Re: [Nagios-users] Create a virtual service - How to?

[Stuart Browne]

Have you had a look at the 'check_cluster' plugin?  It allows you to team 
multiple services into a single service.  You tell it how many can 
fail/not-fail before raising an alert etc.

http://nagios.sourceforge.net/docs/3_0/clusters.html

We use this for our SMTP MX target availability.

Stuart

> -Original Message-
> From: Mister IT Guru [mailto:misteritg...@gmx.com]
> Sent: Wednesday, 2 February 2011 9:38 PM
> To: Nagios Users List
> Subject: [Nagios-users] Create a virtual service - How to?
> 
> We have several systems which all work independently, as does everyone,
> naturally. We also have 'virtual services' which dependent on these
> working. What I'd like to do is set off Alert X, if A, B or C, have a
> problem, as well as A, B, or C, also sending an alert to thier
> respective responsible persons
> 
> For example, VPN, Email, RDP, and our custom application need to be on
> line, in order for remote consultants to be able to work. The custom
> app, and email are managed by one team, and VPN and RDP by two other
> separate teams.
> 
> This 'service' we can all RC for the sake of argument, and I would like
> an alert from the RC service, if any of the four services it relies on
> goes down, because the teams involved in managing the the separate
> services do it not just for the RC, but for a number of other groups of
> users as well.
> 
> How can I achieve this 'virtual service' check I'd like to implement.

--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Nagios doesn't trigger command

[Andreas Ericsson]

On 02/02/2011 04:30 PM, Libor Jelinek wrote:
> OMG! I solved it! So solution for next generation:
> 
> * How to see actual ouput of processed command (directive command_line)? *
> In nagios.cfg:
> a) set debug_level=
> b) set debug_verbosity=2
> c) see "Raw notification command" and "Processed notification command"
> in /var/log/nagios.debug
> 
> This output shows me that there is probably bug in Nagios during
> processing comments for macros in resource.cfg. ; and # charaters are
> not correctly parsed like comments. It's not stated anywhere that in
> resource.cfg and/or for macros there's some exception how to express
> comments.
> 
> $USER5$=someValue   ; This will not be parsed like comment
> $USER6$=otherValue   # Also this will not be parsed like comment
> 
> So I will file the bug.
> 

There's no bug. So called "winged" comments are only available in
object configuration files, and they're never mentioned for any
other configuration file.

-- 
Andreas Ericsson   andreas.erics...@op5.se
OP5 AB www.op5.se
Tel: +46 8-230225  Fax: +46 8-230231

Considering the successes of the wars on alcohol, poverty, drugs and
terror, I think we should give some serious thought to declaring war
on peace.

--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Nagios doesn't trigger command

[Libor Jelinek]

OMG! I solved it! So solution for next generation:

* How to see actual ouput of processed command (directive command_line)? *
In nagios.cfg:
a) set debug_level=
b) set debug_verbosity=2
c) see "Raw notification command" and "Processed notification command"
in /var/log/nagios.debug

This output shows me that there is probably bug in Nagios during
processing comments for macros in resource.cfg. ; and # charaters are
not correctly parsed like comments. It's not stated anywhere that in
resource.cfg and/or for macros there's some exception how to express
comments.

$USER5$=someValue   ; This will not be parsed like comment
$USER6$=otherValue   # Also this will not be parsed like comment

So I will file the bug.

Libor


2011/2/2 Giles Coochey :
> On 02/02/2011 15:25, Libor Jelinek wrote:
>>
>> But no command is executed! I tried to create replace default
>> notify-host-by-email's command_line to the very basic command 'echo
>> test>  /home/libor/notif_works' to test if notification is triggered.
>>
> Usually this is down to permissions. Does the nagios user, or the user that
> nagios runs as have write access to the /home/libor directory?
>
> --
> Best Regards,
>
> Giles Coochey
> NetSecSpec Ltd
> NL T-Systems Mobile: +31 681 265 086
> NL Mobile: +31 626 508 131
> GIB Mobile: +350 5401 6693
> Email/MSN/Live Messenger: gi...@coochey.net
> Skype: gilescoochey
>
>
>
>
> --
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires
> February 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> ___
> Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting
> any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>

--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Nagios doesn't trigger command

[Giles Coochey]

On 02/02/2011 15:25, Libor Jelinek wrote:


But no command is executed! I tried to create replace default
notify-host-by-email's command_line to the very basic command 'echo
test>  /home/libor/notif_works' to test if notification is triggered.

