[Nagios-users] Defining passive checks

2012-08-15 Thread Jonathan Gazeley
I'm a long-time user of Nagios with active checks. Today I started using 
passive checks with NSCA and I'm having a problem.

The documentation states A service must be defined in Nagios before you 
can submit passive check results for it.

I defined a config block like this, to define a service for the Oracle 
service that I want to monitor passively - omitting the check_command 
directive.

define service {
 service_descriptionOracle
 host_name  oddjob.resnet.bris.ac.uk
 useresnet-service
}



But running nagios -v gives this output:

Error: Service description, host name, or check command is NULL
Error: Could not register service (config file 
'/etc/nagios/nagios_service.cfg', starting on line 8618)
Error processing object config files!


So what's the approved way of defining a service without specifying a 
command for active checks?

Thanks,
Jonathan

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


[Nagios-users] check_http and self signed certs

2012-08-15 Thread Masoud Tabrizi
All,
We are using version 4.1.13 for the check_http for checking our URLs.
it seems like the check_http is not able to get through the self signed 
certs we have installed;
Are there any options or suggestions to get around this?
thanks in advance
Masoud Tabrizi



--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] check_http and self signed certs

2012-08-15 Thread Claudio Kuenzler
This should work, also with self-signed certs. Doing this in my Nagios
config as well.
Whats the check_http command you're launching?
What's the error message?

On Wed, Aug 15, 2012 at 4:15 PM, Masoud Tabrizi masoud.tabr...@gmail.comwrote:

 All,
 We are using version 4.1.13 for the check_http for checking our URLs.
 it seems like the check_http is not able to get through the self signed
 certs we have installed;
 Are there any options or suggestions to get around this?
 thanks in advance
 Masoud Tabrizi




 --
 Live Security Virtual Conference
 Exclusive live event will cover all the ways today's security and
 threat landscape has changed and how IT managers can respond. Discussions
 will include endpoint security, mobile security and the latest in malware
 threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
 ___
 Nagios-users mailing list
 Nagios-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/nagios-users
 ::: Please include Nagios version, plugin version (-v) and OS when
 reporting any issue.
 ::: Messages without supporting info will risk being sent to /dev/null

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Defining passive checks

2012-08-15 Thread Mark Elsen
 I'm a long-time user of Nagios with active checks. Today I started using
 passive checks with NSCA and I'm having a problem.

 The documentation states A service must be defined in Nagios before you
 can submit passive check results for it.

 I defined a config block like this, to define a service for the Oracle
 service that I want to monitor passively - omitting the check_command
 directive.

 define service {
  service_descriptionOracle
  host_name  oddjob.resnet.bris.ac.uk
  useresnet-service
 }



 But running nagios -v gives this output:

 Error: Service description, host name, or check command is NULL
 Error: Could not register service (config file
 '/etc/nagios/nagios_service.cfg', starting on line 8618)
 Error processing object config files!


 So what's the approved way of defining a service without specifying a
 command for active checks?



 The approved way is that you can't because it remains a service
definition, however the command
can be dummy , although it must be defined.
The command definition however is obliviated by  using :

   active_checks_enabled  0
   passive_checks_enabled   1

Sometimes for check_command check-host-alive is being used, this avoids
long outstaniding stale data
for the specific passive service definition.

M.
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] check_http and self signed certs

2012-08-15 Thread masoud . tabrizi
Using -H url -I IP -s string -f follow and -p where applicable
Timeout seems to be the issue yet the URLs are loading fine in less than a 
second, (-t is set to 45 seconds as well)
Thanks  
-Original Message-
From: Claudio Kuenzler c...@claudiokuenzler.com
Date: Wed, 15 Aug 2012 16:29:19 
To: Nagios Users Listnagios-users@lists.sourceforge.net
Reply-To: Nagios Users List nagios-users@lists.sourceforge.net
Subject: Re: [Nagios-users] check_http and self signed certs

--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/


--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] check_http and self signed certs

2012-08-15 Thread Claudio Kuenzler
On Wed, Aug 15, 2012 at 5:03 PM, masoud.tabr...@gmail.com wrote:

 Using -H url -I IP -s string -f follow and -p where applicable
 Timeout seems to be the issue yet the URLs are loading fine in less than a
 second, (-t is set to 45 seconds as well)
 Thanks


Generally you can use -S and -p 443 for SSL-sites. It doesn't matter if the
certificate is verified or self-signed.

