June 2009 - Xymon - Xymon mailman web

RECOVERED message problem
by Mike.Wood＠kci1.com 16 Jun '09

16 Jun '09

Hi All, I've got what appears to be a bug sending RECOVERED messages. - I'm running Hobbit v4.2.0. - In hobbit-clients.cfg, I have this rule for a server: DISK /PROD/arch01 90 95 GROUP=DBA+UNIX- - In hobbit-alerts.cfg, I have this GROUP rule: GROUP=DBA+UNIX- SCRIPT /home/is_sup/hobbit/server/bin/notify.dba.yellow dba_yellow repeat=5m RECOVERED SCRIPT /home/is_sup/hobbit/server/bin/notify.dba.red dba_red repeat=1d RECOVERED MAIL=ITUnixAdmins at kci1.com repeat=1d RECOVERED STOP The alerts go out fine. But when the condition is recovered, only the MAIL recipient gets the RECOVERED message (regardless of ordering). The SCRIPT has been tested to see if it will handle RECOVERED messages. - The /var/log/hobbit/notifications file shows that the RECOVERED message was only sent to the MAIL recipient. - Thoughts? Known bug? Thanks in advance! Mike Wood UNIX System Administrator Kinetic Concepts Inc. 5751 NW Parkway San Antonio, TX, 78249 E-mail: mike.wood at kci1.com Office: (210) 255-6382 Mobile: (210) 825-5134 ***************************************************************************** "CONFIDENTIALITY NOTICE: This transmission (including any accompanying attachments) is confidential, is intended only for the individual or entity named above, and is likely to contain privileged, proprietary and confidential information that is exempt from disclosure requests under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, use of or reliance upon any of the information contained in this transmission is strictly prohibited. Any inadvertent or unauthorized disclosure shall not compromise or waive the confidentiality of this transmission or any applicable attorney-client privilege. If you have received this transmission in error, please immediately notify us at postmaster at kci1.com." Kinetic Concepts, Inc. ******************************************************************************

1 0

[hobbit] Hobbit startup script.
by Craig.Cook＠carquest.com 16 Jun '09

16 Jun '09

>It still runs as hobbit, it is just that any script in init.d gets run as root by init. Correct. Init.d scripts are run by root on system startup. Well, actually scripts in the rc.d dirs. >So consequently anything that needs to be run by a user such as hobbit, has its startup script coded to do an su hobbit -c "blahblahblah". Correct. Any example scripts people have provided do the "su hobbit -c " thing *because* the hobbit application will not allow you to start it as the root user, due to security issues. >In other words, hobbit still runs as hobbit but the startup script can be run as root. Correct, if you are using an init.d script. You can not run the "hobbit.sh" startup/shutdown script in the hobbit home directory as root for security reasons previously mentioned (nor should you edit that hobbit.sh script to allow root to start it). Craig

1 0

Test scripts will not drop
by DKDeckert＠Hormel.com 16 Jun '09

16 Jun '09

Hey everyone, This is probably a simple question and i have checked through the mailing lists to try to solve this problem. I have two scripts running on a NOCONN host named Financials but are hosted on the server fd101. I deleted all the footprints on the server such as the .sh files and changed it in the clientlaunch.cfg file. I went to xymon's home /bin and wrote ./bb 127.0.0.1 "drop mq fd101" and the other way around using Financials as the host name on both tests but it is still sending information and i dont know how. To be safe i also deleted the log files. Any ideas Derek Deckert IT service desk Notice: This communication is an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. � 2510. Its disclosure is strictly limited to the recipient(s) intended by the sender of this message. This transmission and any attachments may contain proprietary, confidential, attorney-client privileged information and/or attorney work product. If you are not the intended recipient, any disclosure, copying, distribution, reliance on, or use of any of the information contained herein is STRICTLY PROHIBITED. Please destroy the original transmission and its attachments without reading or saving in any matter and confirm by return email.

