windows 7 setuid failed

5 posts / 0 new
Last post
Anonymous
windows 7 setuid failed

i have the current/latest version of winrpe running on my windows 7 pc (not a server!)

xinetd is running and nrpe is a service underneath it.

when i try a very simple 'check_nrpe' from my nagios (centos linux) server to this pc, i get:

libexec/check_nrpe -H win7pc -nCHECK_NRPE: Error receiving data from daemon. checking on the pc in the event viewer i get: C:\Program Files (x86)\ICW\bin\xinetd: PID 30832: setuid failed: Permission denied (errno = 13) i've changed etc\xinetd.d\nrpe to have user = Administrator but it doesn't help. what am i missing?

itefix
Offline
Last seen: 6 hours 6 min ago
Joined: 01.05.2008 - 21:33
 

 

Changing the credential at etc\xinetd.d\nrpe will not help as the service is run by a dedicated account - SvcXinet. You can try to update etc\xinetd.d\nrpe back to the default and make the servie account a member of the local administratos group. 

Anonymous
ok...

ok...

i created the "SvcXinet" user and gave them administrator priviledges (remember, this is Win7)

this user is clearly visible and yet when i try to start xinetd i get the following error: Unknown user: SvcXinet 

just for giggles, i tried to run check_nrpe when the user was SvcXinet from my nagios/linux server and it timed out.

switching the user back to Administrator allows for xinetd to start cleanly but (of course) check_nrpe is still griping like before: CHECK_NRPE: Error receiving data from daemon.

Anonymous
i might be making some

i might be making some progress...

i stopped xinetd and daemonized nrpe (bin\nrpe -n -c nrpd.cfg -d) and verified it was running via taskmgr.

from my nagios server i can do 'check_nrpe -H laptopname -n' and get a version number back. yay!

however when i try to run (say) 'service_all' (per the nrpe.cfg file), i get: NRPE: Command 'service_all' not defined  (it's like it's not reading the .cfg file??)

just for giggles, passing in a full 'check_winevent' results in a parsing error (no surprise, but it's was something to test...).

itefix
Offline
Last seen: 6 hours 6 min ago
Joined: 01.05.2008 - 21:33
 

 

Too many tweaks here :-) Just uninstall, remove remnants of the installation directory and install it again - it will create a service account SvcXinet during the installation with a proper setup. You can then make it a member of Administrators group.