- Xymon - Xymon mailman web

500 error for historylog.sh
by bferrell＠baywinds.org 14 Oct '17

14 Oct '17

I've got xymon 4.3.28 with apache 2.4.25 and I'm seeing a 500 error for historylog.sh with the sanitized log entry in the error_log AH02429: Response header name '3360 2017-10-13 19' contains invalid characters, aborting request, referer: http://my-site.site/xymon-cgi/history.sh?HISTFILE=my-site.site.procs&ENTRIE… Thoughts?

1 0

https URL in xymon recipient field causes 'Cannot resolve hostname' error
by spah＠syntec.co.uk 13 Oct '17

13 Oct '17

Hi to you all, It was suggested on this list recently that a way of getting Xymon client sending encrypted messages to the server using the currently Staple version would be to use *xymoncgimsg.cgi* on the web server over TLS. The xymon man page says one can use a URL in the recipient field for HTTP transport. There is no mention of HTTPS anyway in the man pages, but because it was suggested on the list I have tried it and it does not work: It seems to try and resolve https as hostname 'https' rather than interpreting it as a URL. For example: $ xymon https://www.google.com/xymon-cgi/xymoncgimsg.cgi "test" 2017-10-13 12:55:10.323994 Whoops ! Failed to send message (Cannot resolve hostname) 2017-10-13 12:55:10.324124 -> Cannot determine IP address of message recipient https $ xymon "https\://www.google.com/xymon-cgi/xymoncgimsg.cgi" "test" 2017-10-13 12:55:33.408007 Whoops ! Failed to send message (Cannot resolve hostname) 2017-10-13 12:55:33.408073 -> Cannot determine IP address of message recipient https\ I wonder if there is a trivial fix for this? P.S. Using plain old http does work: $ xymon http://www.google.com/xymon-cgi/xymoncgimsg.cgi "test" <!DOCTYPE html> <html lang=en> ... Many thanks, SebA

1 0

Regex escaping in 'cont=' test
by john.thurston＠alaska.gov 09 Oct '17

09 Oct '17

I'm fighting with the correct escaping and encoding for http content checks using the "cont=" tag: > cont[=COLUMN];URL;[expected_data_regexp|#digesttype:digest] > This tag is used to specify a http/https check, where it is also > checked that specific content is present in the server response. . . . > The regex is pre-processed for backslash "\" escape sequences. . . I can't find the expression to match the string: <a href="foo/bar"> (Which I hope your email client isn't going to try to render as html!) The closest I can manage is: a\x20href=\x22foo/bar\x22> Where \x20 is an ASCII space, and \x22 is a double-quote If I put a leading \x3D (which is an equal-sign), that renders in the search string and obviously doesn't match my supplied content. If, however, I put a leading \x3C (which is the less-than sign) the rest of the expression is eaten and is not rendered. I've tried leading the \x3C with \x5C (which is a backslash), with no effect. I also tried leading with \x5C\x78\x33\x43 (which is \x3C), which renders as such, but does not match my string. The upshot is, I can match enough of my string to be unique on my page. But it seems like something isn't right in the regex escaping and cleansing for this test. The supplied string should be accepted as a string, but the "<" seems to be interpreted during the parsing instead. Can anyone else find a way to use a "<" in the regex of the cont= test? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Department of Administration State of Alaska

2 4

Forwarding custom status messages between Xymon servers
by James.E.Ness＠usdoj.gov 02 Oct '17

02 Oct '17

To start out, my environment. Two Xymon servers, XYMON1 and XYMON2. XYMON1 is the master, and XYMON2 is the servant. At this time, there are a handful of machines using the Xymon client to report on themselves to XYMON2, which is dutifully forwarding that info on to XYMON1 (as expected). The clients also provide some custom status messages, which are NOT being forwarded from XYMON2 to XYMON1. I see they are picked up and properly processed by XYMON2, but that's it. Previously, I had set XYMON2 as just a proxy, and both the client data and the custom status messages were sent to XYMON1. I can't go back to that, because XYMON1 will be decommissioned in the near future, and I need XYMON2 to take over. (I also have some other instances that I will eventually need to forward client data and status messages to XYMON2, but that is for later.) I've looked through so many man pages and can't find anything else that would point to what I might need to set to get this working, so I'm hoping someone on here can help me out. Or is this functionality that is not meant to work, no matter what I do? Thank you in advance for your help.