2 2

TCP check with another IP ?
by nico＠crysto.org 16 Jun '09

16 Jun '09

Hi, i ve some servers with 2 ip : - one for production (http, ftp, ... ) - one for administration (ssh, ftp, .. for the admin) I don't want to have 2 lines (one for each ip), so i'm using the "worst" feature for the PING check. It works fine. But for SSH, i can check it only by the main IP, i can't specify another one. So, in future will it be possible to have a feature like this : "ssh=W.X.Y.Z" like for HTTP check with this syntax: http://www.domaine.com=W.X.Y.Z/ This feature will be great and helpful. Thanks Regards, Nicolas

1 0

info column
by kkelly＠lifetouch.com 16 Jun '09

16 Jun '09

Just wondering if there is a way to put extra information on this page. Like what apps on this system, owner of the app, etc. Kevin Kelly Unix Administrator Lifetouch Inc 952-826-4192w 612-817-3049c ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email _____________________________________________________________________

3 2

[hobbit] Hobbit startup script.
by Craig.Cook＠carquest.com 16 Jun '09

16 Jun '09

>Sorry I wasn't asking how to do it, just why the script has to run as >hobbit when you install out of the box. It's a security thing. It is not good practice to run applications as root. If someone exploits a "let to be discovered" bug in Xymon they will not be able to crash it and become root. Craig

2 1

Xmon 4.3 - serious RRD update problem?
by asparks＠doublesparks.net 15 Jun '09

15 Jun '09

Testing Xymon 4.3 beta2 on CentOS 4.7 (x86_64 and i686) systems. I've noticed the updates to RRD files are not synchronized to disk in a timely manner. For instance, for a random host, the rrd files list as follows: -rw-r--r-- 1 hobbit hobbit 38624 Jun 12 17:10 ifstat.eth0.1005.rrd -rw-r--r-- 1 hobbit hobbit 38624 Jun 12 16:50 ifstat.eth0.rrd -rw-r--r-- 1 hobbit hobbit 19640 Jun 12 17:00 la.rrd -rw-r--r-- 1 hobbit hobbit 19640 Jun 12 17:05 memory.actual.rrd -rw-r--r-- 1 hobbit hobbit 19640 Jun 12 17:20 memory.real.rrd -rw-r--r-- 1 hobbit hobbit 19640 Jun 12 17:25 memory.swap.rrd -rw-r--r-- 1 hobbit hobbit 304400 Jun 12 17:40 netstat.rrd There is a huge disparity in timestamps on these files. Curiously, if I refresh the trends page for the host a time or two, the files will suddenly come up to date. I assume there is some write caching behavior in some part of Xymon that is not flushing data until a timeout, or until (perhaps) something tells it to? This causes graphs to have some missing data until the user hits refresh. Also, we use DRRAW, which will not see timely updates. Is this a known issue in the beta? -Alan

2 2

CERT tag and Firefox
by lebarber＠gmail.com 15 Jun '09

15 Jun '09

Does anybody out there know how to export an SSL certificate from Firefox for use with the CERT tag in bb-hosts? The man pages tell you how to do it with IE, but I don't have access to an IE instance. Thanks, Larry Barber

2 2

Using CERT with Firefox
by lebarber＠gmail.com 15 Jun '09

15 Jun '09

Does anybody out there know how to export an SSL certificate (for use with the 'CERT' keyword in bb-hosts) using Firefox and where it belongs in the Hobbit directories? The man pages tell you how to it with IE, but I don't have access to IE. Thanks, Larry Barber

1 0

changing the ssh port for clients as ssh runs on different port than 22 but for some clients
by pankaj.dorlikar＠gmail.com 15 Jun '09

15 Jun '09

hello, i have xymon 4.2.2 running with 288 clients out of which 4-5 clients have ssh configured to run on different port than port 22.gso where and how do i change the configuration so that ssh test should not indicate red for those nodes. how to remove some test showing purple staus on client and server also. help.. -- Pankaj V. Dorlikar

2 1