NEED HELP configuring NSCA with INETD
Michael Tucker
mtucker at airmail.net
Wed Jan 14 21:42:29 CET 2004
On Wednesday, January 14, 2004, at 02:20 PM, Paul L. Allen wrote:
> Oh, and the last time I played with NRPE (same author) I couldn't get
> it to run standalone so had to run it under xinetd whether I wanted to
> or not. I probably missed something obvious, but I was under pressure
> to get it working quickly so I went along the path of least resistance.
> Sometimes the question is not which way is better but which way can you
> get it working before the PHB blows his top over how long it's
> taking...
> --
> Paul Allen
> Softflare Support
>
Thanks! I already knew all the basic stuff you mentioned about memory
footprints, swapping, load/unload cycles, etc. (I'm a Sun Certified
Systems Engineer, Enterprise Certified... whoop-de-doo) but I was
wondering what concerns specific to Nagios / nsca / nrpe there might be.
You raised some good points, which I hadn't thought of, especially
about memory leaks, crashing and restarting.
I am mostly interested in running nsca under inetd so I can take
advantage of tcp wrappers. (Yeah, I know; it's a "lightweight" security
measure, but it's one more layer for the black hats to have to go
around.)
By the way, I've got nrpe working just fine under inetd (on Solaris 9,
FWIW). But not nsca. Go figure.
I guess I'll look into xinetd. My PHB is eager for me to deploy this,
though; so I'll probably just go with what I've got for the time being,
since it is (nominally) working (and nobody else seems to be able to
figure out what's wrong, either). Nagios successfully talks to Nagios
via nsca (just not under inetd), and Nagio successfully talks to the
monitored host via nrpe (just not with SSL).
Michael
p.s. If it's any help to you, here's the tail of /etc/inetd.conf on the
monitored host:
nrpe stream tcp nowait nagios /usr/sfw/sbin/tcpd /usr/local/nagios/
bin/nrpe -c /usr/local/nagios/bin/nrpe.cfg -i
And /etc/services:
nrpe 5666/tcp # NRPE (Nagios remote plugin executor)
And /etc/hosts.allow:
nrpe: {hostname of distributed server} {IP address of distributed
server}
It turned out that having just the hostname was a "no go"; I had to
provide the IP address, too. Once I did that, it took off and started
working. The same "fix" has *not* yielded fruit for nsca, though. :-/
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
More information about the Users
mailing list