3 3

First time installed, and set up xymon, failed, NEED helps please.
by EDSchminke＠Hormel.com 28 Sep '17

28 Sep '17

*****PLEASE***** do NOT leave SELinux in permissive mode. ( http://stopdisablingselinux.com/) I have beat SELinux into submission to make Xymon work the way I need it to. You can do the same by following my procedure below, or from watching Thomas Cameron's lecture from RedHat Summit a couple years ago "SELinux For Mere Mortals" (https://www.youtube.com/watch?v=cNoVgDqqJmM) I built mine from the tips given in this video. As root: #> setsebool -P httpd_enable_homedirs on #> setsebool -P httpd_read_user_content on A few things can't be done for Xymon by simply changing SELinux booleans. I've curated a number of SELinux policy exceptions over the past couple years in order to make Xymon and SELinux play nice together. You can create yours by doing this: ## vvvvvv ---- copy everything below this line ---- vvvvvv ## module xymon 1.0; require { type unconfined_t; type var_log_t; type initrc_t; type admin_home_t; type httpd_t; type user_home_t; type fonts_cache_t; type port_t; class tcp_socket name_connect; class file { rename execute setattr read create execute_no_trans write getattr unlink open }; class sock_file write; class lnk_file { create unlink }; class unix_dgram_socket sendto; class dir { write rmdir setattr remove_name create add_name }; } #============= httpd_t ============== allow httpd_t admin_home_t:file { read getattr open }; allow httpd_t fonts_cache_t:dir setattr; allow httpd_t initrc_t:unix_dgram_socket sendto; allow httpd_t port_t:tcp_socket name_connect; allow httpd_t unconfined_t:unix_dgram_socket sendto; allow httpd_t user_home_t:dir rmdir; allow httpd_t user_home_t:dir { write remove_name create add_name }; allow httpd_t user_home_t:file setattr; allow httpd_t user_home_t:file { rename write execute create unlink execute_no_trans }; allow httpd_t user_home_t:lnk_file { create unlink }; allow httpd_t user_home_t:sock_file write; allow httpd_t var_log_t:file read; EOF ## ^^^^^ ---- to everything above this line ---- ^^^^^^ ## Paste what you've copied into a file-- doesn't matter where; I've used the name "xymon.te" #> vi xymon.te Run the following commands to build the SELinux policy module: #> checkmodule -M -m -o xymon.mod xymon.te #> semodule_package -m xymon.mod -o xymon.pp Run this command to install the policy module. #> semodule -i xymon.pp Change your /etc/sysconfig/selinux back to "enforcing". Reboot. If you see any funkiness, watch /var/log/audit/audit.log for AVC denials. #> grep type=AVC /var/log/audit/audit.log | grep denied If you see anything in there, it means it's time to "build a policy exception" not "disable SELinux". -------------------------------------------------------------------------------- Everyone was right on followings: added this line at the bottom of file /etc/httpd/conf/httpd.conf: include /home/xymon/server/etc/xymon-apache.conf and Paul Root was right about Selinux, so I did: modified file /etc/sysconfig/selinux #SELINUX=enforcing KERN testing .... SELINUX=permissive rebooted. it works now!!! Thank you!!!I can go home and feel good, will do more learning tomorrow :) Let's go GreenThis email contains 100% recycled electrons. Erik D. Schminke | Associate Systems Programmer Hormel Foods Corporation | One Hormel Place | Austin, MN 55912 Phone: (507) 434-6817 edschminke at hormel.com | www.hormelfoods.com

2 1

First time installed, and set up xymon, failed, NEED helps please.
by EDSchminke＠Hormel.com 28 Sep '17

28 Sep '17

Yuck... I neglected to remove the extraneous "EOF" I included at the end of the xymon.te file. That will produce an error. Remove that line and re-save. Erik D. Schminke | Associate Systems Programmer Hormel Foods Corporation | One Hormel Place | Austin, MN 55912 Phone: (507) 434-6817 edschminke at hormel.com | www.hormelfoods.com

1 0

BigBrother client - interaction with Win Resource Manager
by john.thurston＠alaska.gov 27 Sep '17

27 Sep '17

Note: This question does not relate to xymon, except that the client is sending messages to a xymon server. We have some customers running windows servers on vmware. Those servers, for historical reasons, are running the Quest Big Brother Professional Edition client, version 5.01 They've run nicely for years, and are now not reporting CPU information. The system admin reports some recent changes to the servers: added CPU cores through the VM management client installed Windows Resource Manager to map processes to cores I suspect the ancient BBPE client has been blinded by the "Windows Resource Manager", but don't know enough about windows to get beyond that suspicion. Is anyone here able to shed any light on the way Windows Resource Manager may be confusing an ancient BB client? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Department of Administration State of Alaska

