- Xymon - Xymon mailman web

localhost, clamd, rights
by john.gallet＠wanadoo.fr 17 Aug '06

17 Aug '06

Hi there, This is my first Hobbit install, I am still fumbling around on lots of things. Great software, after installing it I wonder how I survived without it. I have 3 totally distinct questions. 1) I am running as many daemons as possible on 127.0.0.1 in case I make a mistake in my iptables rules and as a general security rule anyway. I added a 127.0.0.1 localhost line in etc/bb-hosts to monitor them. Is this the correct/preferred way to do it or can I monitor them on a single line with the public ip of the host ? 2) I configured clamd so that it uses /tmp/clamd for communications. Can I still monitor it with Hobbit ? I can't check the process (see question 3). I tried /tmp/clamd as a port in bb-services and saw an atoi() must be called on it ;-) The reason I am using a local socket is that clamassassin looks for it to know whether to call the clamscan binary on each and every mail or to use clamdscan daemon. I could force it to use the daemon, but I don't know if it'll still call the binary in cas the daemon is down. 3) Not directly Hobbit related but might need a turnaround. My kernel is patched with -grsec, which implies only root can access /proc or see other user's processes in a "ps" command. The result is that the hobbit-client log is filled with "access denied" on /proc/net/snmp (which I don't really mind) but also that the stats about users and especially number of processes is totally and utterly wrong, and I'd need this information (I have some random load peaks to diagnose). Do I need to run parts of hobbit as root ? Which ones ? What's the risk involved ? Or are there other solutions ? (the grsec documentation is non-existant or very well hidden). I might have some further questions about mysql monitoring, but http://www.hswn.dk/hobbiton/2006/06/msg00016.html looks promising, so I'll give it a try. Thanks in advance for any help. Sincerely, JG

4 5

Dumb Apache question
by greg.hubbard＠eds.com 17 Aug '06

17 Aug '06

Shire folk: I just upgraded to v4.2 on a Solaris server. I am using the built-in Apache (with Solaris 8). When I try to access any of the Hobbit man pages that refer to a CGI (and are named <something>.cgi.<n>.html) I get an "Access Forbidden" error. I looked in the Apache error log and saw this: Options ExecCGI is off in this directory: /opt2/hobbit/server/www/help/manpages/man1/hobbitsvc.cgi.1.html So Apache is getting confused by the file name? I've tried a few things to try to convince Apache that this is a text file and not a CGI, but to no avail. Anyone else ever run into this and have a solution? One obvious thing to try would be to add ExecCGI to these directories, but that doesn't feel right to me... GLH

4 4

clientupdate problems on aix
by saam＠tomikoni.de 17 Aug '06

17 Aug '06

Hi, i just tried the clientupdate feature for an aix box, but it failed for several reasons * The client build process (make install as root) installs serveral files with the "wrong" gid of root ("system" for aix). The clientupdate runs as hobbit:hobbit (in my case) and therefore can't overwrite these files. * bin/hobbitclient-*sh have no user write permissions, so tar fails again * While previous errors can easily be fixed, this one seems more tricky: tar: can't create bin/hobbitlaunch: Text file busy 2006-08-17 14:03:54 Upgrade failed, tar exited with status 256 Its because Aix can't overwrite an executing program and the hobbitclient is running during the update?! A manual update "clientupdate <version> --reexec" with a stopped client works fine. Btw, thanks for the great new release! Regards, Mirko

1 0

critical system and wildcards
by plardinois＠be.tiauto.com 17 Aug '06

17 Aug '06

Hello, Is there a way to use wildcards in the "Edit Critical Systems" form for the following fields : - "host" - "test" - "clone this host to" Thanks. Regards, _____________________________ Pierre Lardinois Int. ICT Infrastructure Team TI Automotive The information contained in this transmission may contain privileged and confidential information. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

1 0

4.2.0: make install error
by hj.beckers＠kreis-steinfurt.de 17 Aug '06

17 Aug '06

During "make install" chgrp fails with "invalid groupname" (Ungültiger Gruppenname); see line 8). Obviously line 7) is missing the "id -g hobbit" as in line 6). Whre do I add it? Yours hjb ... 1) Loading md5-data ... OK 2) touch /home/hobbit/server/etc/hobbit-nkview.cfg /home/hobbit/server/etc/hobbit-nkview.cfg.bak 3) chmod g+w /home/hobbit/server/etc/hobbit-nkview.cfg /home/hobbit/server/etc/hobbit-nkview.cfg.bak 4) mkdir -p /var/log/hobbit 5) chown hobbit /var/log/hobbit /home/hobbit/server /home/hobbit/server/* /home/hobbit/server/bin/* /home/hobbit/server/etc/* /home/hobbit/server/ext/* /home/hobbit/server/web/* /home/hobbit/server/www/gifs /home/hobbit/server/www/gifs/* /home/hobbit/server/www/menu /home/hobbit/server/www/menu/* /home/hobbit/server/www/help /home/hobbit/server/www/notes /home/hobbit/server/www/html /home/hobbit/server/www/wml /home/hobbit/data /home/hobbit/data/* 6) chgrp `id -g hobbit` /var/log/hobbit /home/hobbit/server /home/hobbit/server/* /home/hobbit/server/bin/* /home/hobbit/server/etc/* /home/hobbit/server/ext/* /home/hobbit/server/web/* /home/hobbit/server/www/gifs /home/hobbit/server/www/gifs/* /home/hobbit/server/www/menu /home/hobbit/server/www/menu/* /home/hobbit/server/www/help /home/hobbit/server/www/notes /home/hobbit/server/www/html /home/hobbit/server/www/wml /home/hobbit/data /home/hobbit/data/* 7) chgrp /home/hobbit/server/etc/hobbit-nkview.cfg /home/hobbit/server/etc/hobbit-nkview.cfg.bak 8) --->>> chgrp: Ungültiger Gruppenname ,,/home/hobbit/server/etc/hobbit-nkview.cfg" make[1]: *** [install-cfg] Fehler 1 make[1]: Leaving directory `/home/beckers/hobbit-4.2.0/hobbitd' make: *** [install-hobbitd] Fehler 2 _________________________________________ Diese E-Mail wurde geprüft von Symantec Antivirus

