WINRPE - A yet another Nagios NRPE Agent for Windows
Version 3.0.3 - April 2011

CHANGES FROM VERSION 3.0.2

 1. BUG FIX - Service doesn't start due to account/group information

    Version 3.0.2 was supposed to solve that problem. However, a glitch
    caused this not to happen. The installer creates and runs the batch
    file "bin/winrpe_make_pwdgrp.cmd" for proper population of etc/passwd
    and etc/group files. That batch file can be reused for repopulation
    of related files in the case service account change.

 2. UPDATE - Default service account is deleted during uninstallation

    User defined service account will not deleted in the case the account
    is in use for other purposes.
   
 3. UPDATE - check_pdm for processor/disk and memory checks.
 
    Winrpe has the same check_pdm as Nagwin uses for its local checks.
    It should now work properly for NRPE checks.
   
 4. UPDATE - Reduction in the installer size

    Perl-based plugins use now a common perl dll.

Public key authentication (PKA) allows a user to connect to the Copssh server without sending a password over the Internet. PKA uses a key pair: a private key and a public key. The private key represents user's  identity and should be kept in a secure place and protected with a passphrase. The corresponding public key is automatically added to the list of public keys accepted by the user on the Copssh server.

Copssh Control Panel is now updated with a management framework for PKA administration:

• Wizard for creation of key pairs: Select key types rsa, dsa and ecdsa with supported keylengths, save private keys with an optional passphrase and add the public key to the list of authorized keys.

• Remove a public key from the list of authorized keys.

• Update comment and/or options fields of a public key

NB! This is just an attempt to make PKA setup easier. If you are a seasoned PKA veteran, you can update the underlying system files directly according to your requirements.

It's been observed that auto-populating the user list from domains with many users is very time consuming and leads to hangs and problems. User Activation Wizard in the Control Panel uses now a text entry field for domain users or if the local host is a domain controller. Auto-populated user list is still the preferred way to select local users on hosts which are not domain controllers.

Copssh 4.1.0 contains also the security patch for OpenSSL 0.9.8r.

** SECURITY UPDATE ** - OpenSSH 5.8p



Fix vulnerability in legacy certificate signing introduced in OpenSSH-5.6 and found by Mateusz Kocielski.



Legacy certificates signed by OpenSSH 5.6 or 5.7 included data from the stack in place of a random nonce field. The contents of the stack do not appear to contain private data at this point, but this cannot be stated with certainty for all platform, library and compiler combinations. In particular, there exists a risk that some bytes from the privileged CA key may be accidentally included.



A full advisory for this issue is available at: http://www.openssh.com/txt/legacy-cert.adv

2. UPDATE - Control Panel 2.0.3



More stable support for domain user activation (Use domainname\user to logon).

Bugfix. Empty activated user list after completing wizard



MD5 Signature:

da3ca0dd294db57767ca47cf14bb6a3d *Copssh_4.0.4_Installer.zip



SHA256 Signature:

690c5ac0c2f72bbc9754f8bf914b376d2098a3ee3a5578c728b4b859927d5bf6 *Copssh_4.0.4_Installer.zip



Download: http://itefix.no/i2/download

Nagwin 1.0.1 supports Nagios CGIs capable of producing images (Statusmap, Trends and Histogram).

External Commands are also supported. That one required to implement a workaround: Named pipes are used extensively by Nagios for external command processing, while Cygwin has a limited and somewhat unstable support for named pipes. Nagwin 1.0.1 contains a patched Nagios using a one-plain-file-per-command approach for  processing. Patches are available at the download location.

In addition, Start menu has become more functional: Nagios services can be queried, started, stopped or resarted. You can also perform Nagios configuration checks.

  
CPU plugins relying on Windows performance counters don't report any values due to DLL conflicts. Nagwin contains a new check_pdm2 plugin producing correct values.

Installer signatures:

MD5:
a546b6994211f31f7664a383ddacad44 *Nagwin_1.0.1_Installer.zip

SHA256::
b6d0465af2aa8bd55f61945f4bf51bacb065588a98a702fd83d3f03b335d41b5 *Nagwin_1.0.1_Installer.zip

Version 4.0.1 fixes some serious bugs thwarting Coppssh's functionality to a large extent:

1. Bug fix - User Activation Wizard doesn't display user list on Windows 7

2. Bug fix - SFTP can not be activated as a service

3. Bug fix - Nano editor doesn't work

NB! You need to remove configuration file copsshcp.config in bin directory

Visit download section, grab your copy and many thanks for bug reports !!

Signatures:

MD5:
4041a93b040933fe820defc152c89a99 *Copssh_4.0.1_Installer.zip

SHA256:
a7077ff43084a60d5cb4074783fe4a59a1132bc67faad5e0de451ad68d27e433 *Copssh_4.0.1_Installer.zip