1 0

First time installed, and set up xymon, failed, NEED helps please.
by kern_doe＠yahoo.com 27 Sep '17

27 Sep '17

Hello, I've reinstalled xymon with following steps:1) unpack the downloaded xymon binary version 4.3.28 in /tmp (as root) 2) run configure script (as root) A few info to note: used mostly default values including group-ID=nobody IP-address of this host = 172.20.10.5 3) run: make (as root) 4) run: make install (as root) 5) Notes from xymon after the installation You must configure your webserver for the Xymon webpages and CGI-scripts. A sample Apache configuration is in /home/xymon/server/etc/xymon-apache.conf If you have your Administration CGI scripts in a separate directory, then you must also setup the password-file with the htpasswd command. To start Xymon, as the xymon user run '/home/xymon/server/bin/xymon.sh start' To view the Xymon webpages, go to http://centos_hp0/xymon I'm kind of pausing at "You must configure your webserver for the Xymon webpages and CGI-scripts"... Any additional help is greatly appreciated.Kern -- Let's go GreenThis email contains 100% recycled electrons. From: Kern Doe via Xymon <xymon at xymon.com> To: Adrian Ball <ade at hp5.co.uk>; "xymon at xymon.com" <xymon at xymon.com>; "cleaver at terabithia.org" <cleaver at terabithia.org>; "josh at imaginenetworksllc.com" <josh at imaginenetworksllc.com>; "bferrell at baywinds.org" <bferrell at baywinds.org>; "xymon at xymon.com" <xymon at xymon.com> Sent: Wednesday, September 27, 2017 1:12 PM Subject: Re: [Xymon] First time installed, and set up xymon, failed, NEED helps please. I thank to everyone who has replied to my email, if I miss anyone, I do apologize. Ok, so I've got super confused and you know what, I'm going to start everything all over fresh and clean -- that way, I can document it as I go along. I will do followings:1) shutdown xymon, and apache 2) I will even remove xymon ID and recreate it.3) keep /etc/hosts.cfg cat /etc/hosts.cfg 172.20.10.5 centos_hp0 # bbd http://centos_hp0/ 4) remove xymon's stuff in /etc/httpd/conf.d5) keep my test file for testing apache: /var/www/html/index.html cat index.html Welcome to Kern's webserver (sorry, I'm a real novice with apache since I'm a DBA) 6) anything else should I do as parts of trying to uninstall xymon, then reinstall? Thank you!!Kern -- Let's go GreenThis email contains 100% recycled electrons. From: Adrian Ball <ade at hp5.co.uk> To: xymon at xymon.com Sent: Wednesday, September 27, 2017 6:19 AM Subject: Re: [Xymon] First time installed, and set up xymon, failed, NEED helps please. Looks more like an Apache config problem than Xymon. Do you have FollowSymLinks set?e.g.DocumentRoot "/var/www/html"<Directory "/var/www/html"> Options Indexes FollowSymLinks MultiViews AllowOverride None Require all granted </Directory>Then I would take a look at the apache error log, it's usually pretty helpful in pointing out what the problem is.— Adrian Ball || ade at hp5.co.uk|| http://www.hp5.co.uk/Tel: 01629 822886 || Yahoo/AIM/MSN: adeatwollaton Mobile: 07539 623647 || http://www.facebook.com/adrian.ball3_______________________________________… Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

4 10

First time installed, and set up xymon, failed, NEED helps please.
by bferrell＠baywinds.org 27 Sep '17

27 Sep '17

Apache, out of the box, will not follow symlinks. In your source tree look for xymon-apache.conf and put it into /etc/httpd/conf.d then restart apache On 09/26/2017 01:57 PM, Kern Doe via Xymon wrote: > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon

2 1

exclude from alerts..
by metron6＠gmail.com 27 Sep '17

27 Sep '17

hello all, i have these lines in my alerts.cfg ignore line added recently, but it does not work.. i reboot my pbx's every morning at 5:00 what am i doing wrong ? HOST=%^PBX* SERVICE=conn IGNORE HOST=%^PBX* SERVICE=conn TIME=0500:0510 MAIL xxxxx at gmail.com REPEAT=30 RECOVERED -- regards, Metron 6 (six) Metron6 at gmail.com

3 3