Re: [Nagios-users] Issues with check_by_ssh

[Eduardo Montes de Oca S.]

Hi friends,

Also, I've been doing some tests with the user "nagios" but I obteined the
same result.

In this case, I tried in the context of the user "Nagios" but it works
through the terminal:

*nagios@nagioserver:~$ /usr/lib/nagios/plugins/check_by_ssh -l nagios -H
172.16.31.2 -C "/usr/lib/nagios/plugins/check_Xencpu" -i
/var/lib/nagios/.ssh/id_rsa*
*“OK:CPU%= 10”*

If I set up my definition of the command:

*#Check Hypervisor*
*define service{*
*use generic-service*
*host_name   ORLANDO*
*service_description Hypervisor CPU*
*check_command
check_by_ssh_xentop!nagios!172.16.31.2!/usr/lib/nagios/plugins/check_Xencpu!/var/lib/nagios/.ssh/id_rsa!
*
*}*

But, the result is not correct:

[image: Imágenes integradas 1]


Regards!

Eduardo


 ** **
>
> Hi list,
>
> ** **
>
> I have some issues with the plugin "check_by_ssh". In particular, there is
> one error:
>
> ** **
>
> When I run a shell script located in another server, from the Nagios
> server using the check_by_ssh plugin, I don't have any errors and I can see
> the result of the script, like this:
>
> ** **
>
> *root@nagioserver# ** /usr/lib/nagios/plugins/check_by_ssh
> -l root -H "ipxenserver" -C /usr/lib/nagios/plugins/check_Xencpu
> “OK:CPU%= 3”*
>
> ** **
>
> But, by any strange reason, when I configure the check for Nagios presents
> the results in its interface, I have the error:
>
> [image: Imágenes integradas 1]
>
> ** **
>
> I have made the ssh authorization keys in both servers (Nagios and Xen), I
> configured the users, permissions,etc. And I can't to do this work it.
>
> ** **
>
> Could someone help me solve this problem
>
> ** **
>
> ** **
>
> This is a part of my definition files:
>
> *#XENServer*
>
> *define command {*
>
> *   command_name check_by_ssh_xentop*
>
> *   command_line /usr/lib/nagios/plugins/check_by_ssh -l
> '$ARG1$' -H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'*
>
> *   }*
>
> *#Hypervisor check*
>
> *define service{*
>
> *use  generic-service*
>
> *host_name  ORLANDO *
>
> *service_description Hypervisor CPU*
>
> *check_command
> check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh!/root/.ssh/id_rsa!
> *
>
> *}*
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> Regards!
>
> ** **
>
> ** **
>
> -- 
>
> *IC.** Eduardo Montes de Oca Sánchez
> *Skype: edrendar
> Gmail: edren...@gmail.com
> MSN: ed_montesde...@hotmail.com
> Movil: 5523419886
>
> https://linuxcounter.net/cert/549074.png
>
>
> --
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> ___
> Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>



-- 
*IC.** Eduardo Montes de Oca Sánchez
*Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886
https://linuxcounter.net/cert/549074.png
<>--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Issues with check_by_ssh

[Morris, Patrick]

It’s highly unlikely that the Nagios user has permissions to use a key owned
by root, and that’s a good thing.

 

From: Eduardo Montes de Oca S. [mailto:edren...@gmail.com] 
Sent: Wednesday, August 15, 2012 10:52 AM
To: nagios-users@lists.sourceforge.net
Subject: [Nagios-users] Issues with check_by_ssh

 

Hi list,

 

I have some issues with the plugin "check_by_ssh". In particular, there is
one error:

 

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

 

  root@nagioserver#
/usr/lib/nagios/plugins/check_by_ssh -l root -H "ipxenserver" -C
/usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”

 

But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:

Imágenes integradas 1

 

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

 

Could someone help me solve this problem

 

 

This is a part of my definition files:

#XENServer

define command {

   command_name check_by_ssh_xentop

   command_line /usr/lib/nagios/plugins/check_by_ssh -l '$ARG1$'
-H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'

   }

#Hypervisor check

define service{

use  generic-service

host_name  ORLANDO 

service_description Hypervisor CPU

check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh
!/root/.ssh/id_rsa!

