Permissions problem

[Patrick Morris]

On Thu, 23 Apr 2009, Adam Mooz wrote:

> No, it's not, but that doesn't matter.  I can manually execute the  
> plugin, but not via NRPE, so I think something isn't running as  
> nagios.  Top says NRPE is running as nagios though.  What user does  
> the NRPE run it's scripts as on the remote machine?
> 
> On 23-Apr-09, at 3:01 PM, Patrick Morris wrote:
> 
> > On Thu, 23 Apr 2009, Adam Mooz wrote:
> >
> >> I'm using Nagios and NRPE to monitor some system logs on a remote
> >> system via check_logfiles.
> >>
> >> Here's the setup:
> >> -user 'nagio's is part of the 'adm' group
> >> -/var/log/syslog is readable by the 'adm' group
> >> -manually executing check_logfiles as nagios (sudo -u nagios ./
> >> check_logfiles <etc>) works
> >> -executing remotely via NRPE fails
> >> -NRPE is being started via xinetd and running as 'nagios'
> >>
> >> changing syslog to be world readable fixes the problem, however it
> >> does just that; leaves the syslog file world readable.  This behavior
> >> is being repeated for several other log files as well (mysql, apache)
> >> where despite nagios being part of the appropriate groups still not
> >> remotely readable.  This is clearly a problem of something running as
> >> a different user.
> >>
> >> Ideas?
> >
> > If I were a betting man I'd say that adm is not the nagios user's
> > primary group, and/or you've specified a different group in your  
> > xinetd
> > config.

It most definitely does matter, as does the group (if any) you've
specified it to run under in your xinetd config.

How it runs when you do it manually and how it runs under xinetd are
only very loosely related, and worlds apart as far as user and group
rights go.

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensign option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null