NRPE, SMF and Solaris 10

Alloo, Vincent v-alloo at ti.com
Mon Jul 10 10:03:54 CEST 2006
Previous message: NRPE, SMF and Solaris 10
Next message: A question about performance
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mika,
It works !! Thank you.

For reference:
- create manifest in
/var/svc/manifest/application/management/nagios/nrpe/nagios-nrpe.xml
(attached)
- Update /etc/user_attr and /etc/security/auth_attr
- svccfg -v import
/var/svc/manifest/application/management/nagios/nrpe/nagios-nrpe.xml
- inetadm -d svc:/network/nrpe/tcp:default (to disable wrong import
config)
- inetadm -e svc:/application/management/nagios/nrpe:default

Regards,

Vincent Alloo
TI France Design Systems Operations Manager
Europe and Middle East IT Services!
Texas Instruments France

E-Mail: v-alloo at ti.com
Phone: +33 4 93 22 26 97
Mobile: +33 6 82 13 00 80

> -----Original Message-----
> From: Mika Borner [mailto:Mika.Borner at clariden.com]
> Sent: Monday, July 10, 2006 7:26 AM
> To: nagios-users at lists.sourceforge.net; Alloo, Vincent
> Subject: Re: [Nagios-users] NRPE, SMF and Solaris 10
> 
> Here is my manifest. Save it e.g.  under
> /var/svc/manifest/application/management/nagios/nrpe/nagios-nrpe.xml
and
> import using svccfg import <filename>.
> 
> To allow the nagios user to start and stop services, add following
> entries:
> 
> /etc/user_attr:
> nagios::::type=role;auths=solaris.smf.manage.nagios-
> nrpe,solaris.smf.manage.nagios;profile=Basic
> Solaris User
> 
> /etc/security/auth_attr:
> solaris.smf.manage.nagios-nrpe:::Manage Nagios NRPE Service States::
> 
> //Mika
> 
> <?xml version="1.0"?>
> <!DOCTYPE service_bundle SYSTEM
> "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
> 
> <service_bundle type='manifest' name='nagios-nrpe'>
> 
> <service name='application/management/nagios/nrpe' version='1'
> type='service'>
> 
>         <create_default_instance enabled='false' />
> 
>         <single_instance />
> 
>         <dependency name='multi-user' grouping='require_all'
> restart_on='none' type='service'>
>                 <service_fmri value='svc:/milestone/multi-user' />
>         </dependency>
> 
>         <method_context>
>                  <method_credential user='nagios' group='nagios'/>
>                  <method_environment>
>                    <envvar name='BASEDIR' value='/u00/appl/nagios'/>
>                  </method_environment>
>         </method_context>
> 
>         <exec_method type='method' name='start'
> exec='$BASEDIR/nrpe/nrpe -c $BASEDIR/nrpe/nrpe.cfg -d'
> timeout_seconds='60'/>
>         <exec_method type='method' name='stop' exec=':kill'
> timeout_seconds='60'/>
> 
>         <property_group name='general' type='framework'>
>                 <propval name='enabled' type='boolean' value='false'/>
>                 <propval name='action_authorization' type='astring'
> value='solaris.smf.manage.nagios-nrpe'/>
>                 <propval name='value_authorization' type='astring'
> value='solaris.smf.manage.nagios-nrpe'/>
>         </property_group>
> 
>         <property_group name='startd' type='framework'>
>                 <propval name='ignore_error' type='astring'
> value='core,signal' />
>         </property_group>
> 
>         <stability value='Unstable' />
> 
> </service>
> 
> </service_bundle>
> 
> 
> >>> "Alloo, Vincent" <v-alloo at ti.com> 07/07/06 1:38 pm >>>
> Hello,
> 
> I have a full Nagios infrastructure running fine on multiple OS
> (Solaris
> 8, RH).
> 
> I'm trying now to add another client running Solaris 10 06/06 (Sparc).
> 
> I have converted my inetd.conf using inetconv utility to create the
> SMF
> service for NRPE.
> 
> Unfortunately, it is not working. Can you help me to correct the
> problem? SSL enabled.
> 
> 
> 
> Here is my SMF config:
> 
> 
> 
> # inetadm | grep nrpe
> 
> enabled   online         svc:/network/nrpe/tcp:default
> 
> 
> 
> # svcs \*nrpe\*
> 
> STATE          STIME    FMRI
> 
> online         13:26:45 svc:/network/nrpe/tcp:default
> 
> 
> 
> # inetadm -l svc:/network/nrpe/tcp:default
> 
> SCOPE    NAME=VALUE
> 
>          name="nrpe"
> 
>          endpoint_type="stream"
> 
>          proto="tcp"
> 
>          isrpc=FALSE
> 
>          wait=FALSE
> 
>          exec="/apps/nagios/nrpe/nrpe -c
