Re: [Nagios-users] NAGIOS NRPE issue
Finally I managed to run the script with NRPE using root privilegies. The script didn't work. I tried with one of the NRPE samples adding sudo to the command definition: command[check_users]=sudo /usr/lib/nagios/plugins/check_users -w 5 -c 10 I commented the command_prefix option and I commented require_tty in the sudoers file #Defaultsrequiretty I think this last option is needed If you're passing parameters to the script. Thanks, 2009/4/24 Luis Sanchez > Hi, > > I'm trying to run a script in a remote machine using root privileges (this > is just a simple sample, just some output to a file). > > > I run this command from the nagios server machine: > > /usr/lib/nagios/plugins/check_nrpe -H 192.168.168.33 -p 5666 -c > service_restart > > > and I get this error message: > > NRPE: Unable to read output > > > I have added nagios user to the sudoers list (all the privileges to avoid > permission problems). The NRPE daemon is started and listening in the > correct port. > > The NRPE log in the monitorized machine is (no reference to the error): > > Apr 24 15:06:49 outrun nrpe[26716]: INFO: SSL/TLS initialized. All network > traffic will be encrypted. > Apr 24 15:06:49 outrun nrpe[26717]: Starting up daemon > Apr 24 15:06:49 outrun nrpe[26717]: Warning: Daemon is configured to accept > command arguments from clients! > Apr 24 15:06:49 outrun nrpe[26717]: Listening for connections on port 5666 > Apr 24 15:06:49 outrun nrpe[26717]: Allowing connections from: > 192.168.168.20,127.0.0.1 > > > If I change the nrpe configuration and comment command_prefix option. It > works. > > > I'm using centos 5.2 in the monitorized machine and the monitoring machine. > The NRPE version is 2.12 and nagios server version is 3.0.6 > > > This is just a test to check how to execute commands being root. In fact > the real aim is use event handlers to autoheal the monitorized machine by > restarting a service if it gets down. > > Any idea on how to solve the problem? > Thank you very much for your help > > BTW hereunder you can find more configuration data. > > > MONITORIZED REMOTE MACHINE /etc/sudoers > - > > nagios ALL=(ALL) NOPASSWD: ALL > > > > MONITORIZED REMOTE MACHINE NRPE CONFIGURATION > --- > log_facility=daemon > pid_file=/var/run/nrpe.pid > server_port=5666 > nrpe_user=nagios > nrpe_group=nagios > allowed_hosts=192.168.168.20,127.0.0.1 > > dont_blame_nrpe=1 > command_prefix=/usr/bin/sudo > debug=1 > command_timeout=60 > connection_timeout=300 > command[service_restart]=/usr/lib/nagios/plugins/service_restart > > > MONITORIZED REMOTE MACHINE SCRIPT IN > /usr/lib/nagios/plugins/service_restart > > #!/bin/sh > # > # Event handler script for restarting the web server on the local machine > # > # Note: This script will only restart the web server if the service is > # retried 3 times (in a "soft" state) or if the web service somehow > # manages to fall into a "hard" error state. > # > > whoami >> /tmp/asd.txt > echo -n "hola" >> /tmp/asd.txt > exit 0 > > -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Host shows down due to ping block on firewall
Hi James, Thanks it is working after changing as check_ssh. Rgds, Mohandas Kudva K jmose...@corp.xanadoo.com 04/23/2009 06:09 PM To mohanda...@tcs.com cc nagios-users@lists.sourceforge.net Subject Re: [Nagios-users] Host shows down due to ping block on firewall You can also use check_ssh as your check_command argument in your hosts file. James Moseley wrote: Hi All, I have started to do monitoring of some hosts which are behind the firewall and PING (ICMP) is block on firewall. so I have exculded ping service in localhosts.cfg file and as well as check-host-alive option also from host template but still Nagios web interface shows host as "DOWN" RED Color in host status web interface. I think this is happening due to PING block on firewall. However ssh and nrpe port are opened on firewall to do monitoring of host resources. other services are showing OK in green color associate to this host. Please let me know how can we enforce nagios to shows that HOST is UP in host status web interface. ForwardSourceID:NT0F5E =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services
Hi All, I have created two contacts/contacts groups and associated these two groups in host template so notification will go to concern team only for referenced servers. I want to know how can we give nagios web interface access/permission to specific contacts/groups so that they can see their referenced servers only not all ? Let me elaborate requirement -: "A" user who is owner of ABC server can see status of ABC host only in nagios web interface not all monitored hosts. if I am not wrong we will have to make changes in cgi.cfg, but not sure what need to change. =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] HTTP server authentication requirements for accessing this CGI.
Hi Shahid & Ankush, Thanks for your replies. But, I guess, these directives are not meant for Nagios on Ubuntu (if one follows the Quickstart Guide). For Ubuntu, the path is "/usr/local/nagios/share". Moreover, I do not have a 'nagios' directory under "/usr/lib/". *New observation*: If the cgi.cfg file is edited to enable 'default_user=nagiosadmin', then I can access the Process Info screen, etc. However, I if try stopping or restarting the nagios service from within the Process Info screen, it errors out stating this: =-=-=-= Error: Could not open command file '/usr/local/nagios/var/rw/nagios.cmd' for update! The permissions on the external command file and/or directory may be incorrect. Read the FAQs on how to setup proper permissions. An error occured while attempting to commit your command for processing. *Return from whence you came* =-=-=-= So, I think it has to do something with authentication. Thanks, Jim =-=-=-=-=-=-= On Sun, Apr 26, 2009 at 8:28 PM, shadih rahman wrote: > Jimmy, > Try the following and this should take care of it. Thanks > > > ScriptAlias /nagios/cgi-bin "/usr/lib/nagios/cgi" > > > Alias /nagios "/usr/share/nagios" > > > # SSLRequireSSL > Options None > AllowOverride None > Order allow,deny > Allow from all > # Order deny,allow > # Deny from all > # Allow from 127.0.0.1 > AuthName "Nagios Access" > AuthType Basic > AuthUserFile /etc/nagios/htpasswd.users > Require valid-user > > > > > On Sun, Apr 26, 2009 at 10:52 AM, Jimmyboy wrote: > >> Hi Ankush, >> >> This is already done, but still the issue exists. >> The only difference is the username nagiosadmin as in my case. >> >> Thanks, >> Jim >> >> On Fri, Apr 24, 2009 at 4:11 PM, ankush grover wrote: >> >>> Hi Jimmy, >>> >>> You need to enable authentication in cgi.cfg. >>> >>> use_authentication=1 >>> >>> authorized_for_all_host_commands=admin >>> authorized_for_all_hosts=admin >>> authorized_for_all_service_commands=admin >>> authorized_for_all_services=admin >>> authorized_for_configuration_information=admin >>> authorized_for_system_commands=admin >>> authorized_for_system_information=admin >>> >>> >>> Something like this in nagios.conf file for apache (On my linux box >>> that is centos 5.x it is /etc/httpd/conf.d/nagios.conf) >>> >>> >>> # SSLRequireSSL >>> Options ExecCGI >>> AllowOverride None >>> Order allow,deny >>> Allow from all >>> # Order deny,allow >>> # Deny from all >>> # Allow from 127.0.0.1 >>> AuthName "Nagios Access" >>> AuthType Basic >>> AuthUserFile /etc/nagios/htpasswd.users >>> Require valid-user >>> >>> >>> Alias /nagios "/usr/share/nagios" >>> >>> >>> # SSLRequireSSL >>> Options None >>> AllowOverride None >>> Order allow,deny >>> Allow from all >>> # Order deny,allow >>> # Deny from all >>> # Allow from 127.0.0.1 >>> AuthName "Nagios Access" >>> AuthType Basic >>> AuthUserFile /etc/nagios/htpasswd.users >>> Require valid-user >>> >>> >>> >>> Now use htpasswd command to generate htpasswd.users file with user admin. >>> >>> htpasswd -c /etc/nagios/htpasswd.users admin >>> >>> >>> Regards >>> >>> Ankush >>> >>> >>> On Fri, Apr 24, 2009 at 3:34 PM, Jimmyboy >>> wrote: >>> > Hi All, >>> > >>> > I have installed Apache2.2.9 using the source file >>> > 'Apache2_2.2.9.orig.tar.gz'. >>> > Nagios 3.0.6 is also installed on Ubuntu Intrepid OS using the >>> Quickstart >>> > Guide. I am able to open http://localhost/nagios. >>> > >>> > However, certain entities on the left pane, such as 'Process Info', >>> 'Network >>> > Outages', etc are not getting opened. They error out with the following >>> > message. >>> > >>> > "It appears as though you do not have permission to view information >>> for any >>> > of the hosts you requested... If you believe this is an error, check >>> the >>> > HTTP server authentication requirements for accessing this CGI and >>> check the >>> > authorization options in your CGI configuration file." >>> > >>> > I followed >>> http://www.onlamp.com/pub/a/onlamp/2002/09/26/nagios.html?page=3. >>> > Configuration of httpd.conf says ScriptAlias /nagios/cgi-bin/ >>> > /usr/local/nagios/sbin/. But, I do not have a directory 'cgi-bin' under >>> > nagios directory. Morever, I do not see the 'sites-available' & >>> > other directories named similarly under my /usr/local/apache2/conf >>> > directory. Will that be a problem? >>> > >>> > But, still, I am at same stage. Anyone, any idea, how to go about? >>> > >>> > Thanks, >>> > Jim >>> > >>> -- >>> > Crystal Reports - New Free Runtime and 30 Day Trial >>> > Check out the new simplified licensign option that enables unlimited >>> > royalty-free distribution of the report engine for externally >>> facing >>> > server and web deployment. >>> > http://p.sf.net/sfu/businessobjects >>> > ___ >>> > Nagios-users mailing list >>> > Nagios-users@lists.sourcef