Usually this is down to permissions. Does the nagios user, or the user 
that nagios runs as have write access to the /home/libor directory?


--
Best Regards,

Giles Coochey
NetSecSpec Ltd
NL T-Systems Mobile: +31 681 265 086
NL Mobile: +31 626 508 131
GIB Mobile: +350 5401 6693
Email/MSN/Live Messenger: gi...@coochey.net
Skype: gilescoochey





smime.p7s
Description: S/MIME Cryptographic Signature
--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Fwd: Nagios doesn't trigger command

[Libor Jelinek]

I am very sorry but little correction:

Notification _is_ triggered (HOST_NOTIFICATION event in nagios3.log),
but command_line is not executed (probably).

command_line is very simple and I am pretty sure that run successfully.

So my question again: Is there any way how to see actual output of
executed command_line? Or at least to see some return code. Anything?

Thanks
Libor

-- Forwarded message --
From: Libor Jelinek 
Date: 2011/2/2
Subject: Nagios doesn't trigger command
To: nagios-users@lists.sourceforge.net


Hello dear Nagios users,
I am asking you in "emenergency case" because after 4 full days of
troubleshooting I am still not able to detect why Nagios 3 on Ubuntu
10.04 doesn't trigger commant upon hard DOWN state.

On Host State Information page I see that last notification has been
genereted before few minutes and number of total generated
notification is still increasing every check_interval.

But no command is executed! I tried to create replace default
notify-host-by-email's command_line to the very basic command 'echo
test > /home/libor/notif_works' to test if notification is triggered.

I enabled all debuging and in nagios.debug I can't find hostname or IP
of my host that is down.

>> Is there a way how to see what is actual output of command_line? <<

Thanks!
Libor

--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Nagios doesn't trigger command

[Libor Jelinek]

Hello dear Nagios users,
I am asking you in "emenergency case" because after 4 full days of
troubleshooting I am still not able to detect why Nagios 3 on Ubuntu
10.04 doesn't trigger commant upon hard DOWN state.

On Host State Information page I see that last notification has been
genereted before few minutes and number of total generated
notification is still increasing every check_interval.

But no command is executed! I tried to create replace default
notify-host-by-email's command_line to the very basic command 'echo
test > /home/libor/notif_works' to test if notification is triggered.

I enabled all debuging and in nagios.debug I can't find hostname or IP
of my host that is down.

>> Is there a way how to see what is actual output of command_line? <<

Thanks!
Libor

--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] CRITICAL - Socket timeout after 10 seconds

[Marc Deop]

On Wednesday 02 February 2011 12:52:44 akp geek wrote:
> Thank you. Will check with admins. I checked the service check_ping for the
> same host and it is working fine

That probably isn't related. Ping uses the icmp protocol and has nothing to do 
with an http check which probably is handled by and apache server (or 
lighthttp or whatever...)

-- 
Regards,

Marc Deop

--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Alert via SMS

[Kumar, Ashish]

On Wed, Jan 26, 2011 at 7:47 PM, Dario B. Bestetti (OpServices) <
dario.beste...@opservices.com.br> wrote:

> Try SMSTOOLS (http://smstools3.kekekasvi.com/), it worked better than
> Gnokii for us.
>
> _
>


Indeed.  You just have to do some extra programming creating and writing sms
files in smstools3's spool directory but it's quite stable.

I could share the script with you if you are interested.
--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] CRITICAL - Socket timeout after 10 seconds

[akp geek]

Thank you. Will check with admins. I checked the service check_ping for the
same host and it is working fine

Regards

On Wed, Feb 2, 2011 at 6:25 AM, Giles Coochey  wrote:

> On 02/02/2011 12:12, akp geek wrote:
>
>> Now I have increased the timeout to 60 seconds. Now I am getting
>>
>> node name or service name not known
>> HTTP CRITICAL - Unable to open TCP socket
>>
>> Thanks for the suggestions
>>
>> Regards
>>
>>
>> On Tue, Feb 1, 2011 at 7:49 PM, steve f > a31mod...@hotmail.com>> wrote:
>>
>> Most plugins time out after 10 seconds of not being able to
>>contact a service (FTP, HTTP, etc). If the plugins are timing out
>>after a short period of time, increase the timeout value for the
>>plugin using the appropriate command line argument for that
>>plugin. Try using a -t 12.
>>
>>I think that only the plugin timeout default value is 10 seconds,
>>the other timeouts are higher.  Someone else smarter than me can
>>verify that.
>>
>>Is this check_http failing every time now or only occasionally ?
>> Try running the check to a different site and see if those fail as
>>well.
>>
>>Is the server possibly busy at the same time??
>>
>>Let us know what you find out.
>>
>>Steve
>>
>>
>>  
>>Date: Tue, 1 Feb 2011 18:30:55 -0500
>>From: akpg...@gmail.com 
>>
>>To: nagios-users@lists.sourceforge.net
>>
>>
>>Subject: [Nagios-users] CRITICAL - Socket timeout after 10 seconds
>>
>>
>>Hi all -
>>
>>   I have been using nagios for a while to check whether
>>some our web sites are  up and running
>>
>>following is the line from the commands.cfg
>>
>>*command_line $USER1$/check_http -w 5 -c 10  -H our_dns_name -u
>>/siteName -S -v*
>>
>>
>>It was working fine. Starting this afternoon, it started giving
>>Socket time out. Logs have no information. Can you please share
>>your experiences ?
>>
>>
>>Regards
>>
>>
>>  Have you tried speaking with the administrators of the web servers? I
> remember once I was running some web-server analytic on one of my webservers
> and I found lots of spurious connections from a particular host... I assumed
> it was a lame DoS attack and simply put in a iptables command to block any
> incoming traffic from that IP. All the requests were silly and every 30
> seconds or so.
> Soon after I got a call from our NOC asking me if I could take a look at
> the webserver as it seemed to be down... of course, they never told me that
> they were monitoring it for uptime... nor did they actually check the
> webserver on a different client system...  I guessed the company I was
> working for was actually more interested in seeing whether I was meeting a
> SLA rather than properly communicating their monitoring systems...
> But either way, if the web admin has blocked you then I imagine you'd get
> that error...
>
> --
> Best Regards,
>
> Giles Coochey
> NetSecSpec Ltd
> NL T-Systems Mobile: +31 681 265 086
> NL Mobile: +31 626 508 131
> GIB Mobile: +350 5401 6693
> Email/MSN/Live Messenger: gi...@coochey.net
> Skype: gilescoochey
>
>
>
>
>
> --
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better
> price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires
> February 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> ___
> Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] CRITICAL - Socket timeout after 10 seconds

[Giles Coochey]

On 02/02/2011 12:12, akp geek wrote:

Now I have increased the timeout to 60 seconds. Now I am getting

node name or service name not known
HTTP CRITICAL - Unable to open TCP socket

Thanks for the suggestions

Regards


On Tue, Feb 1, 2011 at 7:49 PM, steve f > wrote:


 Most plugins time out after 10 seconds of not being able to
contact a service (FTP, HTTP, etc). If the plugins are timing out
after a short period of time, increase the timeout value for the
plugin using the appropriate command line argument for that
plugin. Try using a -t 12.

I think that only the plugin timeout default value is 10 seconds,
the other timeouts are higher.  Someone else smarter than me can
verify that.

Is this check_http failing every time now or only occasionally ? 
Try running the check to a different site and see if those fail as

well.

Is the server possibly busy at the same time??

Let us know what you find out.

Steve


Date: Tue, 1 Feb 2011 18:30:55 -0500
From: akpg...@gmail.com 
To: nagios-users@lists.sourceforge.net

Subject: [Nagios-users] CRITICAL - Socket timeout after 10 seconds


Hi all -

   I have been using nagios for a while to check whether
some our web sites are  up and running

following is the line from the commands.cfg

*command_line $USER1$/check_http -w 5 -c 10  -H our_dns_name -u
/siteName -S -v*


It was working fine. Starting this afternoon, it started giving
Socket time out. Logs have no information. Can you please share
your experiences ?


