July 2007 - Xymon - Xymon mailman web

Ack & Enable/Disable - Limiting REMOTE_USER access.
by s_aiello＠comcast.net 31 Jul '07

31 Jul '07

All, I have had the need for limiting Apache authenticated users Ack & Maint access in Hobbit. This email will outline the procedure that I have created to do this. I hope this may of be some help or usefulness to the community. First I established two levels of access, global & limited. I limit user's access to devices by putting devices they need ack/Maint access to, on a dedicated page. They are then granted ack/Maint access to that dedicated page. Limited access users do not have access to the Administration --> Enable/disable Web GUI. They can only Maint devices via the device's info report. Global access is allowed to Ack any device & has access to the Admin Web GUI. Access control is configured via a file I created, called server/etc/cgiauthext.cfg, and has the format: Admin: .* WebAdmin: web netAdmin: (switches|routers) The Admin user has global access. The WebAdmin user only has Ack & Maint access to any device on the /web page. The netAdmin user has Ack & Maint access to devices on the /switches and /routers page. All users; Admin, WebAdmin, & netAdmin need to have users with the same name created in hobbit's apache password file (server/etc/hobbitpasswd). This limiting of access was done by modifying the cgi-secure/bb-ack.sh & cgi-secure/hobbit-enadis.sh wrappers. Basically I prepended some shell script logic to the wrapper script. The additions are provided in the hobbit-user_auth.txt attachment which is in the output of diff -u. Disclaimer: I have no idea if these mods will work for you or your environment. These mods were created on a Linux platform. Please use at your own risk. ~Steve

1 0

Highlights of the 4.3.0 version
by henrik＠hswn.dk 31 Jul '07

31 Jul '07

In another thread, someone asked about what new features are planned for version 4.3.0. I've summarized them below; they have all been implemented by now. Some of them have been contributed by others over the past year - I'm pleased to have finally gotten their patches merged. There are some open bug-reports, and the plan now is to try and get those fixed. Once that is done I'll ask you all to start testing the beta-versions, and then a new release is hopefully available soon. This doesn't mean that I won't consider adding new stuff before the 4.3.0 release, but right now the plan is to get 4.3.0 shipped with the current set of features. But if I've missed someone's favourite patch or feature request, do let me know. Major new features ------------------ * PAGE setting for alert- and client-configuration handles hosts on multiple pages, so any pagename can be used. * Flap detection of statuses that change color rapidly. The status is kept at the most critical level until it stops flapping. * Holiday support for alerts, including variable holidays (Easter etc) * Split NCV support - graph data from NCV can be split into multiple RRD databases allowing for varying number of datasets. * RRD database parameters are now configurable (i.e. number of datapoints stored, whether to store min/max values etc). Note that this only applies to newly created RRD files, not existing ones. * Distributed worker modules allow sharing the load across multiple Hobbit servers * RRD updates are now cached for up to 30 minutes before being written to disk. This makes the I/O load on large installations much lighter. * Detection of statuses that are reported by multiple hosts * Client backend-support for the z/OS and z/VSE clients by Rich Smirna Display things -------------- * Graph zooming now limits the lower/upper bounds of a graph (requires rrdtool 1.2.x) * The trends page default data-period can be configured to something other than the default 48-hour view, and the user can select a different period on-the-fly. * Hosts can be sorted automatically on the overview webpage with a "group-sorted" group definition. * NOCOLUMNS setting in bb-hosts let you suppress certain columns on a per-host basis * Host-comments are displayed as tool-tips, to save screen space. Checks and graphs ----------------- * Network tests can use a specific source IP instead of the default * The validity-period of network tests is configurable, instead of being fixed at the default 30-minute setting * Client file checks can check for a symlink * "trends" report for RRD handling allows generating custom-made RRD files * Hobbit host- and status-counts are tracked in an RRD file Miscellaneous ------------- * NCV reports can handle color-icons before the name:value data * hobbitlaunch tasks can be configured to run on certain hosts only * Time-warp detection and warning * Local unix-socket interface to Hobbit daemon * hobbitd_capture can collect several statuses and hand off such a batch to an external command * Support for SHA-224/256/384/512 digests Regards, Henrik