Re: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services
Von: mohanda...@tcs.com [mailto:mohanda...@tcs.com] Gesendet: Montag, 27. April 2009 09:27 An: nagios-users@lists.sourceforge.net Betreff: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services Hi All, I have created two contacts/contacts groups and associated these two groups in host template so notification will go to concern team only for referenced servers. I want to know how can we give nagios web interface access/permission to specific contacts/groups so that they can see their referenced servers only not all ? Let me elaborate requirement -: "A" user who is owner of ABC server can see status of ABC host only in nagios web interface not all monitored hosts. if I am not wrong we will have to make changes in cgi.cfg, but not sure what need to change. =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you Hi, Which nagios version do you use? For 2.6 for view access you have to edit authorized_for_all_services authorized_for_all_hosts in your cgi.cfg # GLOBAL HOST/SERVICE VIEW ACCESS # These two options are comma-delimited lists of all usernames that # can view information for all hosts and services that are being # monitored. By default, users can only view information # for hosts or services that they are contacts for (unless you # you choose to not use authorization). You may use an asterisk (*) # to authorize any user who has authenticated to the web server. for command access(e.g. disable active check,...) edit authorized_for_all_service_commands authorized_for_all_host_commands # GLOBAL HOST/SERVICE COMMAND ACCESS # These two options are comma-delimited lists of all usernames that # can issue host or service related commands via the command # CGI (cmd.cgi) for all hosts and services that are being monitored. # By default, users can only issue commands for hosts or services # that they are contacts for (unless you you choose to not use # authorization). You may use an asterisk (*) to authorize any # user who has authenticated to the web server. OOe. Gesundheits- und Spitals-AG Techcenter, Hafenstrasse 47-51, 4020 Linz DVR 2107870, ATU 51928204, Firmenbuchgericht: Landesgericht Linz, FN 210146 p -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Protocol
TCP. UDP would be too unreliable for this type of application, and there also is too much data going over the line to make UDP a viable option. Christopher McAtackney wrote: > Hi everyone, > > I was just wondering; what protocol (TCP, UDP?) does Nagios use to > communicate with remote hosts when using the check_nrpe plugin? Or > just generally? > > Cheers, > Chris > -- Kevin Keane Owner The NetTech Find the Uncommon: Expert Solutions for a Network You Never Have to Think About Office: 866-642-7116 http://www.4nettech.com This e-mail and attachments, if any, may contain confidential and/or proprietary information. Please be advised that the unauthorized use or disclosure of the information is strictly prohibited. The information herein is intended only for use by the intended recipient(s) named above. If you have received this transmission in error, please notify the sender immediately and permanently delete the e-mail and any copies, printouts or attachments thereof. -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Protocol
Hi everyone, I was just wondering; what protocol (TCP, UDP?) does Nagios use to communicate with remote hosts when using the check_nrpe plugin? Or just generally? Cheers, Chris -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] C++ Plugins
On 2009-04-24 12:05, Christopher McAtackney wrote: 2009/4/21 Michael Medin : Hello, All the "built in" plugins are avalible as source so it should be pretty simple to figure out. The idea is anyways that you fill the buffer passed to the function from the "core". (this will BTW change in the next major release) Thanks for the explanation Michael - this should be very helpful. Ahh... Sorry, when you mentioned C++ I assumed you were writing extensions. External scripts can be used "as normal programs" without any specific NSClient++ code at all. Then just follow the regular "writing extensions" guideline for nagios and you should be fine. The difference between external script and extensions are that extensions are running "inside" NSClient and thus can do "more" things but all in all it is not that much difference so there is no real benefit (apart from maybe the forking and such). // Michael Medin I'm curious though, what are the guidelines around writing a C++ program to be executed as an external script? I've written a simple program for checking if the driver name supplied as an arg is loaded in the system, but I'm not using any of the above "glue" to do so, I just make the checks and printf the output and return the result code. Is this sufficient? Here's the code; #include #include #include #include #include #define ARRAY_SIZE 1024 int main(int argc, char* argv[]) { LPVOID drivers[ARRAY_SIZE]; DWORD cbNeeded; int cDrivers, i; if(EnumDeviceDrivers(drivers, sizeof(drivers), &cbNeeded) && cbNeeded < sizeof(drivers)) { TCHAR szDriver[ARRAY_SIZE]; cDrivers = cbNeeded / sizeof(drivers[0]);; for (i=0; i < cDrivers; i++ ) { if(GetDeviceDriverBaseName(drivers[i], szDriver, sizeof(szDriver) / sizeof(szDriver[0]))) { if(argv[1] != NULL && _tcscmp ( szDriver, _T(argv[1])) == 0) { printf("Driver is loaded"); return 0; // OK } } } printf("Driver is not loaded!"); return 2; // CRITICAL } else { printf("EnumDeviceDrivers failed; array size needed is %d\n", cbNeeded / sizeof(LPVOID)); return 3; // UNKNOWN } } It's based off the code here; http://msdn.microsoft.com/en-us/library/ms682619(VS.85).aspx I just drop the compiled program into "ExternalScripts" and add this to nsc.ini; [External Scripts] check_driver = ExternalScripts\Check_Driver.exe Is this an appropriate way to carry-out this check? It works perfectly fine so far, but I'm just curious to see if this is a proper way of doing things? Cheers, Chris -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] hint on service dependency configuration
Hi list, I need a little input on a configuration problem. I've got a list of hosts, which are running NRPE to check local services. So, if the nrpe daemon on one of these hosts stops working, I get alarms for every configured nrpe-check. Now I thought that the service dependency would be the configuration of my choice to suppress multiple alarms. But I'm a bit confused how to configure this correctly. I'm checking the nrpe service itself on these hosts, and want to suppress alarms for the other nrpe-based services if the nrpe check fails. Is there a way to configure this in an optimized way, without having one servicedependency block for each host and each nrpe check ? As far as I understand servicedependency config, there can be multiple hosts as dependent, but only one dependent service with one depending host and service, which would be a pain to configure with 130 hosts :) I would imagine doing something like that (for example): # Suppress notifications for nrpe-based services if nrpe check itself fails define servicedependency { host_name * service_description NRPE dependent_host_name $self dependent_service_description DISKS,SWAP,USERS execution_failure_criteria w,u,c,p notification_failure_criteria o,w,u,c,p } Does anyone have an idea how to create something like that? Le deagh dhùraghd, Frank Altpeter There is no way to happiness. Happiness is the way. -- Buddha -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Customising colours
Date: Mon, 20 Apr 2009 11:17:49 +0200 Subject: Re: [Nagios-users] Customising colours From: ctem...@merethis.com To: nzamo...@hotmail.com CC: nagios-users@lists.sourceforge.net 2009/4/20 David Willson At our lab we currently have the Nagios Service Overview page displayed on a large screen for all users to see, this way they can tell when a particular box is down. My boss is wondering if there is some way to adjust the colour scheme so that when something becomes 'Acknowledged' it displays as blue, instead of red. So far I've changed the values for items such as .statusHOSTDOWNACK background-color to #33 in the status.css file, however it only shows that blue colour on certain windows, and not the Service Overview window which is our main one. Is what I'm trying to do possible? I only have a passing knowledge of css and html, so if it requires an extensive re-write it's probably not going to be practical. Hi, May be you can try another theme for Nagios: http://www.nagiosexchange.org/cgi-bin/page.cgi?g=Detailed%2F1723.html;d=1 http://www.nagiosexchange.org/cgi-bin/page.cgi?g=Detailed%2F2969.html;d=1 http://www.nagiosexchange.org/cgi-bin/page.cgi?g=Detailed%2F2737.html;d=1 Regards -- Cédric Temple | Chef de Projet -- Unfortunately those theme's have the same problem, and my feeble attempts at editing them only solve half the problem. In the HostGroup Overview page, it still highlights the Down but Acknowledged host as red, when I edit the status.css file so that any line that references something as being acknowledged shows blue, it only shows that blue on particular pages. Interestingly, on the Host Detail page, where it lists every host in a large table, the hostname part of the line is still red, but the rest of the info (last check, duration, info etc) is highlighted in blue. And it's the hostname part of the display in the Hostgroup overview page that I'm trying to get blue. Would what I'm asking for require a total rewrite of how the acknowledgments are referenced in the web interface? From: nzamo...@hotmail.com To: nagios-users@lists.sourceforge.net Date: Tue, 21 Apr 2009 14:00:08 +1200 Subject: Re: [Nagios-users] Customising colours Just following up on this, is what I'm asking for possible, or would it require what would amount to a total rewrite of nagios itself? _ Earning enough? Find out with SEEK Salary Survey http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsalarysurvey%2Emsn%2Eseek%2Eco%2Enz%2F%3Ftracking%3Dsk%3Atl%3Asknzsal%3Amsnnz%3A0%3Ahottag%3Aearn%5Fenough&_t=757263783&_r=Seek_NZ_tagline&_m=EXT-- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Voice Alerts
Hi Group, Has anybody successfully got voice alerts working on Nagios whether it be through a hosted company or other. I have my mail alerts working fine, they escalate to SMS and if the fault is still there I would like it to call up-to 3 different mobiles and play an alert through another escalation step, I'm not bothered if its a pre recorded message or one that is converted and synthesised. If need be I can use our Asterisk box to make the outgoing calls, but at the minute I can not find any solution via Google, maybe I'm searching for the wrong phrase. Once I have this working then I have a complete system up and running that my bosses are happy with. Thanks and looking forward to you replies. Craig -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services
On Apr 27, 2009, at 3:52 AM, Ortner, Gerald wrote: >> Von: mohanda...@tcs.com [mailto:mohanda...@tcs.com] >> Gesendet: Montag, 27. April 2009 09:27 >> An: nagios-users@lists.sourceforge.net >> Betreff: [Nagios-users] Nagios Web interface show hosts/services >> status to specific/contacts user only, not all hosts/services >> >> >> Hi All, >> >> I have created two contacts/contacts groups and associated these >> two groups in host template so notification will go to concern team >> only for referenced servers. >> >> I want to know how can we give nagios web interface access/ >> permission to specific contacts/groups so that they can see their >> referenced servers only not all ? > >> > for view access you have to edit > authorized_for_all_services > authorized_for_all_hosts > > in your cgi.cfg {more cgi.cfg refrences removed) > Nothing in cgi.cfg *restricts* what can be seen. The parameters here only grant full access to particular types of objects. The OP needs to look at the docs for enabling authorization for the CGI's. That will allow him/her to restrict based on contact settings. -- Marc -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Voice Alerts
I had a setup of phone calls via asterisk for alerts and it worked fine, i would suggest you try this : http://www.nagiosexchange.org/cgi-bin/page.cgi?g=Detailed%2F2234.html;d=1 On Monday 27 April 2009 12:29:52 cr...@hooters-uk.com wrote: > Hi Group, Has anybody successfully got voice alerts working on Nagios > whether it be through a hosted company or other. > > I have my mail alerts working fine, they escalate to SMS and if the fault > is still there I would like it to call up-to 3 different mobiles and play > an alert through another escalation step, I'm not bothered if its a pre > recorded message or one that is converted and synthesised. > > If need be I can use our Asterisk box to make the outgoing calls, but at > the minute I can not find any solution via Google, maybe I'm searching for > the wrong phrase. > > Once I have this working then I have a complete system up and running that > my bosses are happy with. > > Thanks and looking forward to you replies. > > Craig > > > --- >--- Crystal Reports - New Free Runtime and 30 Day Trial > Check out the new simplified licensign option that enables unlimited > royalty-free distribution of the report engine for externally facing > server and web deployment. > http://p.sf.net/sfu/businessobjects > ___ > Nagios-users mailing list > Nagios-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nagios-users > > ::: Please include Nagios version, plugin version (-v) and OS when > ::: reporting any issue. Messages without supporting info will risk being > ::: sent to /dev/null -- Assaf Flatto SSP Ops Team Linux System Administrator 169 Euston Road, London, NW1 2AE Along with a few colleagues I am doing The Three Peaks Challenge again this year to raise money for The Railway Children. Please sponsor me by making a donation online, simply click on the link below and give via your switch/credit card. Thank you. http://www.justgiving.com/londonnorththreepeaks IMPORTANT . this email and the information in it may be confidential, legally privileged and/or protected by law. It is intended solely for the use of the person to whom it is addressed. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Please also delete all copies of this email and any attachments from your system. We cannot guarantee the security or confidentiality of email communications. We do not accept any liability for losses or damages that you may suffer as a result of your receipt of this email including but not limited to computer service or system failure, access delays or interruption, data non-delivery or mis-delivery, computer viruses or other harmful components. Copyright in this email and any attachments belong to Select Service Partner UK Limited. Should you communicate with anyone at Select Service Partner UK Limited by email, you consent to us monitoring and reading any such correspondence. Nothing in this email shall be taken or read as suggesting, proposing or relating to any agreement concerted practice or other practice that could infringe UK or EC competition legislation. Select Service Partner UK Limited is a company registered in England and Wales (company number 05687183) whose registered office is at 1 The Heights, Brooklands, Weybridge. Surrey. KT13 0NY -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services
Hi Marc, You are right. we can not restrict to look all hosts/services in Nagios web interface by modifying cgi.cfg file. can you please share any related document or link where I can check for this requirement ? Marc Powell 04/27/2009 05:39 PM To Nagios Users cc Subject Re: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services On Apr 27, 2009, at 3:52 AM, Ortner, Gerald wrote: >> Von: mohanda...@tcs.com [mailto:mohanda...@tcs.com] >> Gesendet: Montag, 27. April 2009 09:27 >> An: nagios-users@lists.sourceforge.net >> Betreff: [Nagios-users] Nagios Web interface show hosts/services >> status to specific/contacts user only, not all hosts/services >> >> >> Hi All, >> >> I have created two contacts/contacts groups and associated these >> two groups in host template so notification will go to concern team >> only for referenced servers. >> >> I want to know how can we give nagios web interface access/ >> permission to specific contacts/groups so that they can see their >> referenced servers only not all ? > >> > for view access you have to edit > authorized_for_all_services > authorized_for_all_hosts > > in your cgi.cfg {more cgi.cfg refrences removed) > Nothing in cgi.cfg *restricts* what can be seen. The parameters here only grant full access to particular types of objects. The OP needs to look at the docs for enabling authorization for the CGI's. That will allow him/her to restrict based on contact settings. -- Marc -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null ForwardSourceID:NT2406 =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] hint on service dependency configuration
On Monday 27 April 2009 11:05:39 Frank Altpeter wrote: > Hi list, > > I need a little input on a configuration problem. I've got a list of > hosts, which are running NRPE to check local services. So, if the nrpe > daemon on one of these hosts stops working, I get alarms for every > configured nrpe-check. Now I thought that the service dependency would > be the configuration of my choice to suppress multiple alarms. But I'm > a bit confused how to configure this correctly. > I'm checking the nrpe service itself on these hosts, and want to > suppress alarms for the other nrpe-based services if the nrpe check > fails. Is there a way to configure this in an optimized way, without > having one servicedependency block for each host and each nrpe check ? > As far as I understand servicedependency config, there can be multiple > hosts as dependent, but only one dependent service with one depending > host and service, which would be a pain to configure with 130 hosts :) > > I would imagine doing something like that (for example): > > # Suppress notifications for nrpe-based services if nrpe check itself fails > define servicedependency { > host_name * > service_description NRPE > dependent_host_name $self > dependent_service_description DISKS,SWAP,USERS > execution_failure_criteria w,u,c,p > notification_failure_criteria o,w,u,c,p > } What you want is like what you put in the example above but you want to change it to define servicedependency { host_name * service_description NRPE dependent_host_name * dependent_service_description DISKS,SWAP,USERS execution_failure_criteria w,u,c,p notification_failure_criteria o,w,u,c,p } also you may want to change the notification criteria to a more suitable like c,w,u ( that means in the case of the NRPE being critical , unknown, or warning , you will not get a n alert) . you can also do it with hostgroups define servicedependency { hostgroups_namegroup1,group2 service_description NRPE dependent_hostgroups_name group1,group2 dependent_service_description DISKS,SWAP,USERS execution_failure_criteria w,u,c notification_failure_criteria o,w,u,c } Assaf IMPORTANT . this email and the information in it may be confidential, legally privileged and/or protected by law. It is intended solely for the use of the person to whom it is addressed. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Please also delete all copies of this email and any attachments from your system. We cannot guarantee the security or confidentiality of email communications. We do not accept any liability for losses or damages that you may suffer as a result of your receipt of this email including but not limited to computer service or system failure, access delays or interruption, data non-delivery or mis-delivery, computer viruses or other harmful components. Copyright in this email and any attachments belong to Select Service Partner UK Limited. Should you communicate with anyone at Select Service Partner UK Limited by email, you consent to us monitoring and reading any such correspondence. Nothing in this email shall be taken or read as suggesting, proposing or relating to any agreement concerted practice or other practice that could infringe UK or EC competition legislation. Select Service Partner UK Limited is a company registered in England and Wales (company number 05687183) whose registered office is at 1 The Heights, Brooklands, Weybridge. Surrey. KT13 0NY -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services
Hi All, It's working nowactually I have wrongly mentioned group name in conatcts.cfg file, same I have rectified and now defined contact is able to view his/her associated/referenced host/services only not all host/resources. Thanks...:) Mohandas K/TVM/TCS 04/27/2009 05:54 PM To Marc Powell cc Nagios Users Subject Re: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services Hi Marc, You are right. we can not restrict to look all hosts/services in Nagios web interface by modifying cgi.cfg file. can you please share any related document or link where I can check for this requirement ? Marc Powell 04/27/2009 05:39 PM To Nagios Users cc Subject Re: [Nagios-users] Nagios Web interface show hosts/services status to specific/contacts user only, not all hosts/services On Apr 27, 2009, at 3:52 AM, Ortner, Gerald wrote: >> Von: mohanda...@tcs.com [mailto:mohanda...@tcs.com] >> Gesendet: Montag, 27. April 2009 09:27 >> An: nagios-users@lists.sourceforge.net >> Betreff: [Nagios-users] Nagios Web interface show hosts/services >> status to specific/contacts user only, not all hosts/services >> >> >> Hi All, >> >> I have created two contacts/contacts groups and associated these >> two groups in host template so notification will go to concern team >> only for referenced servers. >> >> I want to know how can we give nagios web interface access/ >> permission to specific contacts/groups so that they can see their >> referenced servers only not all ? > >> > for view access you have to edit > authorized_for_all_services > authorized_for_all_hosts > > in your cgi.cfg {more cgi.cfg refrences removed) > Nothing in cgi.cfg *restricts* what can be seen. The parameters here only grant full access to particular types of objects. The OP needs to look at the docs for enabling authorization for the CGI's. That will allow him/her to restrict based on contact settings. -- Marc -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null ForwardSourceID:NT2406 ForwardSourceID:NT2412 =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] monitoring temp - cheap and simple
Hi list, I'm very new to nagios and I hope someone may give me an advice. I'm searching for a cheap solution to monitoring the temperatur of a room using an ip-sensor. Of course, it should be usable with existing plugin of nagios. Cheap is good enough 'cause it's just to educate myself. Cheers, Tobias -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] monitoring temp - cheap and simple
Hi list, pcmeasure.com are the most affordable sensors i've found and they have a open source driver. Olivier http://www.nagios-fr.org Tobias Exner a écrit : > Hi list, > > I'm very new to nagios and I hope someone may give me an advice. > > I'm searching for a cheap solution to monitoring the temperatur of a > room using an ip-sensor. > Of course, it should be usable with existing plugin of nagios. > > Cheap is good enough 'cause it's just to educate myself. > > > Cheers, > > Tobias > > > -- > Crystal Reports - New Free Runtime and 30 Day Trial > Check out the new simplified licensign option that enables unlimited > royalty-free distribution of the report engine for externally facing > server and web deployment. > http://p.sf.net/sfu/businessobjects > ___ > Nagios-users mailing list > Nagios-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nagios-users > ::: Please include Nagios version, plugin version (-v) and OS when > reporting any issue. > ::: Messages without supporting info will risk being sent to /dev/null > > -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Binding Nagios to a single domain
Hello, I have installed Nagios on a machine which has more than one domain; all is working fine, but I reach Nagios login form from all domains hosted in the machine. I'd like to set Nagios in the way that it will be accessible only via one specified domain (for example testingtools.mydomain.com/nagios) and absolutely not from others; it is possibile? If yes, how I can make this? Another question: it is possible to switch Nagios first page (immediately after the login) to a specified one (for example the tactical view)? Thank you in advance! Best regards! -- Caselle da 1GB, trasmetti allegati fino a 3GB e in piu' IMAP, POP3 e SMTP autenticato? GRATIS solo con Email.it: http://www.email.it/f Sponsor: Biocosmo.net - Vuoi guadagni extra promuovendo prodotti ecologici per uso privato e per aziende? Noi vogliamo trasformare questa crisi mondiale in una opportunità per tutti. Diventa ECO-ista! Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=8974&d=20090427 -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] NRPE without xinetd
Thanks a lot, I gonna try it right now. Sergio Ariel de la Campa Saiz Administrador Red UH Marc Powell wrote: > On Apr 24, 2009, at 2:51 PM, Sergio Ariel wrote: > >> I need to install NRPE in a server that do not have installed >> xinetd. I >> can't install xinetd neither. Please help me to configure NRPE >> installation in order to use it without xinetd. > > move nrpe and nrpe.cfg somewhere appropriate on your system. > edit nrpe.cfg > - set/review all config variables. > be sure to set server port, server address, user/group and > allowed_hosts. Server port can likely be left at the default unless > you have specific requirements. > - start nrpe as a standalone daemon - /path/to/nrpe -d /path/to/ > nrpe.cfg > - > - Profit! > > -- > Marc > > > -- > Crystal Reports - New Free Runtime and 30 Day Trial > Check out the new simplified licensign option that enables unlimited > royalty-free distribution of the report engine for externally facing > server and web deployment. > http://p.sf.net/sfu/businessobjects > ___ > Nagios-users mailing list > Nagios-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nagios-users > ::: Please include Nagios version, plugin version (-v) and OS when reporting > any issue. > ::: Messages without supporting info will risk being sent to /dev/null > -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] What are the reasons to use NRPE?
Hi all I just wonder what the reasons are to use NRPE in favour of checks over ssh with ssh keys. To me, NRPE seems just one more piece of software that may potentioally be broken and more hassle with firewalls. Why do people still use it when ssh checks are just as simple and (in my opinion) far more secure? Best regards roy -- Roy Sigurd Karlsbakk (+47) 97542685 / 98013356 r...@karlsbakk.net -- I all pedagogikk er det essensielt at pensum presenteres intelligibelt. Det er et elementært imperativ for alle pedagoger å unngå eksessiv anvendelse av idiomer med fremmed opprinnelse. I de fleste tilfeller eksisterer adekvate og relevante synonymer på norsk. -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Antwort: Binding Nagios to a single domain
vism...@email.it schrieb am 27.04.2009 15:28:22: > I have installed Nagios on a machine which has more than one domain; all is > working fine, but I reach Nagios login form from all domains hosted in the > machine. > > I'd like to set Nagios in the way that it will be accessible only via one > specified domain (for example testingtools.mydomain.com/nagios) and > absolutely not from others; it is possibile? > If yes, how I can make this? Configure your webserver accordingly. It's hard to guess how you set it up to serve multiple domains, but the mechanisms apply when you want to configure the access to nagios. Most likely you have a /etc/httpd/conf.d/nagios.conf which defines scripts and aliases. Those are apache-wide defined and not bound to a special virtualhost. Move the definitions of nagios.conf inside the virtualhost definition of your choice and nagios will only be served there. > Another question: it is possible to switch Nagios first page (immediately > after the login) to a specified one (for example the tactical view)? Yes, use the source luke and edit the index.html. Regards Sascha GFKL Financial Services AG Vorstand: Dr. Peter Jänsch (Vors.), Jürgen Baltes, Dr. Tom Haverkamp Vorsitzender des Aufsichtsrats: Dr. Georg F. Thoma Sitz: Limbecker Platz 1, 45127 Essen, Amtsgericht Essen, HRB 13522 -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Antwort: What are the reasons to use NRPE?
Roy Sigurd Karlsbakk schrieb am 27.04.2009 16:03:01: > I just wonder what the reasons are to use NRPE in favour of checks > over ssh with ssh keys. To me, NRPE seems just one more piece of > software that may potentioally be broken and more hassle with > firewalls. Why do people still use it when ssh checks are just as > simple and (in my opinion) far more secure? Because ssh has way more overhead especially because of the way how the ssl connection is handled. Therefor a check_by_ssh check takes longer then a check_nrpe check. This _is_ significant if you are running 2k checks per minute like me and some other people. Lots of check_by_ssh checks slow down the machine by a big degree and check latency will skyrocket. Regards Sascha GFKL Financial Services AG Vorstand: Dr. Peter Jänsch (Vors.), Jürgen Baltes, Dr. Tom Haverkamp Vorsitzender des Aufsichtsrats: Dr. Georg F. Thoma Sitz: Limbecker Platz 1, 45127 Essen, Amtsgericht Essen, HRB 13522 -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] hint on service dependency configuration
Hi, 2009/4/27 Assaf Flatto : > What you want is like what you put in the example above but you want to > change it to > > define servicedependency { > host_name * > service_description NRPE > dependent_host_name * > dependent_service_description DISKS,SWAP,USERS > execution_failure_criteria w,u,c,p > notification_failure_criteria o,w,u,c,p > } Hmmm, you're right, this is indeed working. Didn't think so, because my first tests failed, but after all, it looks like there were some other configuration mistakes in it. However, given the above example, wouldn't that mean, that - if I define two hosts named web01 and web02 for example - that if the nrpe check on web01 fails, it would also suppress DISKS notifications of web02 ? I'm not sure how this is handled internally by nagios to prevent such scenarios ... and I think it wouldn't be good if a full disk on one of the servers wouldn't generate notifications if another host's nrpe daemon check is suppressing this. -- Le deagh dhùraghd, Frank Altpeter There is no way to happiness. Happiness is the way. -- Buddha -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Binding Nagios to a single domain
On Apr 27, 2009, at 8:28 AM, vism...@email.it wrote: > Hello, > > I have installed Nagios on a machine which has more than one domain; > all is > working fine, but I reach Nagios login form from all domains hosted > in the > machine. > > I'd like to set Nagios in the way that it will be accessible only > via one > specified domain (for example testingtools.mydomain.com/nagios) and > absolutely not from others; it is possibile? > If yes, how I can make this? If you're using Apache, create all the domains/sites as name based virtualhosts. http://httpd.apache.org/docs/2.0/vhosts/name-based.html. If you're using some other web server software, consult it's documentation to see if it has similar capability (it should). > Another question: it is possible to switch Nagios first page > (immediately > after the login) to a specified one (for example the tactical view)? Yes. Obtain the URL for the page you want displayed (by right clicking on the link to it and 'copy link location' for example). Edit share/ index.php (or is it html/index.php these days?), look for 'main.php' and change it to the URL you want displayed instead. -- Marc -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Binding Nagios to a single domain
vism...@email.it wrote: > Hello, > > I have installed Nagios on a machine which has more than one domain; all is > working fine, but I reach Nagios login form from all domains hosted in the > machine. > > I'd like to set Nagios in the way that it will be accessible only via one > specified domain (for example testingtools.mydomain.com/nagios) and > absolutely not from others; it is possibile? > If yes, how I can make this? > > Another question: it is possible to switch Nagios first page (immediately > after the login) to a specified one (for example the tactical view)? > > Thank you in advance! > > Best regards! > > Assuming you are using Apache 2.x (and i understand you question correctly): Looks like you have Nagios setup under the "_defaut_" vhost and you need it setup as a separate Apache virtual host with its own authentication setup. See http://httpd.apache.org/docs/2.0/vhosts/ for information on how to accomplish this. Dedicate the Nagios installation to a specific virtual host with its own auth and you should be off to the races. As far as the default view is concerned, I am stumped. You should be able to use Apache mod_rewrite to accomplish if Nagios doesn't do it natively. hope this helps. regards, _Terry -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] What are the reasons to use NRPE?
> -Original Message- > From: Roy Sigurd Karlsbakk [mailto:r...@karlsbakk.net] > Sent: Monday, April 27, 2009 10:03 AM > To: nagios-users@lists.sourceforge.net > Subject: [Nagios-users] What are the reasons to use NRPE? > > Hi all > > I just wonder what the reasons are to use NRPE in favour of checks > over ssh with ssh keys. To me, NRPE seems just one more piece of > software that may potentioally be broken and more hassle with > firewalls. Why do people still use it when ssh checks are just as > simple and (in my opinion) far more secure? > > Best regards > > roy > -- > Roy Sigurd Karlsbakk > (+47) 97542685 / 98013356 > r...@karlsbakk.net > -- Hi there are many many, different reasons one may wish to utilize nrpe over ssh - many sites do not even run ssh, or if they do, may not allow privileges needed, or may not even allow Public key auth in their configs. It really depends on the site. Thanks, Jamie -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] HTTP server authentication requirements for accessing this CGI.
Hi Shahid, I have only installed Apache & Nagios, but have not configured Nagios with the hosts & service and their respective groups, except for the * contacts.cfg* file. Just to confirm, can this pose authentication issues? Thanks, Jim =-=-=-=-= On Sun, Apr 26, 2009 at 8:28 PM, shadih rahman wrote: > Jimmy, > Try the following and this should take care of it. Thanks > > > ScriptAlias /nagios/cgi-bin "/usr/lib/nagios/cgi" > > > Alias /nagios "/usr/share/nagios" > > > # SSLRequireSSL > Options None > AllowOverride None > Order allow,deny > Allow from all > # Order deny,allow > # Deny from all > # Allow from 127.0.0.1 > AuthName "Nagios Access" > AuthType Basic > AuthUserFile /etc/nagios/htpasswd.users > Require valid-user > > > > > On Sun, Apr 26, 2009 at 10:52 AM, Jimmyboy wrote: > >> Hi Ankush, >> >> This is already done, but still the issue exists. >> The only difference is the username nagiosadmin as in my case. >> >> Thanks, >> Jim >> >> On Fri, Apr 24, 2009 at 4:11 PM, ankush grover wrote: >> >>> Hi Jimmy, >>> >>> You need to enable authentication in cgi.cfg. >>> >>> use_authentication=1 >>> >>> authorized_for_all_host_commands=admin >>> authorized_for_all_hosts=admin >>> authorized_for_all_service_commands=admin >>> authorized_for_all_services=admin >>> authorized_for_configuration_information=admin >>> authorized_for_system_commands=admin >>> authorized_for_system_information=admin >>> >>> >>> Something like this in nagios.conf file for apache (On my linux box >>> that is centos 5.x it is /etc/httpd/conf.d/nagios.conf) >>> >>> >>> # SSLRequireSSL >>> Options ExecCGI >>> AllowOverride None >>> Order allow,deny >>> Allow from all >>> # Order deny,allow >>> # Deny from all >>> # Allow from 127.0.0.1 >>> AuthName "Nagios Access" >>> AuthType Basic >>> AuthUserFile /etc/nagios/htpasswd.users >>> Require valid-user >>> >>> >>> Alias /nagios "/usr/share/nagios" >>> >>> >>> # SSLRequireSSL >>> Options None >>> AllowOverride None >>> Order allow,deny >>> Allow from all >>> # Order deny,allow >>> # Deny from all >>> # Allow from 127.0.0.1 >>> AuthName "Nagios Access" >>> AuthType Basic >>> AuthUserFile /etc/nagios/htpasswd.users >>> Require valid-user >>> >>> >>> >>> Now use htpasswd command to generate htpasswd.users file with user admin. >>> >>> htpasswd -c /etc/nagios/htpasswd.users admin >>> >>> >>> Regards >>> >>> Ankush >>> >>> >>> On Fri, Apr 24, 2009 at 3:34 PM, Jimmyboy >>> wrote: >>> > Hi All, >>> > >>> > I have installed Apache2.2.9 using the source file >>> > 'Apache2_2.2.9.orig.tar.gz'. >>> > Nagios 3.0.6 is also installed on Ubuntu Intrepid OS using the >>> Quickstart >>> > Guide. I am able to open http://localhost/nagios. >>> > >>> > However, certain entities on the left pane, such as 'Process Info', >>> 'Network >>> > Outages', etc are not getting opened. They error out with the following >>> > message. >>> > >>> > "It appears as though you do not have permission to view information >>> for any >>> > of the hosts you requested... If you believe this is an error, check >>> the >>> > HTTP server authentication requirements for accessing this CGI and >>> check the >>> > authorization options in your CGI configuration file." >>> > >>> > I followed >>> http://www.onlamp.com/pub/a/onlamp/2002/09/26/nagios.html?page=3. >>> > Configuration of httpd.conf says ScriptAlias /nagios/cgi-bin/ >>> > /usr/local/nagios/sbin/. But, I do not have a directory 'cgi-bin' under >>> > nagios directory. Morever, I do not see the 'sites-available' & >>> > other directories named similarly under my /usr/local/apache2/conf >>> > directory. Will that be a problem? >>> > >>> > But, still, I am at same stage. Anyone, any idea, how to go about? >>> > >>> > Thanks, >>> > Jim >>> > >>> -- >>> > Crystal Reports - New Free Runtime and 30 Day Trial >>> > Check out the new simplified licensign option that enables unlimited >>> > royalty-free distribution of the report engine for externally >>> facing >>> > server and web deployment. >>> > http://p.sf.net/sfu/businessobjects >>> > ___ >>> > Nagios-users mailing list >>> > Nagios-users@lists.sourceforge.net >>> > https://lists.sourceforge.net/lists/listinfo/nagios-users >>> > ::: Please include Nagios version, plugin version (-v) and OS when >>> reporting >>> > any issue. >>> > ::: Messages without supporting info will risk being sent to /dev/null >>> > >>> >> >> >> >> -- >> Crystal Reports - New Free Runtime and 30 Day Trial >> Check out the new simplified licensign option that enables unlimited >> royalty-free distribution of the report engine for externally facing >> server and web deployment. >> http://p.sf.net/sfu/businessobjects >> ___ >> Nagios-users mail
Re: [Nagios-users] monitoring temp - cheap and simple
2009/4/27 Tobias Exner : > Hi list, > > I'm very new to nagios and I hope someone may give me an advice. > > I'm searching for a cheap solution to monitoring the temperatur of a > room using an ip-sensor. > Of course, it should be usable with existing plugin of nagios. > > Cheap is good enough 'cause it's just to educate myself. > > > Cheers, > > Tobias If it's just to educate yourself, you could do a lot worse than have a go at linking to a hobbyist weather station for example from http://www.lacrossetechnology.com/ . If you get one with a PC interface using the WD2300 chip set, you can use Open2300 ( http://www.lavrsen.dk/twiki/bin/view/Open2300/UserGuide ) to interrogate the station from your linux system. There are various other open-source projects to interface with other weather stations, for example from Oregon Scientific. A weather station makes a good project because you need to think about how you will handle the various different kinds of data. Cheers, Jim -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Checking Bacula Server
Hi all, Does anybody know how to check a Bacula Server? I've installed check-bacula but it's not working fine. Anybody to give me a clue? Thanks in advance Eduardo -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] ups oids that might help
I had to spend a lot of time looking for oids on liebert and on apc upses. I just wanted to share it with the group. *Liebert oids * Description OID DefinitionMIB SOURCE BupsBatteryVoltage 1.3.6.1.2.1.33.1.2.5 The magnitude of the present battery voltage. RFC1628_UPS_MIB.MIB upsInputNumLines 1.3.6.1.2.1.33.1.3.2 The number of input lines utilized in this device. RFC1628_UPS_MIB.MIB upsInputVoltage 1.3.6.1.2.1.33.1.3.3.1.3 The magnitude of the present input voltage.RFC1628_UPS_MIB.MIB upsInputFrequency 1.3.6.1.2.1.33.1.3.3.1.2 The present input frequency. RFC1628_UPS_MIB.MIB upsOutputNumLines 1.3.6.1.2.1.33.1.4.3 The number of output lines utilized in this device RFC1628_UPS_MIB.MIB upsOutputFrequency 1.3.6.1.2.1.33.1.4.2 The present output frequency. RFC1628_UPS_MIB.MIB upsOutputVoltage 1.3.6.1.2.1.33.1.4.4.1.2 The present output voltage.RFC1628_UPS_MIB.MIB upsOutputCurrent 1.3.6.1.2.1.33.1.4.4.1.3 The present output current.RFC1628_UPS_MIB.MIB upsBypassNumLines 1.3.6.1.2.1.33.1.5.2 The number of bypass lines utilized in this device RFC1628_UPS_MIB.MIB upsBypassFrequency 1.3.6.1.2.1.33.1.5.1 The present bypass frequency. RFC1628_UPS_MIB.MIB upsBypassVoltage 1.3.6.1.2.1.33.1.5.3.1.2 The present bypass voltage.RFC1628_UPS_MIB.MIB lgpPwrBatteryVoltage 1.3.6.1.4.1.476.1.42.3.5.2.4.1.4.1 The present battery voltage. LIEBERT_GP_POWER.MIB lgpPwrBatteryNominalVoltage 1.3.6.1.4.1.476.1.42.3.5.2.4.1.6.1 The present battery voltage. LIEBERT_GP_POWER.MIB lgpPwrBatteryCapacity 1.3.6.1.4.1.476.1.42.3.5.1.19 The present percentage of battery capacity.LIEBERT_GP_POWER.MIB lgpPwrMeasurementPointVAPercent 1.3.6.1.4.1.476.1.42.3.5.2.2.1.11 The percentage of the rated apparent AC power of the power LIEBERT_GP_POWER.MIB source indicated by 'lgpPwrMeasurementPointId' in the corresponding row in the lgpPwrMeasurementPointTable. lgpPwrMeasurementPointNomCurrent 1.3.6.1.4.1.476.1.42.3.5.2.2.1.14 The nominal or configured/expected current of the powerLIEBERT_GP_POWER.MIB point indicated by 'lgpPwrMeasurementPointId' in the corresponding row in the lgpPwrMeasurementPointTable. lgpPwrMeasurementPointNomVA 1.3.6.1.4.1.476.1.42.3.5.2.2.1.16 The nominal or configured/expected apparent AC power for LIEBERT_GP_POWER.MIB the power source indicated by 'lgpPwrMeasurementPointId' in the corresponding row in the lgpPwrMeasurementPointTable. lgpPwrMeasurementPointNomPowerFactor 1.3.6.1.4.1.476.1.42.3.5.2.2.1.15 The nominal or configured/expected power factor of the power