Regards


Have you tried speaking with the administrators of the web servers? I 
remember once I was running some web-server analytic on one of my 
webservers and I found lots of spurious connections from a particular 
host... I assumed it was a lame DoS attack and simply put in a iptables 
command to block any incoming traffic from that IP. All the requests 
were silly and every 30 seconds or so.
Soon after I got a call from our NOC asking me if I could take a look at 
the webserver as it seemed to be down... of course, they never told me 
that they were monitoring it for uptime... nor did they actually check 
the webserver on a different client system...  I guessed the company I 
was working for was actually more interested in seeing whether I was 
meeting a SLA rather than properly communicating their monitoring systems...
But either way, if the web admin has blocked you then I imagine you'd 
get that error...


--
Best Regards,

Giles Coochey
NetSecSpec Ltd
NL T-Systems Mobile: +31 681 265 086
NL Mobile: +31 626 508 131
GIB Mobile: +350 5401 6693
Email/MSN/Live Messenger: gi...@coochey.net
Skype: gilescoochey





smime.p7s
Description: S/MIME Cryptographic Signature
--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] CRITICAL - Socket timeout after 10 seconds

[akp geek]

Now I have increased the timeout to 60 seconds. Now I am getting

node name or service name not known
HTTP CRITICAL - Unable to open TCP socket

Thanks for the suggestions

Regards


On Tue, Feb 1, 2011 at 7:49 PM, steve f  wrote:

>   Most plugins time out after 10 seconds of not being able to contact a
> service (FTP, HTTP, etc). If the plugins are timing out after a short period
> of time, increase the timeout value for the plugin using the appropriate
> command line argument for that plugin. Try using a -t 12.
>
> I think that only the plugin timeout default value is 10 seconds, the other
> timeouts are higher.  Someone else smarter than me can verify that.
>
> Is this check_http failing every time now or only occasionally ?  Try
> running the check to a different site and see if those fail as well.
>
> Is the server possibly busy at the same time??
>
> Let us know what you find out.
>
> Steve
>
> --
> Date: Tue, 1 Feb 2011 18:30:55 -0500
> From: akpg...@gmail.com
> To: nagios-users@lists.sourceforge.net
> Subject: [Nagios-users] CRITICAL - Socket timeout after 10 seconds
>
>
> Hi all -
>
>I have been using nagios for a while to check whether some our
> web sites are  up and running
>
> following is the line from the commands.cfg
>
> *command_line $USER1$/check_http -w 5 -c 10  -H our_dns_name -u /siteName
> -S -v*
>
>
> It was working fine. Starting this afternoon, it started giving Socket time
> out. Logs have no information. Can you please share your experiences ?
>
>
> Regards
>
>
> --
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires February
> 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> ___ Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please
> include Nagios version, plugin version (-v) and OS when reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
>
> --
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better
> price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires
> February 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> ___
> Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when
> reporting any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
>
--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Create a virtual service - How to?

[Mister IT Guru]

We have several systems which all work independently, as does everyone, 
naturally. We also have 'virtual services' which dependent on these 
working. What I'd like to do is set off Alert X, if A, B or C, have a 
problem, as well as A, B, or C, also sending an alert to thier 
respective responsible persons

For example, VPN, Email, RDP, and our custom application need to be on 
line, in order for remote consultants to be able to work. The custom 
app, and email are managed by one team, and VPN and RDP by two other 
separate teams.

This 'service' we can all RC for the sake of argument, and I would like 
an alert from the RC service, if any of the four services it relies on 
goes down, because the teams involved in managing the the separate 
services do it not just for the RC, but for a number of other groups of 
users as well.

How can I achieve this 'virtual service' check I'd like to implement.

--
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Authentication using AD

[Bryan Berry]

Joe I am in the same boat as you except I have much less experience w/ cas,
krb, ldap, etc.

I am going to try out this plugin today
http://exchange.nagios.org/directory/Addons/Components/Active-Directory-Integration-for-Nagios-XI/details

and will let you know how it goes for me


On Fri, Jan 28, 2011 at 7:57 PM, Joe Beck  wrote:

>  The recent thread on this topic was timely.
> After looking thru some of the details of these options, its not clear to
> me which would be best & which I should try to implement first:
> Mod_auth_ldap
> Mod_cas
> Mod_krb
>
> We’re on suse 11, apache 2.2.10 (more details below)
> The goal is to allow users to authenticate with their active directory
> credentials to the nagios web interface.
> The #1 requirement is quick setup at this point—most of our users, esp. mgt
> are using windows & IE. We’re pretty far down the path of getting buy-in
> from mgt to use Nagios. If I can get them to click on our nagios email
> notification links (we’re using frank4dd’s send perl plugin) and get right
> to the page without having to  enter their username/password, that would be
> great.
> The mapping of AD groups to nagios contactgroups would be awesome down the
> road but right now I’m looking for quickest implementation of AD auth
> integration into nagios.
>
> Some of my concerns:
> when I first looked I saw the need of a user w/out a password but after
> looking again I see that its just for a “principal” user tied to
> communications between apache & an AD user.
> I have little kerberos experience, lots of ldap experience, and a decent
> amount of apache & php background.
>
> Any observations or comments are appreciated.
> Thanks,
> Joe
>
>
> (more details on env)
> /usr/sbin/httpd2-prefork -V
> Server version: Apache/2.2.10 (Linux/SUSE)
> Server built:   Dec  3 2008 10:04:51
> Server's Module Magic Number: 20051115:18
> Server loaded:  APR 1.3.3, APR-Util 1.3.4
> Compiled using: APR 1.3.3, APR-Util 1.3.4
> Architecture:   32-bit
> Server MPM: Prefork
>   threaded: no
> forked: yes (variable process count)
> Server compiled with
>  -D APACHE_MPM_DIR="server/mpm/prefork"
>  -D APR_HAS_SENDFILE
>  -D APR_HAS_MMAP
>  -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
>  -D APR_USE_SYSVSEM_SERIALIZE
>  -D APR_USE_PTHREAD_SERIALIZE
>  -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
>  -D APR_HAS_OTHER_CHILD
>  -D AP_HAVE_RELIABLE_PIPED_LOGS
>  -D DYNAMIC_MODULE_LIMIT=128
>  -D HTTPD_ROOT="/srv/www"
>  -D SUEXEC_BIN="/usr/sbin/suexec2"
>  -D DEFAULT_PIDLOG="/var/run/httpd2.pid"
>  -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
>  -D DEFAULT_LOCKFILE="/var/run/accept.lock"
>  -D DEFAULT_ERRORLOG="/var/log/apache2/error_log"
>  -D AP_TYPES_CONFIG_FILE="/etc/apache2/mime.types"
>  -D SERVER_CONFIG_FILE="/etc/apache2/httpd.conf"
>
>
>
>
> (Active Directory) to authenticate Nagios web interface users
>
> On 1/27/11 5:18 AM, "Tevfik Karagulle"  wrote:
>
>
> I ran an AD-query script periodically. The script could map Nagios contact
> groups to AD-groups, getting AD-users of those groups and create
> corresponding Nagios contacts.
>
>
> On Thu, Jan 27, 2011 at 7:55 AM, Bryan Berry 
> wrote:
>
> thanks Jan and Tevfik. I will have to experiment w/ your solutions
>
> How does Nagios application know about the individual accounts? Do you have
> to create them separately and then mod_cas or mod_krb passes thru the
> credentials to Active Directory for verification?
>
>
> On Wed, Jan 26, 2011 at 10:43 AM, Tevfik Karagulle <
> tevfik.karagu...@gmail.com> wrote:
>
> The link below can be helpful if If you look for single sign-on integration
> with Active Directory:
>
> http://www.itefix.no/i2/node/11683 (Nagios single sign-on authentication
> with Active Directory)
>
> That recipe is successfully implemented on a Nagios implementation two
> years ago.
>
> Tev
>
> On Wed, Jan 26, 2011 at 10:17 AM,  wrote:
>
> On Wed, 26 Jan 2011, Bryan Berry wrote:
>
> > Anybody using CAS for SSO authentication (
> > https://wiki.jasig.org/display/CASC/phpCAS) into Nagios? I would love to
> > know if there is an existing solutions for this. haven't managed to find
> > anything regarding this on google yet
>
> We just slapped it behind mod_cas (or whatever it's called); seems to
> work, although you'll need an alternative route if you want
> unauthenticated access too, since there's no "opt-out" with that, unless
> you construct a cunning config that lets the front page through
> unauthenticated.
>
>
> --
> jan grant, ISYS, University of Bristol. http://www.bris.ac.uk/
> Tel +44 (0)117 3317661   http://ioctl.org/jan/
> They modified their trousers secretly.
>
>
> --
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better
> price-free!
> Download using p