24 63

[hobbit] sending client side data
by sbrabez＠ixis-cib.com 31 Jul '07

31 Jul '07

Hello Jones, You can use the following command line to send data from server to your client : bbuser at server:$BBHOME/bin$ bb <hobbitdisplay> "status <hostname>.<test> <color> <date> <message>" <hobbitdisplay> is your BBDISPLAY set in your $BBHOME/etc/bb-hosts agent file <hostname> the name of the host <date> the current date, I should you to use the default unix command `date` <test> the service to monitor, for example cpu, conn, disk, msgs and you can put a regular expression <color> the color on BBDISPLAY <message> the message you want to display on your BBISPLAY and you can put HTML text into to have a best visual aspect I hope, I respond to you and help you. Regards -- Sofian Brabez Monitoring Team Natixis France sbrabez at ixis-cib.com ________________________________ From: Jones, Jason (Altrincham) [mailto:JasonAS_Jones at mentor.com] Sent: Tuesday, July 31, 2007 11:52 AM To: hobbit at hswn.dk Subject: [hobbit] sending client side data Hi All, I've been looking through the archives at the sample server side module Henrick showed us (http://www.hswn.dk/hobbiton/2007/01/msg00487.html) I'm just curious if anyone knows how to send data from the client side to the server the same way the standard hobbit client tests do, looking at bb I'm guessing either bb data or bb client, but when I run bb <hobbitIP> "client <hostname>.<os>" nothing happens and the man pages don't mention how to actually send the data etc. Any help appreciated, Thanks, Jason. -------------------------------------------------------- Ce message et toutes les pieces jointes peuvent etre confidentiels, et, de plus, peuvent etre couverts par un privilege ou une protection legale. Il est etabli a l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse prealable. Toutes opinions exprimees dans ce message, sont personnelles a leur auteur et ne sauraient necessairement refleter celle de IXIS Corporate & Investment Bank, de ses filiales ou de sa maison mere. Elles sont aussi susceptibles de modification sans notification prealable. Tous droits reserves. Si vous recevez ce message par erreur, merci de le detruire et d'en avertir immediatement l'expediteur. Toute communication avec IXIS Corporate & Investment Bank peut etre controlee, enregistree et conservee. IXIS Corporate & Investment Bank decline toute responsabilite au titre de ce message s'il a ete altere, deforme ou falsifie. Les communications sur Internet n'etant pas securisees, IXIS Corporate & Investment Bank informe qu'il ne peut accepter aucune responsabilite quant au contenu de ce message. This email and any attachment may be confidential and may also be legally privileged or otherwise protected from disclosure. It is intended only for the stated addressee(s) and access to it by any other person(s) is unauthorised. Any use, dissemination or disclosure not in accordance with its purpose, either in whole or in part, is prohibited without our prior formal approval. Any opinion expressed in this message may be personal to the author and may not necessarily reflect the opinion of IXIS Corporate & Investment Bank, its affiliates or parent company. It may also be subject to change without prior notice. Copyright reserved. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the information contained in this email. If you have received it in error, please inform us immediately and delete all copies. Any communication made with IXIS Corporate & Investment Bank (whether personal or business) may be monitored and a record kept. IXIS Corporate & Investment Bank shall not be liable for the message if altered, changed or falsified. As communication on the Internet is not secure, IXIS Corporate & Investment Bank does not accept responsibility for the content of this message. --------------------------------------------------------

1 0

Question
by brian＠integraphx.com 30 Jul '07

30 Jul '07

Ok I am trying to install hobbit I am completely lost. I am installing on an ubuntu server 6.06. and I go to load hobbit and it come back and says errors were encountered during postgresql, and openldap. I have downloaded these programs and installed them. So I don't know what else is going on. I am new to this linux thing and I am having a little bit of troubles finding how to fix this and get the install correct. Please help me. I pretty much need step by step instructions. Thanks Brian Gray Network Administrator Integraphx, Inc 704 589 0986

2 1

alternate page graphs custom menu
by jokketan＠hotmail.com 30 Jul '07

30 Jul '07

Hi,My problem is the following:We are using the monitoring tool for a helpdesk, every member of the helpdesk has full access to every hobbit page.Local guys should have access to a limited area of the hobbit page.So i have build an alternate page set with all different sections and restricted access with a .htaccess file. This alternate page set uses a different set of headers and footers (without the menu) to prevent local guys from wandering off.But when they look at for example the conn graph for a given host, hobbit uses the bb_header and bb_footer which still has the menu in it.Is there any way to tell hobbit to use the alternate page set header and footer for the graphs of a host when they are accessed through the alternate page set?Thanks for your help,Jonathan Van Liefde. _________________________________________________________________ Ontdek Windows Live Hotmail, het ultieme online mailprogramma! http://get.live.com/mail/overview

