NRPE + raidutil ?

[Andrew Cruse]

nagios-users-admin at lists.sourceforge.net wrote:
>  > I'm trying to monitor RAID array status using NRPE.  But
> I'm running  > into minor security issues.
>  >
>  > * Adaptec 2100S RAID controller
>  > * CentOS 4.2
>  > * raidutil RPM from http://i2o.shadowconnect.com  >  >
> When logged directly into the system to monitor, the raidutil
> command  > only works if I am root.
> 
> chmod 755 `which raidutil`
> 
> as root?
> 
>  > But NRPE refuses to start if I tell it to use root as user and
>  group. > (Running under xinetd, in this case)
>  >
>  > Can anyone tell me the best (most secure) way to get this
> working  > properly?  This web page seems to talk about it, but in
>  Czech... >
>  > http://homel.vsb.cz/~jas02/raid/
>  >
>  > I am using an apparently custom Nagios plugin called
>  "check_dpt_raid" > and again, it seems to run manually just fine as
>  long as I am root. > (Can't remember where I got the plugin -- maybe
> from someone's mention  > of it on the mailing list.  Nothing
> comes up when I search for the name!)
> 
> ftp://noc.hep.wisc.edu/pub/src/nagios/
> 
> ?
> 
> ...but I really can't help you because we don't use NRPE.
> (We run check_dpt_raid via Net-SNMP's snmpd.)

I've also found that raidutil often takes too long to run to be useful
for NRPE.  So I have a cron job that runs raidutil and saves the output
to a text file, then have NRPE just check the contents of that file.

Andrew



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null