I didn't know about the primary group bit, thanks! It's all working, apologies for the snarky-ness in the previous message. All is good now :)
On 23-Apr-09, at 4:24 PM, Patrick Morris wrote: > By the way, for further info see the xinetd man page, which (on my > system, anyway) states: > > group > determines the gid for the server process. The group name must > exist > in /etc/group. If a group is not specified, the group of user will > be used (from /etc/passwd). This attribute is ineffective if the > effective user ID of xinetd is not super-user. > > Note that it's only going to use the primary group. Other group rights > are dropped. > > On Thu, 23 Apr 2009, Adam Mooz wrote: > >> No, it's not, but that doesn't matter. I can manually execute the >> plugin, but not via NRPE, so I think something isn't running as >> nagios. Top says NRPE is running as nagios though. What user does >> the NRPE run it's scripts as on the remote machine? >> >> On 23-Apr-09, at 3:01 PM, Patrick Morris wrote: >> >>> On Thu, 23 Apr 2009, Adam Mooz wrote: >>> >>>> I'm using Nagios and NRPE to monitor some system logs on a remote >>>> system via check_logfiles. >>>> >>>> Here's the setup: >>>> -user 'nagio's is part of the 'adm' group >>>> -/var/log/syslog is readable by the 'adm' group >>>> -manually executing check_logfiles as nagios (sudo -u nagios ./ >>>> check_logfiles <etc>) works >>>> -executing remotely via NRPE fails >>>> -NRPE is being started via xinetd and running as 'nagios' >>>> >>>> changing syslog to be world readable fixes the problem, however it >>>> does just that; leaves the syslog file world readable. This >>>> behavior >>>> is being repeated for several other log files as well (mysql, >>>> apache) >>>> where despite nagios being part of the appropriate groups still not >>>> remotely readable. This is clearly a problem of something >>>> running as >>>> a different user. >>>> >>>> Ideas? >>> >>> If I were a betting man I'd say that adm is not the nagios user's >>> primary group, and/or you've specified a different group in your >>> xinetd >>> config. >> >> >> ------------------------------------------------------------------------------ >> Crystal Reports - New Free Runtime and 30 Day Trial >> Check out the new simplified licensign option that enables unlimited >> royalty-free distribution of the report engine for externally >> facing >> server and web deployment. >> http://p.sf.net/sfu/businessobjects >> _______________________________________________ >> Nagios-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/nagios-users >> ::: Please include Nagios version, plugin version (-v) and OS when >> reporting any issue. >> ::: Messages without supporting info will risk being sent to /dev/ >> null ------------------------------------------------------------------------------ Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects _______________________________________________ Nagios-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
