Wow!
I haven't had the time yet to get on with it, but you sure saved me a
lot of time fiddling with this.
Thanks Geert.
/tony
On Fri, 2019-05-24 at 08:38 +0000, Geert Geurts via FreeIPA-users
wrote:
> Hi Tony,
> The solution of Neal Harrington works perfectly!
> Here the full steps to implement his solution:
> 1) open with an editor on ipa server /etc/sudoers.d/zabbix and fill
> with:
> ## Allow zabix to query ipa status
> Defaults:zabbix !requiretty
> zabbix ALL = (root) NOPASSWD: /usr/sbin/ipactl status
>
> 2) open with an editor an ipa server
> /etc/zabbix/zabbix_agentd.d/userparameter-ipa.conf and fill with:
> UserParameter=ipa.status,sudo /usr/sbin/ipactl status 2>&1|egrep -v
> "(INFO\: The ipactl command was successful$|: RUNNING$)"
>
> 3) execute on ipaserver:
> systemctl restart zabbix-agent
>
> 4) execute on ipaserver to verify zabix-agent config:
> zabbix_agentd -p|grep ipa.status
>
> 5) execute on zabbix server to verify the item can be queried (Where
> 192.168.0.1 is the ip of the ipa server):
> zabbix_get -s 192.168.0.1 -k ipa.status
>
> (The result should be an empty line!)
>
> 6) Then on the zabbix server open a new textfile template.xml and
> fill it with:
> <zabbix_export>
> <version>4.0</version>
> <date>2019-05-24T06:58:01Z</date>
> <groups>
> <group>
> <name>Templates/Applications</name>
> </group>
> </groups>
> <templates>
> <template>
> <template>Template IPA server application</template>
> <name>Template IPA server application</name>
> <description/>
> <groups>
> <group>
> <name>Templates/Applications</name>
> </group>
> </groups>
> <applications/>
> <items>
> <item>
> <name>Custom Template IPA Server</name>
> <type>0</type>
> <snmp_community/>
> <snmp_oid/>
> <key>ipa.status</key>
> <delay>30s</delay>
> <history>90d</history>
> <trends>0</trends>
> <status>0</status>
> <value_type>4</value_type>
> <allowed_hosts/>
> <units/>
> <snmpv3_contextname/>
> <snmpv3_securityname/>
> <snmpv3_securitylevel>0</snmpv3_securitylevel>
> <snmpv3_authprotocol>0</snmpv3_authprotocol>
> <snmpv3_authpassphrase/>
> <snmpv3_privprotocol>0</snmpv3_privprotocol>
> <snmpv3_privpassphrase/>
> <params/>
> <ipmi_sensor/>
> <authtype>0</authtype>
> <username/>
> <password/>
> <publickey/>
> <privatekey/>
> <port/>
> <description/>
> <inventory_link>16</inventory_link>
> <applications/>
> <valuemap/>
> <logtimefmt/>
> <preprocessing/>
> <jmx_endpoint/>
> <timeout>3s</timeout>
> <url/>
> <query_fields/>
> <posts/>
> <status_codes>200</status_codes>
> <follow_redirects>1</follow_redirects>
> <post_type>0</post_type>
> <http_proxy/>
> <headers/>
> <retrieve_mode>0</retrieve_mode>
> <request_method>0</request_method>
> <output_format>0</output_format>
> <allow_traps>0</allow_traps>
> <ssl_cert_file/>
> <ssl_key_file/>
> <ssl_key_password/>
> <verify_peer>0</verify_peer>
> <verify_host>0</verify_host>
> <master_item/>
> </item>
> </items>
> <discovery_rules/>
> <httptests/>
> <macros/>
> <templates/>
> <screens/>
> </template>
> </templates>
> <triggers>
> <trigger>
> <expression>{Template IPA server
> application:ipa.status.regexp([^\s],1200)}=1</expression>
> <recovery_mode>0</recovery_mode>
> <recovery_expression/>
> <name>IPA service status trigger</name>
> <correlation_mode>0</correlation_mode>
> <correlation_tag/>
> <url/>
> <status>0</status>
> <priority>2</priority>
> <description/>
> <type>0</type>
> <manual_close>0</manual_close>
> <dependencies/>
> <tags/>
> </trigger>
> </triggers>
> </zabbix_export>
>
> 7) Import the template in zabbix and add it to your ipa server.
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahoste
> d.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelin
> es
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-u
> s...@lists.fedorahosted.org
--
Tony Albers - Systems Architect - IT Development
Royal Danish Library, Victor Albecks Vej 1, 8000 Aarhus C, Denmark
Tel: +45 2566 2383 - CVR/SE: 2898 8842 - EAN: 5798000792142
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