./check_http -H www.example.com -p 443 -S
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Issues with check_by_ssh

2012-08-15 Thread Eduardo Montes de Oca S.
Hi list,

I have some issues with the plugin check_by_ssh. In particular, there is
one error:

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

*root@nagioserver# root@TSM-SRV-V-114# /usr/lib/nagios/plugins/check_by_ssh
-l root -H ipxenserver -C /usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”*
*
*
But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:
[image: Imágenes integradas 1]

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

Could someone help me solve this problem


This is a part of my definition files:
*
#XENServer
*
*
define command {
   command_name check_by_ssh_xentop
   command_line /usr/lib/nagios/plugins/check_by_ssh -l
'$ARG1$' -H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'
   }
*
*#Hypervisor check*
*define service{*
*use  generic-service*
*host_name  ORLANDO *
*service_description Hypervisor CPU*
*check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh!/root/.ssh/id_rsa!
*
*}*




Regards!


-- 
*IC.** Eduardo Montes de Oca Sánchez
*Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886
https://linuxcounter.net/cert/549074.png
image.png--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] AUTO: Chan, Brian is away from the office (returning 16/08/2012)

2012-08-15 Thread Brian Chan

I am out of the office until 16/08/2012.

I will respond to your message when I return.
If this is a request for support,  click here to open an ITRequest--:
mailto:itrequ...@shawcor.com
Alternatively, all questions can be directed to the Help Desk at
416-744-5557

Brian Chan


Note: This is an automated response to your message  Nagios-users Digest,
Vol 75, Issue 8 sent on 08/15/2012 11:04:11.

This is the only notification you will receive while this person is away.


--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


[Nagios-users] Issues with check_by_ssh

2012-08-15 Thread Eduardo Montes de Oca S.
Hi list,

I have some issues with the plugin check_by_ssh. In particular, there is
one error:

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

*root@nagioserver# root@TSM-SRV-V-114# /usr/lib/nagios/plugins/check_by_ssh
-l root -H ipxenserver -C /usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”*
*
*
But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:
[image: Imágenes integradas 1]

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

Could someone help me solve this problem


This is a part of my definition files:
*
#XENServer
*
*
define command {
   command_name check_by_ssh_xentop
   command_line /usr/lib/nagios/plugins/check_by_ssh -l
'$ARG1$' -H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'
   }
*
*#Hypervisor check*
*define service{*
*use  generic-service*
*host_name  ORLANDO *
*service_description Hypervisor CPU*
*check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh!/root/.ssh/id_rsa!
*
*}*




Regards!


-- 
*IC.** Eduardo Montes de Oca Sánchez
*Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886
https://linuxcounter.net/cert/549074.png
image.png--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Issues with check_by_ssh

2012-08-15 Thread Badri Pillai
Hi,

 

since the plugin is executed as user nagios, check if the command (including
all params) works as user nagios (or whatever user id it is running as)

 

Problem could be:

1)  Nagios user  can’t read the ssh key file as it resides in root
directory

2)  Or it can’t write the ~nagios/.ssh/known_hosts file

 

PS: In general it is not a good practice to use root ssh key for nagios
commands

   I would suggest to create a ssh key for nagios user and place it in
nagios home or a place where nagios user has access to

 

Regards,

 

bp

 

 

Von: Eduardo Montes de Oca S. [mailto:edren...@gmail.com] 
Gesendet: Mittwoch, 15. August 2012 17:36
An: nagios-users@lists.sourceforge.net
Betreff: [Nagios-users] Issues with check_by_ssh

 

Hi list,

 

I have some issues with the plugin check_by_ssh. In particular, there is
one error:

 

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

 

 mailto:root@TSM-SRV-V-114 root@nagioserver#
/usr/lib/nagios/plugins/check_by_ssh -l root -H ipxenserver -C
/usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”

 

But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:

Imágenes integradas 1

 

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

 

Could someone help me solve this problem

 

 

This is a part of my definition files:

#XENServer

define command {

   command_name check_by_ssh_xentop

   command_line /usr/lib/nagios/plugins/check_by_ssh -l '$ARG1$'
-H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'

   }

#Hypervisor check

define service{

use  generic-service

host_name  ORLANDO 

service_description Hypervisor CPU

check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh
!/root/.ssh/id_rsa!

}

 

 

 

 

Regards!

 

 

-- 

IC. Eduardo Montes de Oca Sánchez
Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886

https://linuxcounter.net/cert/549074.png

image001.png--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Issues with check_by_ssh

2012-08-15 Thread Morris, Patrick
It’s highly unlikely that the Nagios user has permissions to use a key owned
by root, and that’s a good thing.

 

From: Eduardo Montes de Oca S. [mailto:edren...@gmail.com] 
Sent: Wednesday, August 15, 2012 10:52 AM
To: nagios-users@lists.sourceforge.net
Subject: [Nagios-users] Issues with check_by_ssh

 

Hi list,

 

I have some issues with the plugin check_by_ssh. In particular, there is
one error:

 

When I run a shell script located in another server, from the Nagios server
using the check_by_ssh plugin, I don't have any errors and I can see the
result of the script, like this:

 

 mailto:root@TSM-SRV-V-114 root@nagioserver#
/usr/lib/nagios/plugins/check_by_ssh -l root -H ipxenserver -C
/usr/lib/nagios/plugins/check_Xencpu
“OK:CPU%= 3”

 

But, by any strange reason, when I configure the check for Nagios presents
the results in its interface, I have the error:

Imágenes integradas 1

 

I have made the ssh authorization keys in both servers (Nagios and Xen), I
configured the users, permissions,etc. And I can't to do this work it.