}

 

 

 

 

Regards!

 

 

-- 

IC. Eduardo Montes de Oca Sánchez
Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886

https://linuxcounter.net/cert/549074.png

<>

smime.p7s
Description: S/MIME cryptographic signature
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Issues with check_by_ssh

[Badri Pillai]

Hi,

 

since the plugin is executed as user nagios, check if the command (including
all params) works as user nagios (or whatever user id it is running as)

 

Problem could be:

1)  Nagios user  can’t read the ssh key file as it resides in root
directory

2)  Or it can’t write the ~nagios/.ssh/known_hosts file

 

PS: In general it is not a good practice to use root ssh key for nagios
commands

   I would suggest to create a ssh key for nagios user and place it in
nagios home or a place where nagios user has access to

 

Regards,

 

bp

 

 

Von: Eduardo Montes de Oca S. [mailto:edren...@gmail.com] 
Gesendet: Mittwoch, 15. August 2012 17:36
An: nagios-users@lists.sourceforge.net
Betreff: [Nagios-users] Issues with check_by_ssh

 

Hi list,

 

I have some issues with the plugin "check_by_ssh". In particular, there is
one error:

 

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

 

  root@nagioserver#
/usr/lib/nagios/plugins/check_by_ssh -l root -H "ipxenserver" -C
/usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”

 

But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:

Imágenes integradas 1

 

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

 

Could someone help me solve this problem

 

 

This is a part of my definition files:

#XENServer

define command {

   command_name check_by_ssh_xentop

   command_line /usr/lib/nagios/plugins/check_by_ssh -l '$ARG1$'
-H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'

   }

#Hypervisor check

define service{

use  generic-service

host_name  ORLANDO 

service_description Hypervisor CPU

check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh
!/root/.ssh/id_rsa!

}

 

 

 

 

Regards!

 

 

-- 

IC. Eduardo Montes de Oca Sánchez
Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886

https://linuxcounter.net/cert/549074.png

<>--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Issues with check_by_ssh

[Eduardo Montes de Oca S.]

Hi list,

I have some issues with the plugin "check_by_ssh". In particular, there is
one error:

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

*root@nagioserver#  /usr/lib/nagios/plugins/check_by_ssh
-l root -H "ipxenserver" -C /usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”*
*
*
But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:
[image: Imágenes integradas 1]

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

Could someone help me solve this problem


This is a part of my definition files:
*
#XENServer
*
*
define command {
   command_name check_by_ssh_xentop
   command_line /usr/lib/nagios/plugins/check_by_ssh -l
'$ARG1$' -H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'
   }
*
*#Hypervisor check*
*define service{*
*use  generic-service*
*host_name  ORLANDO *
*service_description Hypervisor CPU*
*check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh!/root/.ssh/id_rsa!
*
*}*




Regards!


-- 
*IC.** Eduardo Montes de Oca Sánchez
*Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886
https://linuxcounter.net/cert/549074.png
<>--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] AUTO: Chan, Brian is away from the office (returning 16/08/2012)

[Brian Chan]

I am out of the office until 16/08/2012.

I will respond to your message when I return.
If this is a request for support,  click here to open an ITRequest--:>
mailto:itrequ...@shawcor.com
Alternatively, all questions can be directed to the Help Desk at
416-744-5557

Brian Chan


Note: This is an automated response to your message  "Nagios-users Digest,
Vol 75, Issue 8" sent on 08/15/2012 11:04:11.

This is the only notification you will receive while this person is away.


--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Issues with check_by_ssh

[Eduardo Montes de Oca S.]

Hi list,

I have some issues with the plugin "check_by_ssh". In particular, there is
one error:

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

*root@nagioserver#  /usr/lib/nagios/plugins/check_by_ssh
-l root -H "ipxenserver" -C /usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”*
*
*
But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:
[image: Imágenes integradas 1]

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

Could someone help me solve this problem


This is a part of my definition files:
*
#XENServer
*
*
define command {
   command_name check_by_ssh_xentop
   command_line /usr/lib/nagios/plugins/check_by_ssh -l
'$ARG1$' -H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'
   }
*
*#Hypervisor check*
*define service{*
*use  generic-service*
*host_name  ORLANDO *
*service_description Hypervisor CPU*
*check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh!/root/.ssh/id_rsa!
*
*}*




Regards!