> /db/sysadmin/nagios/nrpe_debug.cfg -i"
> 
>          arg0="/apps/nagios/nrpe/nrpe"
> 
>          user="nagios"
> 
> default  bind_addr=""
> 
> default  bind_fail_max=-1
> 
> default  bind_fail_interval=-1
> 
> default  max_con_rate=-1
> 
> default  max_copies=-1
> 
> default  con_rate_offline=-1
> 
> default  failrate_cnt=40
> 
> default  failrate_interval=60
> 
> default  inherit_env=TRUE
> 
>          tcp_trace=FALSE
> 
> default  tcp_wrappers=FALSE
> 
> 
> 
> and the error message in the syslog after a "check_nrpe -H svrsaseng01
> -c uname":
> 
> 
> 
> Jul  7 13:26:54 svrsaseng01 nrpe[11278]: [ID 306117 daemon.error]
> Error:
> NRPE daemon cannot be run as user/group root!
> 
> 
> 
> Thanks.
> 
> 
> 
> Vincent Alloo
> 
> TI France Design Systems Operations Manager
> 
> Europe, Middle East and Africa IT Services
> 
> Texas Instruments France
> 
> 
> 
> E-Mail: v-alloo at ti.com
> 
> Phone: +33 4 93 22 26 97
> 
> Mobile: +33 6 82 13 00 80
> 
> 
> 
> 
> >>> "Alloo, Vincent" <v-alloo at ti.com> 07/07/06 1:38 pm >>>
> Hello,
> 
> I have a full Nagios infrastructure running fine on multiple OS
> (Solaris
> 8, RH).
> 
> I'm trying now to add another client running Solaris 10 06/06 (Sparc).
> 
> I have converted my inetd.conf using inetconv utility to create the
> SMF
> service for NRPE.
> 
> Unfortunately, it is not working. Can you help me to correct the
> problem? SSL enabled.
> 
> 
> 
> Here is my SMF config:
> 
> 
> 
> # inetadm | grep nrpe
> 
> enabled   online         svc:/network/nrpe/tcp:default
> 
> 
> 
> # svcs \*nrpe\*
> 
> STATE          STIME    FMRI
> 
> online         13:26:45 svc:/network/nrpe/tcp:default
> 
> 
> 
> # inetadm -l svc:/network/nrpe/tcp:default
> 
> SCOPE    NAME=VALUE
> 
>          name="nrpe"
> 
>          endpoint_type="stream"
> 
>          proto="tcp"
> 
>          isrpc=FALSE
> 
>          wait=FALSE
> 
>          exec="/apps/nagios/nrpe/nrpe -c
> /db/sysadmin/nagios/nrpe_debug.cfg -i"
> 
>          arg0="/apps/nagios/nrpe/nrpe"
> 
>          user="nagios"
> 
> default  bind_addr=""
> 
> default  bind_fail_max=-1
> 
> default  bind_fail_interval=-1
> 
> default  max_con_rate=-1
> 
> default  max_copies=-1
> 
> default  con_rate_offline=-1
> 
> default  failrate_cnt=40
> 
> default  failrate_interval=60
> 
> default  inherit_env=TRUE
> 
>          tcp_trace=FALSE
> 
> default  tcp_wrappers=FALSE
> 
> 
> 
> and the error message in the syslog after a "check_nrpe -H svrsaseng01
> -c uname":
> 
> 
> 
> Jul  7 13:26:54 svrsaseng01 nrpe[11278]: [ID 306117 daemon.error]
> Error:
> NRPE daemon cannot be run as user/group root!
> 
> 
> 
> Thanks.
> 
> 
> 
> Vincent Alloo
> 
> TI France Design Systems Operations Manager
> 
> Europe, Middle East and Africa IT Services
> 
> Texas Instruments France
> 
> 
> 
> E-Mail: v-alloo at ti.com
> 
> Phone: +33 4 93 22 26 97
> 
> Mobile: +33 6 82 13 00 80
> 
> 
> 
> 
> 
>
------------------------------------------------------------------------
-
> This message is intended for the addressee only and may
> contain confidential or privileged information. If you
> are not the intended receiver, any disclosure, copying
> to any person or any action taken or omitted to be taken
> in reliance on this e-mail, is prohibited and may be un-
> lawful. You must therefore delete this e-mail.
> Internet communications may not be secure or error-free
> and may contain viruses. They may be subject to possible
> data corruption, accidental or on purpose. This e-mail is
> not and should not be construed as an offer or the
> solicitation of an offer to purchase or subscribe or sell
> or redeem any investments.
>
------------------------------------------------------------------------
-

-------------- next part --------------
A non-text attachment was scrubbed...
Name: nagios-nrpe.xml
Type: text/xml
Size: 1722 bytes
Desc: nagios-nrpe.xml
URL: <https://www.monitoring-lists.org/archive/users/attachments/20060710/d91b031c/attachment.xml>
-------------- next part --------------

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null
Previous message: NRPE, SMF and Solaris 10
Next message: A question about performance
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the Users mailing list