LIEBERT_GP_POWER.MIB point indicated by 'lgpPwrMeasurementPointId' in the corresponding row in the lgpPwrMeasurementPointTable. lgpPwrLineMeasurementCurrent 1.3.6.1.4.1.476.1.42.3.5.2.3.1.6 Output Current L1 LIEBERT_GP_POWER.MIB maximum input voltage 1.3.6.1.4.1.476.1.42.3.5.2.3.1.16.1.1 maximum input voltage recorded since LIEBERT_GP_POWER.MIB 'lgpPwrStatisticsReset' was executed. minumum input voltage 1.3.6.1.4.1.476.1.42.3.5.2.3.1.17.1.1 minimum input voltage recorded since LIEBERT_GP_POWER.MIB 'lgpPwrStatisticsReset' was executed. maximum output voltage 1.3.6.1.4.1.476.1.42.3.5.2.3.1.16.3.1 maximum output voltage recorded since LIEBERT_GP_POWER.MIB 'lgpPwrStatisticsReset' was executed. minumum output voltage 1.3.6.1.4.1.476.1.42.3.5.2.3.1.17.3.1 minimum output voltage recorded since LIEBERT_GP_POWER.MIB 'lgpPwrStatisticsReset' was executed. Output Real Load in W 1.3.6.1.4.1.476.1.42.3.5.2.2.1.8.3 output real Load in WattageLIEBERT_GP_POWER.MIB Output Apparant Load in VA 1.3.6.1.4.1.476.1.42.3.5.2.2.1.7.3 output real Load in volt-ampereLIEBERT_GP_POWER.MIB Ambient Temperature in centigrade 1.3.6.1.4.1.476.1.42.3.4.1.3.3.1.3.1Ambient temperature in degree centigrade LIEBERT_GP_POWER.MIB * APC well known OIDs * Description OID DefinitionMIB SOURCE upsAdvBatteryCapacity 1.3.6.1.4.1.318.1.1.1.2.2.1 The remaining battery capacity expressed in percent POWERNET-MIB of full capacity. upsAdvBatteryTemperature1.
[Nagios-users] User x Hostgroup
Hi All, Anyone knows how I can create a user for each hostgroup? I need to create users with view right only, but each user can see only one hostgroup. I need do that for delegate some hostgroups. For example: Hostgroup_A can be seen only by user HAViewer. Hostgroup_B can be seen only by user HBViewer. Thanks -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] What are the reasons to use NRPE?
> I just wonder what the reasons are to use NRPE in favour of checks > over ssh with ssh keys. To me, NRPE seems just one more piece of > software that may potentioally be broken and more hassle with > firewalls. Why do people still use it when ssh checks are just as > simple and (in my opinion) far more secure? I may be in the minority here but I also prefer using ssh with keys for our remote nagios checks. We have a medium sized network, around 220 hosts and about 1550 active checks. The reports of performance degradation are greatly exaggerated, IMHO. Our average check time is less than one second which is more than fast enough for our needs. By using ssh we avoided having to install NRPE on several different versions of Red Hat, and as you mentioned ssh is much more secure especially if you do it right (eg, password protected key, perhaps with keychain for loading into ssh-agent after you boot the server up). -- Crystal Reports - New Free Runtime and 30 Day Trial Check out the new simplified licensign option that enables unlimited royalty-free distribution of the report engine for externally facing server and web deployment. http://p.sf.net/sfu/businessobjects ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] What are the reasons to use NRPE?
2009/4/27 Sean Carolan : >> I just wonder what the reasons are to use NRPE in favour of checks >> over ssh with ssh keys. To me, NRPE seems just one more piece of >> software that may potentioally be broken and more hassle with >> firewalls. Why do people still use it when ssh checks are just as >> simple and (in my opinion) far more secure? > > I may be in the minority here but I also prefer using ssh with keys > for our remote nagios checks. We have a medium sized network, around > 220 hosts and about 1550 active checks. The reports of performance > degradation are greatly exaggerated, IMHO. Our average check time is > less than one second which is more than fast enough for our needs. By > using ssh we avoided having to install NRPE on several different > versions of Red Hat, and as you mentioned ssh is much more secure > especially if you do it right (eg, password protected key, perhaps > with keychain for loading into ssh-agent after you boot the server > up). > I agree with using SSH. If you search back through recent lists there was some talk of using ssh connection master which will make SSH greatly faster than NRPE. As for security...not so much. Both (can) use the same encryption algorithms. What really differs is SSH uses asymmetric encryption to setup the shared keys whereas with NRPE you give it the shared key (hence NRPE being faster, for the most part). A shared key VS a certificate I'm not feeling a real win with either side. In one case I need to grab a config file, in the other I need to grab a ssh-key file... The default to setup NRPE with explicit commands vs just allowing a user to run arbitrary over SSH, NRPE comes out ahead here. But its not really any harder to setup SSH so each key corresponds to a particular check. And you can setup NRPE to allow you to execute any command, which defeats the initial security you gain by limiting which commands it can run. As for having passwords on your keys and loading up a ssh-agent...pffft. If I can read your private key, I can read your ssh-agent socket and the unencrypted SSH key stored in RAM from said ssh-agent process. The latter might actually be easier if we want to go down the road of silly security (think firewire and DMA) since the agent process is always going to be in RAM... .r' -- Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Checking Bacula Server
Eduardo, Bacula has a wiki that show's you how to setup active and passive checks via nagios. Go to the below link and check out 'General Howtos' http://wiki.bacula.org/doku.php?id=howtos ~Jayson From: Eduardo Barreto [mailto:lec...@gmail.com] Sent: Monday, April 27, 2009 2:15 PM To: nagios-users@lists.sourceforge.net Subject: [Nagios-users] Checking Bacula Server Hi all, Does anybody know how to check a Bacula Server? I've installed check-bacula but it's not working fine. Anybody to give me a clue? Thanks in advance Eduardo The information in this electronic mail message and any attached files is confidential and may be legally privileged. If you are not the intended recipient, delete this message and contact the sender immediately. Access to this message by anyone other than its intended recipient is unauthorized. You must not use or disseminate this information as it is proprietary property of the True companies. Communications on or through the True companies' computer systems may be monitored or recorded to secure effective system operation and for other lawful purposes. Thank you.-- Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Checking Bacula Server
Hi, 27.04.2009 22:15, Eduardo Barreto wrote: > Hi all, > > Does anybody know how to check a Bacula Server? I've installed > check-bacula but it's not working fine. Some more information is needed here... - how did you install check_bacula? - which version of Bacula? - what does a call of check_bacula from the console report? Also, I believe it's more likely to get in touch with the author of check_bacula on the bacula-users mailing list. Arno > Anybody to give me a clue? > > > Thanks in advance > > > Eduardo > > > > > -- > Crystal Reports - New Free Runtime and 30 Day Trial > Check out the new simplified licensign option that enables unlimited > royalty-free distribution of the report engine for externally facing > server and web deployment. > http://p.sf.net/sfu/businessobjects > > > > > ___ > Nagios-users mailing list > Nagios-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nagios-users > ::: Please include Nagios version, plugin version (-v) and OS when reporting > any issue. > ::: Messages without supporting info will risk being sent to /dev/null -- Arno Lehmann IT-Service Lehmann Sandstr. 6, 49080 Osnabrück www.its-lehmann.de -- Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Doubt about email notifications