2 1

Snapshot issue
by ralphmitchell＠gmail.com 30 Jul '07

30 Jul '07

Henrik, Either I've done something silly, or something you changed after the 2007-07-25 snapshot may have broken "bin/bb". I'm getting this in my hobbitclient.log: Hobbit version 4.3.0-0.20070725 Usage: /home/hobbit/client/bin/bb [--debug] [--proxy= http://ip.of.the.proxy:port/] RECIPIENT DATA RECIPIENT: IP-address, hostname or URL DATA: Message to send, or "-" to read from stdin and purple dots for my Hobbit server's cpu, disk, memory, etc. To make sure it wasn't anything old left behind from the previous install, I moved the server & client directories to another place and reran the 'make install', then copied back server/etc/bb-hosts. I'm still getting the above usage message and no client reports for the server itself. I get the same kind of usage message if I try: server/bin/bb 0.0.0.0 "drop xxxf501 conn" When I copy the client/bb & common/bb binaries from the 2007-07-25 snapshot build directory over to client/bin/bb & server/bin/bb, I now get the server's cpu, memory, disk, &c reports. This is with gcc-4.1.2 & glibc-2.5 on a Gentoo Linux system. Ralph Mitchell

3 3

Question about hobbit alert acknowledgement, delay of next alert time
by tj_yang＠hotmail.com 30 Jul '07

30 Jul '07

When I put "delay=999" in the replied email to an email alert, I saw following message showing up on the webpage. Mon Jul 30 10:38:22 2007 nfs1.mywork.com disk <http://hobbit.mywork.com/hobbit/gifs/red.gif> "TJ Yang" tjyang at mywork.com =20 Question 1. Will I really get 999 minutes of delay time ? Question 2. what is "=20" mean ? T.J. Yang _________________________________________________________________ Need a brain boost? Recharge with a stimulating game. Play now!� http://club.live.com/home.aspx?icid=club_hotmailtextlink1

1 0

hobbitfetch spinning again
by Dan.McDonald＠austinenergy.com 30 Jul '07

30 Jul '07

The patched hobbitfetch ran longer, but it still ended up consuming a processor after about 3 days. I did a kill -6 on it, but couldn't find the corefile anywhere. -- Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX Austin Energy http://www.austinenergy.com

4 4

core dump in hobbitd_rrd (possible memory leak from splitncv)
by charles.goyard＠orange-ftgroup.com 30 Jul '07

30 Jul '07

Hi, I yesterday and today encountered core dump in hobbitd_rrd. Here's the backtrace : (gdb) bt #0 0xb7dcd83b in raise () from /lib/tls/libc.so.6 #1 0xb7dcefa2 in abort () from /lib/tls/libc.so.6 #2 0x08057db1 in sigsegv_handler (signum=0) at sig.c:57 #3 <signal handler called> #4 0xb7e1c093 in strchr () from /lib/tls/libc.so.6 #5 0x08050972 in do_ncv_rrd (hostname=0xb7ce10f8 "orbadm-as01p.orb75.cvf", testname=0xb7ce110f "websvcs", msg=0x0, tstamp=1185778194) at do_ncv.c:51 #6 0x080529cb in update_rrd (hostname=0xb7ce10f8 "orbadm-as01p.orb75.cvf", testname=0xb7ce110f "websvcs", msg=0x0,tstamp=1185778194, sender=0x0, ldef=0x0) at do_rrd.c:411 #7 0x08049f69 in main (argc=0, argv=0xbff6f204) at hobbitd_rrd.c:160 (gdb) list 160 update_rrd(hostname, testname, restofmsg, tstamp, sender, ldef); 161 } 162 else if (strncmp(metadata[0], "@@shutdown", 10) == 0) { 163 running = 0; 164 continue; 165 } 166 else if (strncmp(metadata[0], "@@logrotate", 11) == 0) { 167 char *fn = xgetenv("HOBBITCHANNEL_LOGFILENAME"); 168 if (fn && strlen(fn)) { 169 freopen(fn, "a", stdout); My hobbitd_rrd is patched against the splitncv feature. It may be useful to know that the size of the core dump is 51MB. On fresh startup, the process is a few KB large. So I suspect a memory leak in that module, probably introduced by my patch. Alas, I won't be able to fix it soon, so beware. Regards, -- Charles Goyard - charles.goyard at orange-ftgroup.com - (+33) 1 45 38 01 31 Orange Business Services - online multimedia // ingénierie