3 3

debian client install errors
by dan.simoes＠gmail.com 17 Aug '06

17 Aug '06

I'm not sure if Henrik wants bug reports here, or privately. When installing the hobbit client under debian, it complains: Please configure HOBBITSERVERS in /etc/default/hobbit-client invoke-rc.d: initscript hobbit-client, action "start" failed /etc/default/hobbit-client says that HOBBITSERVERS is a predefined variable. It doesn't seem to be though. I'm not sure if the right action is to edit /etc/default/hobbit-client, or edit somewhere else. I can make this work, but I'm more concerned with making sure this gets fixed in the release. The same problem was present in the last beta.

4 5

Solaris PCRE kludge still needed?
by greg.hubbard＠eds.com 16 Aug '06

16 Aug '06

Team, I tried to compile 4.2 for the first time yesterday and got bit (again) by the problem with the Solaris linker not finding pcre. The workaround listed in the 4.1.whatever tips page still works (modify Makefile and remake) -- but should configure be updated to do this on its own? Or is the fact that there are multiple workarounds enough reason to leave things be? (By the way, Hobbit is not the only package where configure generates a Makefile that is 99 percent correct -- leaving the person installing the package to figure out where the 1 percent error might be...) I still love Hobbit! I guess a human being is still needed after all... GLH

1 0

improvement request: favori.ico to a mark instead of a face
by jjj863＠gmail.com 16 Aug '06

16 Aug '06

Currently the favori.ico has the red angry face if I have one RED and a few YELLOW, acknowledged or not. I'd appreciate if it can be a MARK in corresponding color instead. This is most helpful if one has the bb page tabbed in Firefox or alike. This way, one'd know all is or is being taken care of, w/o jumping to the page. Besides, it is more logically consistent.

2 1

[hobbit] Enable/Disable propogation
by KauffmanT＠nibco.com 16 Aug '06

16 Aug '06

Enable/Disable looks to propagate ok, but I've just tried to ack an alert on my primary hobbit server -- and the ack did not propagate to the secondary server. This is 4.2.0 with all the (as of yesterday :-) patches, running with '--no-pin'. Question on BBDISPLAYS -- is this list supposed to be space delimited, comma-delimited, or does it not matter? Mine is space-delimited. Tom Kauffman NIBCO, Inc -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Monday, August 14, 2006 3:41 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Enable/Disable propogation On Mon, Aug 14, 2006 at 02:12:17PM -0400, Epp, Matthew Contractor PEO EIS AKO wrote: > How does Hobbit handle the disabling of tests in a multi-DISPLAY server > environment? Typically in the legacy Big Brother environment, I had to > either disable test on each display server, or just tell people to ignore > alerts on the satellite DISPLAYs and only pay attention to the main server > where I would actually "blue" things out. Ultimately I would like to have an > accurate view on each DISPLAY, but this would involve somehow propogating a > disable command down the line. The Hobbit enable/disable tool sends the enable/disable commands to all of the servers listed in the BBDISPLAYS setting in hobbitserver.cfg. So if you have that setup in your config, it will automatically propagate to all of the servers. Note that when using multiple servers, it is recommended that you have the local server FIRST in the list of servers in BBDISPLAYS. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

1 0

[hobbit] RPM build errors?
by mike＠razorsedge.org 16 Aug '06

16 Aug '06

Stewart_Larsen at doh.state.fl.us wrote: > When I do "./build/makerpm 4.2.0", I get the following errors > > RPM build errors: > File not found: /tmp/hobbit-root/usr/lib/hobbit/server/download > File listed twice: /usr/lib/hobbit/client/bin/clientupdate > File listed twice: /usr/lib/hobbit/client/bin/logfetch > File listed twice: /usr/lib/hobbit/client/ext > > I get the same error trying to rebuild the srpm as well "rpmbuild > --rebuild hobbit-4.2.0-1.src.rpm". What am I doing wrong? > You are not using the prebuild RPMs. ;-) http://rpm.razorsedge.org/ -- -m ... so long as the people do not care to exercise their freedom, those who wish to tyrranize will do so; for tyrants are active and ardent, and will devote themselves in the name of any number of gods, religious and otherwise, to put shackles upon sleeping men. -- Voltarine de Cleyre

2 1