SSH health checking with ldirectord [RESENT because of meforgetting about attachments]

[Roberto Nibali]

My apologies to the list if this messages show up twice or thrice.

> On Mon, 2007-03-05 at 18:17 +0100, Roberto Nibali wrote:
>>> Well, to make sure the service is up, really. I wanna make sure that a
>>> user can actually log in, ideally. We're using a system to chroot sftp
>>> users into their accounts, and if I can test to that point, that would
>> Would it be ok if the health check connects to your sshd, logs in and 
>> executes a command?
> 
> Perhaps. The sftp is the real purpose for the server, so it would be
> best to test it out *shrug*

Sigh, I've tried with my poor perl knowledge to work on ldirectord,
however I failed due to CPANs borkeness. It's not possible to install
Net::SSH::Perl on my machine, but I send you my ideas as a patch if
you're interested in pursuing further attempts at an improved health
check. It also has support for a possible SFTP health check. The patch
on top of that incorporates the patch for the external command check:

http://www.in-addr.de/pipermail/lvs-users/2007-January/018303.html

I haven't incorporated my SQL fixes and support for Oracle yet:

http://www.in-addr.de/pipermail/lvs-users/2007-February/018467.html

Since the current patch is bigger then the ldirectord source (darn
Eclipse auto-formatted the whole source), I've also put the new
ldirectord onto the webserver referred to below. Let me know if you find 
time to experiment with it. This is my gift to you as an apology for not 
having properly read your email in the first place.

Horms apparently has fallen off the earth, but I've cc'd him anyway,
just in case he re-surfaces anytime :).

>> Since I feel a bit guilty about not having read your initial post 
>> correctly, I'm currently looking into ways of extending ldirectord with 
>> the functionality of testing ssh connections. Would you be willing to 
>> play guinea pig if I get something compiled together?
> 
> Sure. Why not? It's not in production yet. Not sure how much time I'll
> have to test right now, but I'll find time here and there.

Ok, so I'll send you a (probably non-functioning) start of an SSH and 
SFTP health check as patch. It also fixes the FTP health check, which I 
honestly don't understand how it ever worked :).

NEW: It's not attached anymore (this mailing list does not like 
attachments most of the time), but you can grab the stuff from here:

http://www.drugphish.ch/patches/ratz/ldirectord/

Best regards,
Roberto Nibali, ratz
-- 
echo
'[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc