NEED HELP configuring NSCA with INETD

[Michael Tucker]

On Wednesday, January 14, 2004, at 02:20  PM, Paul L. Allen wrote:
> Oh, and the last time I played with NRPE (same author) I couldn't get
> it to run standalone so had to run it under xinetd whether I wanted to
> or not.  I probably missed something obvious, but I was under pressure
> to get it working quickly so I went along the path of least resistance.
> Sometimes the question is not which way is better but which way can you
> get it working before the PHB blows his top over how long it's  
> taking...
> --  
> Paul Allen
> Softflare Support
>

Thanks! I already knew all the basic stuff you mentioned about memory  
footprints, swapping, load/unload cycles, etc. (I'm a Sun Certified  
Systems Engineer, Enterprise Certified... whoop-de-doo) but I was  
wondering what concerns specific to Nagios / nsca / nrpe there might be.

You raised some good points, which I hadn't thought of, especially  
about memory leaks, crashing and restarting.

I am mostly interested in running nsca under inetd so I can take  
advantage of tcp wrappers. (Yeah, I know; it's a "lightweight" security  
measure, but it's one more layer for the black hats to have to go  
around.)

By the way, I've got nrpe working just fine under inetd (on Solaris 9,  
FWIW). But not nsca. Go figure.

I guess I'll look into xinetd. My PHB is eager for me to deploy this,  
though; so I'll probably just go with what I've got for the time being,  
since it is (nominally) working (and nobody else seems to be able to  
figure out what's wrong, either). Nagios successfully talks to Nagios  
via nsca (just not under inetd), and Nagio successfully talks to the  
monitored host via nrpe (just not with SSL).

Michael

p.s. If it's any help to you, here's the tail of /etc/inetd.conf on the  
monitored host:
nrpe		stream	tcp	nowait	nagios	/usr/sfw/sbin/tcpd	/usr/local/nagios/ 
bin/nrpe -c /usr/local/nagios/bin/nrpe.cfg -i

And /etc/services:
nrpe		5666/tcp		# NRPE (Nagios remote plugin executor)

And /etc/hosts.allow:
nrpe: {hostname of distributed server} {IP address of distributed  
server}

It turned out that having just the hostname was a "no go"; I had to  
provide the IP address, too. Once I did that, it took off and started  
working. The same "fix" has *not* yielded fruit for nsca, though. :-/



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null