detection SSL header and library locations (Andrew Boyce-Lewis)
  80. - NRPE daemon will now partially ignore non-fatal configuration file errors and attempt to startup (Andrew Boyce-Lewis)
  81. 2.6 - 12/11/2006
  82. ----------------
  83. - Added -u option to check_nrpe to return UNKNOWN states on socket timeouts (Bjoern Beutel)
  84. - Added connection_timeout variable to NRPE daemon to catch dead client connections (Ton Voon)
  85. - Added graceful timeout to check_nrpe to ensure connection to NRPE daemon is properly closed (Mark Plaksin)
  86. 2.5.2 - 06/30/2006
  87. ------------------
  88. - Fixed incorrect service name in sample xinetd config file
  89. - Added note on how to restart inetd for OpenBSD users (Robert Peaslee)
  90. - Fix for nonblocking accept()s on systems that define EAGAIN differently than EWOULDBLOCK (Gerhard Lausser)
  91. - Fix to (re)allow week random seed (Gerhard Lausser)
  92. 2.5.1 - 04/09/2006
  93. ------------------
  94. - Patch to fix segfault if --no-ssl option is used (Sean Finney/Peter Palfrader)
  95. 2.5 - 04/06/2006
  96. ----------------
  97. - (Re)added allowed_hosts option for systems that don't support TCP wrappers
  98. - Fix for SSL errors under Solaris 8 (Niels Endres)
  99. - Fix for config file directory inclusion on ReiserFS (Gerhard Lausser)
  100. 2.4 - 02/22/2006
  101. ----------------
  102. - Added option to allow week random seed (Gerhard Lausser)
  103. - Added optional command line prefix (Sean Finney)
  104. - Added ability to reload config file with SIGHUP
  105. - Fixed bug with location of dh.h include file
  106. - Fixed bug with disconnect message in debug mode
  107. 2.3 - 01/23/2006
  108. ----------------
  109. - Spec file fixes
  110. - Removed errant PID file debugging code
  111. - Fixed problem with trimming command definitions
  112. 2.2 - 01/22/2006
  113. ----------------
  114. - Spec file fix
  115. - Patch to add Tru64 and IRIX support (Ton Voon)
  116. - Updated config.sub and config.guess
  117. - Fixed bug with config file lines with only whitespace
  118. - Fixed bug with missing getopt() command line option for -V
  119. - Removed sample FreeBSD init script (now maintained by FreeBSD port)
  120. - Added config file option for writing a PID file
  121. 2.1 - 01/19/2004
  122. ----------------
  123. - Replaced host access list with TCP wrapper support
  124. - Removed length restrictions for command names and command lines
  125. - Configure script patch for getopt_long on Solaris
  126. - Bug fixes for accept() on HP-UX 11.0
  127. - Init script for SUSE Linux (Subhendu Ghosh)
  128. - SSL protocol used is now limited to TLSv1
  129. - Any output from plugins after first line is now ignored before
  130. plugin process is closed
  131. 2.0 - 09/08/2003
  132. ----------------
  133. - Added support for passing arguments to command
  134. - NRPE daemon can no longer be run as root user/group
  135. - Added getopt support
  136. - Added 'include' variable to config file to allow inclusion
  137. of external config files
  138. - Added 'include_dir' variable to allow inclusion of external
  139. config files in directories (with recursion)
  140. - Added native SSL support (Derrick Bennett)
  141. - Added my_strsep(), as Solaris doesn't have strsep()
  142. - Added license exemption for use with OpenSSL
  143. 1.8 - 01/16/2003
  144. ----------------
  145. - Daemon now closes stdio/out/err properly (James Peterson)
  146. - Makefile changes (James Peterson)
  147. - Mode command line option bug fix in daemon
  148. - Fixed incorrect command line options in check_nrpe plugin
  149. 1.7 - 01/08/2003
  150. ----------------
  151. - Spec file updates and minor bug fixes (James Peterson)
  152. - Bug fix with default nrpe port definition
  153. - Added sample xinetd config file (nrpe.xinetd)
  154. - Bug fix for command_timeout variable (James Peterson)
  155. 1.6 - 12/30/2002
  156. ----------------
  157. - Updated sample commands to match new plugin argument format
  158. - Added sample init scripts for FreeBSD and Debian (Andrew Ryder)
  159. - Syntax changes (-H option specifies host name in check_nrpe,
  160. -c option specifies config file in nrpe)
  161. - Added command_timeout directive to config file to allow user
  162. to specify timeout for executing plugins
  163. - Added spec file and misc patches for building RPMs (James Peterson)
  164. - Added --with-nrpe-port config directive (James Peterson)
  165. 1.5 - 06/03/2002
  166. ----------------
  167. - Added setuid/setgid option to config file (suggested by Marek Cervenka)
  168. 1.4 - 06/01/2002
  169. ----------------
  170. - Changed STATE_UNKNOWN to value of 3 instead of -1 (old style)
  171. - Minor doc and sample config file changes
  172. 1.3 - 02/21/2002
  173. ----------------
  174. - Name and version change
  175. - Ignore SIGHUP, minor cleanup (Jon Andrews)
  176. 1.2.5 - 12/22/2001
  177. ------------------
  178. - Implemented Beej's sendall() to handle partial send()s
  179. - Added instructions on running under xinetd to README
  180. - Removed some old crud
  181. 1.2.4 - 02/22/2001
  182. ------------------
  183. - I forgot what changes I made. Go figure...