 

Could someone help me solve this problem

 

 

This is a part of my definition files:

#XENServer

define command {

   command_name check_by_ssh_xentop

   command_line /usr/lib/nagios/plugins/check_by_ssh -l '$ARG1$'
-H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'

   }

#Hypervisor check

define service{

use  generic-service

host_name  ORLANDO 

service_description Hypervisor CPU

check_command
check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh
!/root/.ssh/id_rsa!

}

 

 

 

 

Regards!

 

 

-- 

IC. Eduardo Montes de Oca Sánchez
Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886

https://linuxcounter.net/cert/549074.png

image001.png

smime.p7s
Description: S/MIME cryptographic signature
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Issues with check_by_ssh

2012-08-15 Thread Eduardo Montes de Oca S.
Hi friends,

Also, I've been doing some tests with the user nagios but I obteined the
same result.

In this case, I tried in the context of the user Nagios but it works
through the terminal:

*nagios@nagioserver:~$ /usr/lib/nagios/plugins/check_by_ssh -l nagios -H
172.16.31.2 -C /usr/lib/nagios/plugins/check_Xencpu -i
/var/lib/nagios/.ssh/id_rsa*
*“OK:CPU%= 10”*

If I set up my definition of the command:

*#Check Hypervisor*
*define service{*
*use generic-service*
*host_name   ORLANDO*
*service_description Hypervisor CPU*
*check_command
check_by_ssh_xentop!nagios!172.16.31.2!/usr/lib/nagios/plugins/check_Xencpu!/var/lib/nagios/.ssh/id_rsa!
*
*}*

But, the result is not correct:

[image: Imágenes integradas 1]


Regards!

Eduardo


 ** **

 Hi list,

 ** **

 I have some issues with the plugin check_by_ssh. In particular, there is
 one error:

 ** **

 When I run a shell script located in another server, from the Nagios
 server using the check_by_ssh plugin, I don't have any errors and I can see
 the result of the script, like this:

 ** **

 *root@nagioserver# root@TSM-SRV-V-114** /usr/lib/nagios/plugins/check_by_ssh
 -l root -H ipxenserver -C /usr/lib/nagios/plugins/check_Xencpu
 “OK:CPU%= 3”*

 ** **

 But, by any strange reason, when I configure the check for Nagios presents
 the results in its interface, I have the error:

 [image: Imágenes integradas 1]

 ** **

 I have made the ssh authorization keys in both servers (Nagios and Xen), I
 configured the users, permissions,etc. And I can't to do this work it.

 ** **

 Could someone help me solve this problem

 ** **

 ** **

 This is a part of my definition files:

 *#XENServer*

 *define command {*

 *   command_name check_by_ssh_xentop*

 *   command_line /usr/lib/nagios/plugins/check_by_ssh -l
 '$ARG1$' -H '$HOSTADDRESS$' -C '$ARG2$' -i '$ARG3$'*

 *   }*

 *#Hypervisor check*

 *define service{*

 *use  generic-service*

 *host_name  ORLANDO *

 *service_description Hypervisor CPU*

 *check_command
 check_by_ssh_xentop!root!ipxenserver!/usr/lib/nagios/plugins/check_Xencpu.sh!/root/.ssh/id_rsa!
 *

 *}*

 ** **

 ** **

 ** **

 ** **

 Regards!

 ** **

 ** **

 -- 

 *IC.** Eduardo Montes de Oca Sánchez
 *Skype: edrendar
 Gmail: edren...@gmail.com
 MSN: ed_montesde...@hotmail.com
 Movil: 5523419886

 https://linuxcounter.net/cert/549074.png


 --
 Live Security Virtual Conference
 Exclusive live event will cover all the ways today's security and
 threat landscape has changed and how IT managers can respond. Discussions
 will include endpoint security, mobile security and the latest in malware
 threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
 ___
 Nagios-users mailing list
 Nagios-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/nagios-users
 ::: Please include Nagios version, plugin version (-v) and OS when
 reporting any issue.
 ::: Messages without supporting info will risk being sent to /dev/null




-- 
*IC.** Eduardo Montes de Oca Sánchez
*Skype: edrendar
Gmail: edren...@gmail.com
MSN: ed_montesde...@hotmail.com
Movil: 5523419886
https://linuxcounter.net/cert/549074.png
image.png--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null