NRPE, SMF and Solaris 10

Mika Borner Mika.Borner at clariden.com
Mon Jul 10 07:26:04 CEST 2006


Here is my manifest. Save it e.g.  under
/var/svc/manifest/application/management/nagios/nrpe/nagios-nrpe.xml and
import using svccfg import <filename>.

To allow the nagios user to start and stop services, add following
entries:

/etc/user_attr:
nagios::::type=role;auths=solaris.smf.manage.nagios-nrpe,solaris.smf.manage.nagios;profile=Basic
Solaris User

/etc/security/auth_attr:
solaris.smf.manage.nagios-nrpe:::Manage Nagios NRPE Service States::

//Mika

<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM
"/usr/share/lib/xml/dtd/service_bundle.dtd.1">
 
<service_bundle type='manifest' name='nagios-nrpe'>
 
<service name='application/management/nagios/nrpe' version='1'
type='service'>
        
        <create_default_instance enabled='false' />
        
        <single_instance />
        
        <dependency name='multi-user' grouping='require_all'
restart_on='none' type='service'>
                <service_fmri value='svc:/milestone/multi-user' />
        </dependency>
        
        <method_context>
                 <method_credential user='nagios' group='nagios'/>
                 <method_environment>
                   <envvar name='BASEDIR' value='/u00/appl/nagios'/>
                 </method_environment>
        </method_context>
        
        <exec_method type='method' name='start'
exec='$BASEDIR/nrpe/nrpe -c $BASEDIR/nrpe/nrpe.cfg -d'
timeout_seconds='60'/>                           
        <exec_method type='method' name='stop' exec=':kill'
timeout_seconds='60'/>
        
        <property_group name='general' type='framework'>
                <propval name='enabled' type='boolean' value='false'/>
                <propval name='action_authorization' type='astring'
value='solaris.smf.manage.nagios-nrpe'/>
                <propval name='value_authorization' type='astring'
value='solaris.smf.manage.nagios-nrpe'/>
        </property_group>
 
        <property_group name='startd' type='framework'>
                <propval name='ignore_error' type='astring'
value='core,signal' />
        </property_group>
        
        <stability value='Unstable' />
        
</service>
   
</service_bundle>


>>> "Alloo, Vincent" <v-alloo at ti.com> 07/07/06 1:38 pm >>>
Hello,

I have a full Nagios infrastructure running fine on multiple OS
(Solaris
8, RH).

I'm trying now to add another client running Solaris 10 06/06 (Sparc).

I have converted my inetd.conf using inetconv utility to create the
SMF
service for NRPE.

Unfortunately, it is not working. Can you help me to correct the
problem? SSL enabled.

 

Here is my SMF config:

 

# inetadm | grep nrpe

enabled   online         svc:/network/nrpe/tcp:default

 

# svcs \*nrpe\*

STATE          STIME    FMRI

online         13:26:45 svc:/network/nrpe/tcp:default

 

# inetadm -l svc:/network/nrpe/tcp:default

SCOPE    NAME=VALUE

         name="nrpe"

         endpoint_type="stream"

         proto="tcp"

         isrpc=FALSE

         wait=FALSE

         exec="/apps/nagios/nrpe/nrpe -c
/db/sysadmin/nagios/nrpe_debug.cfg -i"

         arg0="/apps/nagios/nrpe/nrpe"

         user="nagios"

default  bind_addr=""

default  bind_fail_max=-1

default  bind_fail_interval=-1

default  max_con_rate=-1

default  max_copies=-1

default  con_rate_offline=-1

default  failrate_cnt=40

default  failrate_interval=60

default  inherit_env=TRUE

         tcp_trace=FALSE

default  tcp_wrappers=FALSE

 

and the error message in the syslog after a "check_nrpe -H svrsaseng01
-c uname":

 

Jul  7 13:26:54 svrsaseng01 nrpe[11278]: [ID 306117 daemon.error]
Error:
NRPE daemon cannot be run as user/group root!

 

Thanks.

 

Vincent Alloo

TI France Design Systems Operations Manager

Europe, Middle East and Africa IT Services

Texas Instruments France

 

E-Mail: v-alloo at ti.com 

Phone: +33 4 93 22 26 97

Mobile: +33 6 82 13 00 80

 


>>> "Alloo, Vincent" <v-alloo at ti.com> 07/07/06 1:38 pm >>>
Hello,

I have a full Nagios infrastructure running fine on multiple OS
(Solaris
8, RH).

I'm trying now to add another client running Solaris 10 06/06 (Sparc).

I have converted my inetd.conf using inetconv utility to create the
SMF
service for NRPE.

Unfortunately, it is not working. Can you help me to correct the
problem? SSL enabled.

 

Here is my SMF config:

 

# inetadm | grep nrpe

enabled   online         svc:/network/nrpe/tcp:default

 

# svcs \*nrpe\*

STATE          STIME    FMRI

online         13:26:45 svc:/network/nrpe/tcp:default

 

# inetadm -l svc:/network/nrpe/tcp:default

SCOPE    NAME=VALUE

         name="nrpe"

         endpoint_type="stream"

         proto="tcp"

         isrpc=FALSE

         wait=FALSE

         exec="/apps/nagios/nrpe/nrpe -c
/db/sysadmin/nagios/nrpe_debug.cfg -i"

         arg0="/apps/nagios/nrpe/nrpe"

         user="nagios"

default  bind_addr=""

default  bind_fail_max=-1

default  bind_fail_interval=-1

default  max_con_rate=-1

default  max_copies=-1

default  con_rate_offline=-1

default  failrate_cnt=40

default  failrate_interval=60

default  inherit_env=TRUE

         tcp_trace=FALSE

default  tcp_wrappers=FALSE

 

and the error message in the syslog after a "check_nrpe -H svrsaseng01
-c uname":

 

Jul  7 13:26:54 svrsaseng01 nrpe[11278]: [ID 306117 daemon.error]
Error:
NRPE daemon cannot be run as user/group root!

 

Thanks.

 

Vincent Alloo

TI France Design Systems Operations Manager

Europe, Middle East and Africa IT Services

Texas Instruments France

 

E-Mail: v-alloo at ti.com 

Phone: +33 4 93 22 26 97

Mobile: +33 6 82 13 00 80

 



-------------------------------------------------------------------------
This message is intended for the addressee only and may
contain confidential or privileged information. If you
are not the intended receiver, any disclosure, copying
to any person or any action taken or omitted to be taken
in reliance on this e-mail, is prohibited and may be un-
lawful. You must therefore delete this e-mail.
Internet communications may not be secure or error-free
and may contain viruses. They may be subject to possible
data corruption, accidental or on purpose. This e-mail is
not and should not be construed as an offer or the
solicitation of an offer to purchase or subscribe or sell
or redeem any investments.
-------------------------------------------------------------------------



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list