  184. 1.2.3 - 12/21/2000
  185. ------------------
  186. - A bit more documentation on configuring command definitions for the plugin
  187. 1.2.2 - 06/05/2000
  188. ------------------
  189. - Fixed error in docs for running under inetd using TCP wrappers
  190. - Replaced old email address in src/netutils.h with new one
  191. 1.2.1 - 05/07/2000
  192. ------------------
  193. - Removed trapping of SIGCHLD
  194. - Changed wait4() to waitpid() to allow compilation on HP-UX and AIX
  195. 1.2.0 - 04/18/2000
  196. ------------------
  197. - Server forks twice after accepting a client connection, so as to prevent the
  198. creation of zombies
  199. 1.1.5 - 04/07/2000
  200. ------------------
  201. - Fixed a small bug where one debug message was not getting logged properly
  202. 1.1.4 - 03/30/2000
  203. ------------------
  204. - Added option to disable/enable debug messages using the debug option in the
  205. config file
  206. 1.1.3 - 03/11/2000
  207. ------------------
  208. - Changed config file to use an absolute path
  209. - Changed all debug output to use syslog (Rene Klootwijk)
  210. - No convert all data to network order before sending it and convert it back to
  211. host order when receiving it. This makes it possible to mix Solaris and Linux,
  212. e.g. running check_nrpe on Linux and nrpe on Solaris. (Rene Klootwijk)
  213. 1.1.2 - 03/07/2000
  214. ------------------
  215. - Removed unnecessary code in signal handler routine
  216. - Unused signals are no longer trapper
  217. 1.1.1 - 02/28/2000 - RKL
  218. ---------------------------
  219. - Modified syslog code to include string describing the error code.
  220. - Changed hardcoded number in signal handler to its name. This prevented nrpe
  221. to run on Solaris.
  222. - Fixed race condition in accept loop. The result of accept should also be
  223. checked for EINTR.
  224. - Modified recv and send function calls to compile without warnings on Solaris.
  225. - Modified configure.in,configure and Makefile.in to include nsl and socket libs
  226. for Solaris.
  227. - Modified the signal handler to reestablish itself after being called.
  228. 1.1 - 02/24/2000 - Rene Klootwijk <rene@klootwijk.org>
  229. -----------------
  230. - Added ability to bind nrpe to a specific interface by specifying the address
  231. of this interface in the nrpe.cfg file (e.g. server_address=192.168.2.3)
  232. 1.0 - 02/16/2000
  233. ------------------
  234. - Added ability to run as a service under inetd
  235. 1.0b6 - 02/01/2000
  236. ------------------
  237. - Added configure script
  238. - Netutils functions from the NetSaint plugins is now used
  239. - Reset SIGCHLD to default behavior before calling popen() to
  240. prevent race condition with pclose() (Reported by Rene Klootwijk)
  241. - Cleaned up code
  242. 1.0b5 - 01/10/2000
  243. ------------------
  244. - Added init script contributed by Jacob L
  245. - Incorporated syslog code and other patches contributed by Jacob L
  246. 1.0b4 - 11/04/1999
  247. ------------------
  248. - Changed 'allowed_ip' option in configuration file to
  249. 'allowed_hosts' and added support for multiple hosts
  250. - Minor buffer overflow protection fixes
  251. - main() returned STATE_UNKNOWN on successful launch, changed to STATE_OK (jaclu@grm.se)
  252. - Added syslog support (jaclu@grm.se)