On Sunday, 26 April 2009 23:24:37 -0300, Daniel Bareiro wrote: > On Sunday, 19 April 2009 22:02:44 -0300, > Daniel Bareiro wrote: > > > On Tuesday, 14 April 2009 07:11:28 -0500, > > Marc Powell wrote: > > > > > On the other hand, I would like also to know if it is possible to > > > > define the maximum number of notifications that are sent. > > > > > > > > I read exist variables that allow to configure both things using > > > > escalations, although I do not have defined escalations. > > > yes, I believe an escalation would do for this. I haven't done this > > > but I expect you could set your first notification to the number of > > > the last notification you want to receive (i.e. 3 for the third > > > notification) and your last notification to some high number (99). > > > Create a contact with a notification period of 'none' and set it as > > > the contact for the escalation. > > It seems a good idea :-) I am going to try it and any doubt I will > > consult you again. > With a little more of time, I was reading about escalations and, to > where I could see, these are created by host and services. Unless there > is a general form to define the escalations, I don't believe that it is > practical considering that I have 291 services and 58 hosts. Apparently wilcards for the names of services can be used [1] although I am not sure if also it is possible to be done for the hostnames. Will wildcards (or .*) be valid with Nagios 3.0.6? These are the definitions that I was thinking to use: define hostescalation{ host_name * first_notification1 last_notification 3 escalation_period none notification_interval 60 contact_groupsadmins } define hostescalation{ host_name * first_notification4 last_notification 0 escalation_period none notification_interval 60 contact_groupsadmins } define serviceescalation{ hostgroup_name linux-servers,solaris-servers,windows-servers service_description * first_notification1 last_notification 3 notification_interval 60 contact_groupsadmins } define serviceescalation{ hostgroup_name linux-servers,solaris-servers,windows-servers service_description * first_notification4 last_notification 0 escalation_period none notification_interval 60 contact_groupsadmins } Regards, Daniel [1] http://www.linuxquestions.org/questions/linux-server-73/advanced-notifications-with-nagios-690896/ -- Fingerprint: BFB3 08D6 B4D1 31B2 72B9 29CE 6696 BF1B 14E6 1D37 Powered by Debian GNU/Linux Squeeze - Linux user #188.598 signature.asc Description: Digital signature -- Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] What are the reasons to use NRPE?
RijilV wrote: > 2009/4/27 Sean Carolan : > >>> I just wonder what the reasons are to use NRPE in favour of checks >>> over ssh with ssh keys. To me, NRPE seems just one more piece of >>> software that may potentioally be broken and more hassle with >>> firewalls. Why do people still use it when ssh checks are just as >>> simple and (in my opinion) far more secure? >>> >> I may be in the minority here but I also prefer using ssh with keys >> for our remote nagios checks. We have a medium sized network, around >> 220 hosts and about 1550 active checks. The reports of performance >> degradation are greatly exaggerated, IMHO. Our average check time is >> less than one second which is more than fast enough for our needs. By >> using ssh we avoided having to install NRPE on several different >> versions of Red Hat, and as you mentioned ssh is much more secure >> especially if you do it right (eg, password protected key, perhaps >> with keychain for loading into ssh-agent after you boot the server >> up). >> >> > > > I agree with using SSH. If you search back through recent lists there > was some talk of using ssh connection master which will make SSH > greatly faster than NRPE. > That can be a great approach, but it also requires that you have a single endpoint to the SSH connection, or just a few of them. The idea is that you keep the actual SSH connection established indefinitely, and reuse it. If you need separate SSH connections to each host, you still get some benefit, but it is much reduced. > As for security...not so much. Both (can) use the same encryption > algorithms. What really differs is SSH uses asymmetric encryption to > setup the shared keys whereas with NRPE you give it the shared key > (hence NRPE being faster, for the most part). A shared key VS a > certificate I'm not feeling a real win with either side. In one > case I need to grab a config file, in the other I need to grab a > ssh-key file... > Isn't the whole point of the ssh-key file that you only need to grab the public key? You could even publish it on a public Web site without compromising your security. With a shared key, a hacker that gets a hold of either end of the connection has compromised the connection, and you wouldn't even know it. If all the clients use the same shared key, a hacker would even compromise the whole network. With a public ssh key, the connection remains secure even when the SSH server is compromised (with NRPE, the SSH server is of course the monitored host). Only when the private key is stolen (which should never be on the SSH server, only on the client - which in this case is the single central Nagios server) do you have a compromise. The second security benefit of SSH is that every time you connect, it uses a different shared key for the actual connection. With a shared-key file, you would be using the same shared key for months. In a pinch, with SSH, you could even use the same private/public key pair for all monitored clients and still only moderately compromise security. With a shared-key file, if you use the same shared key for all clients, a hacker who compromises any of the machines in the network has full control over everything. Not what you'd want to see. > The default to setup NRPE with explicit commands vs just allowing a > user to run arbitrary over SSH, NRPE comes out ahead here. SSH also has the capability to restrict what commands you can execute; you can specify it in the authorized_keys file on the client. In fact, I sometimes establish a (semi-)permanent tunnel by forwarding some ports via SSH, and prohibit executing any commands on the remote end. Here is a line from the authorized-key that I use to lock down on one of my servers to only allow forwarding a few ports (in this case, for mysql and LDAP), and not execute any commands at all. > from=" IP>",no-X11-forwarding,no-pty,permitopen="localhost:3306",permitopen="localhost:389",command="/bin/true" > > ssh-rsa But its not really any harder to setup SSH so each key corresponds to a > particular check. The problem with that is both performance and maintenance. In Sean's example, you have 220 hosts and 1550 active checks. That means managing either 220 key pairs (or if you aren't too concerned, you can get away with a single key pair), or 1550 key pairs if you use one for each check. You also defeat the master-connection approach suggested earlier. > And you can setup NRPE to allow you to execute any > command, which defeats the initial security you gain by limiting which > commands it can run. > > As for having passwords on your keys and loading up a > ssh-agent...pffft. Agreed on that. Just leave the private keys without a passphrase and store them in a well-protected location. The agent would defeat the whole point of having a passphrase on the key anyway, AND, as you point out, make it available through a well-documented interface in RAM. And it makes rebooting th
Re: [Nagios-users] Checking Bacula Server
http://wiki.bacula.org/doku.php?id=howtos There are two HOWTOs there. I wrote the one for the passive checks. Somebody else wrote the one using active checks, which I believe actually queries the database. Eduardo Barreto wrote: > Hi all, > > Does anybody know how to check a Bacula Server? I've installed > check-bacula but it's not working fine. > Anybody to give me a clue? > > > Thanks in advance > > > Eduardo -- Kevin Keane Owner The NetTech Find the Uncommon: Expert Solutions for a Network You Never Have to Think About Office: 866-642-7116 http://www.4nettech.com This e-mail and attachments, if any, may contain confidential and/or proprietary information. Please be advised that the unauthorized use or disclosure of the information is strictly prohibited. The information herein is intended only for use by the intended recipient(s) named above. If you have received this transmission in error, please notify the sender immediately and permanently delete the e-mail and any copies, printouts or attachments thereof. -- Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Monitor file size through nagios
Hi, I am aware of monitoring disk space using nagios (disk partitions --> check_disk). Now, I have a situation that I would like to monitor size of an individual file through nagios. Ex, /var/log/custom-snmpd.log -- > this file will grow very fast and i would like to monitor if the size of this file crosses 1.5 G Is there anyway we can do this? Thanks -- Shankar -- Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null