1 0

[hobbit] [Hobbit] Try to do an instant http test
by sbrabez＠ixis-cib.com 30 Jul '07

30 Jul '07

Hi, Finally, I solved my problem caused by the recurrent servers names in the bb-hosts file. In fact, I put my HTTP test in the first file included which contains my name's server. With this method I avoid redundancy and I have correct response. Regards, -- Sofian Brabez Monitoring Team Natixis France sbrabez at ixis-cib.com -----Original Message----- From: Brabez, Sofian Sent: Monday, July 23, 2007 3:43 PM To: 'hobbit at hswn.dk' Subject: RE: [hobbit] [Hobbit] Try to do an instant http test Hi Henrik, So, I use the command line like you said, bbcmd bbtest-net --checkresponse --no-ares --debug msgipd01, the output is http://rafb.net/p/uQI6pB30.html For my configuration, I use the "include" directive in the bb-hosts file, and put the follow line into my included file : 0.0.0.0 server01 # noconn noping http://server01.domain.net:8000 http://serverd02.domain.net:8006 http://serverd02.domain.net:8007 h ttp://server01.domain.net:8008 (on the same line) More over, I have any questions: - For personal reason, the server appears twice in my bb-hosts file configuration, it maybe cause a problem ? - It's possible after a drop, no more metric status will be returned (because one day, I use the bb(1) to drop) or it's just to purge log (like the old binary bbrm) ? There is a way to reactivate the status check I forgot to do ? - There is a limit of URL for http test in the bb-hosts file configuration ? Regards, Thanks to your response. -- Sofian Brabez Monitoring Team Natixis France sbrabez at ixis-cib.com -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Monday, July 09, 2007 4:13 PM To: hobbit at hswn.dk Subject: Re: [hobbit] [Hobbit] Try to do an instant http test On Mon, Jul 09, 2007 at 12:03:24PM +0200, Brabez, Sofian wrote: > Hello, i have a problem on a http test status with a machine, i try to > do an instant test with bbtest-net(3) with the follow command line : > > bbtest-net --checkresponse --no-ares --debug msgipd01 Make sure you run it through bbcmd, i.e. put "bbcmd" in front of that command line. > know if I make a mistake to execute my test? I use NIS resolution and > debug option, the output is http://rafb.net/p/lCL9Tj76.html (use rafb > because ezmlm reject too huge mail more than 3kb) The output looks ok. Could you show us the bb-hosts setting, please ? Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk -------------------------------------------------------- Ce message et toutes les pieces jointes peuvent etre confidentiels, et, de plus, peuvent etre couverts par un privilege ou une protection legale. Il est etabli a l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse prealable. Toutes opinions exprimees dans ce message, sont personnelles a leur auteur et ne sauraient necessairement refleter celle de IXIS Corporate & Investment Bank, de ses filiales ou de sa maison mere. Elles sont aussi susceptibles de modification sans notification prealable. Tous droits reserves. Si vous recevez ce message par erreur, merci de le detruire et d'en avertir immediatement l'expediteur. Toute communication avec IXIS Corporate & Investment Bank peut etre controlee, enregistree et conservee. IXIS Corporate & Investment Bank decline toute responsabilite au titre de ce message s'il a ete altere, deforme ou falsifie. Les communications sur Internet n'etant pas securisees, IXIS Corporate & Investment Bank informe qu'il ne peut accepter aucune responsabilite quant au contenu de ce message. This email and any attachment may be confidential and may also be legally privileged or otherwise protected from disclosure. It is intended only for the stated addressee(s) and access to it by any other person(s) is unauthorised. Any use, dissemination or disclosure not in accordance with its purpose, either in whole or in part, is prohibited without our prior formal approval. Any opinion expressed in this message may be personal to the author and may not necessarily reflect the opinion of IXIS Corporate & Investment Bank, its affiliates or parent company. It may also be subject to change without prior notice. Copyright reserved. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the information contained in this email. If you have received it in error, please inform us immediately and delete all copies. Any communication made with IXIS Corporate & Investment Bank (whether personal or business) may be monitored and a record kept. IXIS Corporate & Investment Bank shall not be liable for the message if altered, changed or falsified. As communication on the Internet is not secure, IXIS Corporate & Investment Bank does not accept responsibility for the content of this message. --------------------------------------------------------

1 0