On 5/25/2010 7:02 PM, Jatin Davey wrote: > On 5/25/2010 5:09 PM, Jatin Davey wrote: > >> On 5/25/2010 4:57 PM, Dave Shield wrote: >> >> >>> On 25 May 2010 11:43, Jatin Davey<[email protected]> wrote: >>> >>> >>> >>>> I also turned off the iptables service to rule out if it is causing some >>>> issues >>>> >>>> >>>> >>> No - you are receiving information from the SNMP agent, >>> so that much is working. >>> >>> >>> >>> >>>> but even then it is showing the permission denied error. >>>> >>>> >>>> >>> This is showing that the agent is failing to invoke the >>> monitoring scripts. >>> >>> >>> >>> >>> >>>> Please let me know if there is something that i am missing. >>>> >>>> >>>> >>> I'd still like you to try running these scripts directly on the remote >>> system as yourself (or any non-root user). >>> >>> Dave >>> >>> >>> >> Thanks Dave for your response , I created a new user in my linux box >> using the useradd and passwd commands. Then issued the su test command >> to log into the test user account. Then scrolled into the directory >> where these script files were present and tried executing them and i get >> the following error: >> >> ./javathreads: line 2: /home/proc_threads/tempfile: Permission denied >> awk: cmd. line:1: fatal: cannot open file `/home/proc_threads/tempfile' >> for read ing (Permission denied) >> >> This shows that i am unable to execute the scripts locally on the system >> using a non-root account. >> Could you let me know me know what more needs to be done. >> >> Thanks >> Jatin >> >> ------------------------------------------------------------------------------ >> >> _______________________________________________ >> Net-snmp-users mailing list >> [email protected] >> Please see the following page to unsubscribe or change other options: >> https://lists.sourceforge.net/lists/listinfo/net-snmp-users >> >> >> > Ok , i finally managed to make sure that a non-root user is able to > execute the scripts. Then i restarted the snmpd daemon on the target > host. But even now when i run a snmpget from the Nagios server to the > snmpd daemon i am still getting as permission denied. The snmpwalk also > does not seem to work as shown below: > > UCD-SNMP-MIB::extIndex.1 = INTEGER: 1 > UCD-SNMP-MIB::extIndex.2 = INTEGER: 2 > UCD-SNMP-MIB::extIndex.3 = INTEGER: 3 > UCD-SNMP-MIB::extNames.1 = STRING: threadsjava > UCD-SNMP-MIB::extNames.2 = STRING: threadscspc > UCD-SNMP-MIB::extNames.3 = STRING: threadsmysqld > UCD-SNMP-MIB::extCommand.1 = STRING: /home/proc_threads/javathreads > UCD-SNMP-MIB::extCommand.2 = STRING: /home/proc_threads/cspc_server_threads > UCD-SNMP-MIB::extCommand.3 = STRING: /home/proc_threads/mysqldthreads > UCD-SNMP-MIB::extResult.1 = INTEGER: 1 > UCD-SNMP-MIB::extResult.2 = INTEGER: 1 > UCD-SNMP-MIB::extResult.3 = INTEGER: 1 > UCD-SNMP-MIB::extOutput.1 = STRING: /home/proc_threads/javathreads: > Permission denied > UCD-SNMP-MIB::extOutput.2 = STRING: > /home/proc_threads/cspc_server_threads: Permission denied > UCD-SNMP-MIB::extOutput.3 = STRING: /home/proc_threads/mysqldthreads: > Permission denied > UCD-SNMP-MIB::extErrFix.1 = INTEGER: noError(0) > UCD-SNMP-MIB::extErrFix.2 = INTEGER: noError(0) > UCD-SNMP-MIB::extErrFix.3 = INTEGER: noError(0) > UCD-SNMP-MIB::extErrFixCmd.1 = STRING: > UCD-SNMP-MIB::extErrFixCmd.2 = STRING: > UCD-SNMP-MIB::extErrFixCmd.3 = STRING: > > Please let me know what else needs to be done. > > Thanks > Jatin > > ------------------------------------------------------------------------------ > > _______________________________________________ > Net-snmp-users mailing list > [email protected] > Please see the following page to unsubscribe or change other options: > https://lists.sourceforge.net/lists/listinfo/net-snmp-users > >
Ok , I finally figured it out from the CentOS support mailing list. The real issues was that SElinux was running in "Enforcing" mode and hence external commands were denied execution of scripts locally. Here is the snippet of the support that i received from them. If you want to turn off completely (not recommended on internet facing/production/sensitive servers) you should edit /etc/selinux/config and change SELINUX=permissive/enforcing to SELINUX=disabled. However, after this the server should be restarted, in order to turn off SElinux completely. Thought it might be useful for people facing the same issue. Thanks everyone for providing support and directions. Thanks Jatin ------------------------------------------------------------------------------ _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