-- 
*IC.** Eduardo Montes de Oca Sánchez
*Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886
https://linuxcounter.net/cert/549074.png
<>--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] check_http and self signed certs

[Claudio Kuenzler]

On Wed, Aug 15, 2012 at 5:03 PM,  wrote:

> Using -H url -I IP -s string -f follow and -p where applicable
> Timeout seems to be the issue yet the URLs are loading fine in less than a
> second, (-t is set to 45 seconds as well)
> Thanks
>

Generally you can use -S and -p 443 for SSL-sites. It doesn't matter if the
certificate is verified or self-signed.

./check_http -H www.example.com -p 443 -S
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] check_http and self signed certs

[masoud . tabrizi]

Using -H url -I IP -s string -f follow and -p where applicable
Timeout seems to be the issue yet the URLs are loading fine in less than a 
second, (-t is set to 45 seconds as well)
Thanks  
-Original Message-
From: Claudio Kuenzler 
Date: Wed, 15 Aug 2012 16:29:19 
To: Nagios Users List
Reply-To: Nagios Users List 
Subject: Re: [Nagios-users] check_http and self signed certs

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/


--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Defining passive checks

[Mark Elsen]

> I'm a long-time user of Nagios with active checks. Today I started using
> passive checks with NSCA and I'm having a problem.
>
> The documentation states "A service must be defined in Nagios before you
> can submit passive check results for it".
>
> I defined a config block like this, to define a service for the Oracle
> service that I want to monitor passively - omitting the check_command
> directive.
>
> define service {
>  service_descriptionOracle
>  host_name  oddjob.resnet.bris.ac.uk
>  useresnet-service
> }
>
>
>
> But running nagios -v gives this output:
>
> Error: Service description, host name, or check command is NULL
> Error: Could not register service (config file
> '/etc/nagios/nagios_service.cfg', starting on line 8618)
> Error processing object config files!
>
>
> So what's the approved way of defining a service without specifying a
> command for active checks?
>


 The approved way is that you can't because it remains a >service<
definition, however the command
can be dummy , although it must be defined.
The command definition however is obliviated by  using :

   active_checks_enabled  0
   passive_checks_enabled   1

Sometimes for check_command check-host-alive is being used, this avoids
long outstaniding stale data
for the specific passive service definition.

M.
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] check_http and self signed certs

[Claudio Kuenzler]

This should work, also with self-signed certs. Doing this in my Nagios
config as well.
Whats the check_http command you're launching?
What's the error message?

On Wed, Aug 15, 2012 at 4:15 PM, Masoud Tabrizi wrote:

> All,
> We are using version 4.1.13 for the check_http for checking our URLs.
> it seems like the check_http is not able to get through the self signed
> certs we have installed;
> Are there any options or suggestions to get around this?
> thanks in advance
> Masoud Tabrizi
>
>
>
>
> --
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> ___
> Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] check_http and self signed certs

[Masoud Tabrizi]

All,
We are using version 4.1.13 for the check_http for checking our URLs.
it seems like the check_http is not able to get through the self signed 
certs we have installed;
Are there any options or suggestions to get around this?
thanks in advance
Masoud Tabrizi



--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Defining passive checks

[Jonathan Gazeley]

I'm a long-time user of Nagios with active checks. Today I started using 
passive checks with NSCA and I'm having a problem.

The documentation states "A service must be defined in Nagios before you 
can submit passive check results for it".

I defined a config block like this, to define a service for the Oracle 
service that I want to monitor passively - omitting the check_command 
directive.

define service {
 service_descriptionOracle
 host_name  oddjob.resnet.bris.ac.uk
 useresnet-service
}



But running nagios -v gives this output:

Error: Service description, host name, or check command is NULL
Error: Could not register service (config file 
'/etc/nagios/nagios_service.cfg', starting on line 8618)
Error processing object config files!


So what's the approved way of defining a service without specifying a 
command for active checks?

Thanks,
Jonathan

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null