- Xymon - Xymon mailman web

How to retrieve the global state of Xymon?
by wim.nelis＠ziggo.nl 16 Feb '24

16 Feb '24

An HTML attachment was scrubbed... URL: <http://lists.xymon.com/pipermail/xymon/attachments/20240216/d24da747/attach…>

1 0

Can XYMSRV be a fqdn/hostname not an IP
by cleaver＠terabithia.org 14 Feb '24

14 Feb '24

On Tue, February 13, 2024 07:53, Ian Diddams wrote: > simple question...?? as time marches on etc has xymon/hobbit reached a > stage yet when XYMSRV can be set to a hostname rather than an IP address? > > eg?? rather than > > XYMSRV = "10.10.10.10" > > we could have > > XYMSRV = "xymonhost" > > where "xymonhost" resolves in dns to 10.10.10.10? > > This would be a huge benefit where anytime a xymon server is migrated to > another system eg underling EOL OS, one wouldn't have to go around > changing every single client server's xymon configs to a new Ip...?? all > that would be required is a reset in an appropriate dns zonefile so dns > just provides the new IP after the TTL passes etc. > > ??? > > cheers > ian Hi, Yes, $XYMSRV (or the recipient specified directly on the command line to the 'xymon' client program) can be a FQDN, even in 4.3.30, and a lookup will be performed. It's fine to do this, just with the caveat that this introduces working DNS resolution as a requirement for client log submission. This might be an OK tradeoff if, as you say, you're doing migration, or have a floating xymon VIP, or are doing other things with xymonproxy and need admin flexibility w/o touching every machine. -jc

3 2

xymon uses an old version of Openssl
by dito74＠gmail.com 14 Feb '24

14 Feb '24

I've recently migrated my xymon server from an old ubuntu to the latest, I've kept a bunch of old config files (and that might the be issue, but I am not sure where to look). My current openssl version is OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.1.4 24 Oct 2023) however my xymonnet uses a version that is 2 years older xymonnet version 4.3.30 SSL library : OpenSSL 3.0.0 7 sep 2021 LDAP library: OpenLDAP 20506 And that results into an SSL issue testing for some HTTPS site. Unspecified SSL error in SSL_connect to https error:0A000410:SSL routines::sslv3 alert handshake failure Should it use the latest builtin in system openssl? How do I fix that? Gab

1 0

Can XYMSRV be a fqdn/hostname not an IP
by didds3＠yahoo.co.uk 13 Feb '24

13 Feb '24

simple question...? as time marches on etc has xymon/hobbit reached a stage yet when XYMSRV can be set to a hostname rather than an IP address? eg? rather than XYMSRV = "10.10.10.10" we could have XYMSRV = "xymonhost" where "xymonhost" resolves in dns to 10.10.10.10? This would be a huge benefit where anytime a xymon server is migrated to another system eg underling EOL OS, one wouldn't have to go around changing every single client server's xymon configs to a new Ip...? all that would be required is a reset in an appropriate dns zonefile so dns just provides the new IP after the TTL passes etc. ??? cheers ian

1 0

Patch: ntpdate option -p deprecated
by roland＠spinnaker.de 13 Feb '24

13 Feb '24

Hi! In Debian ntpdate from ntpsec package throws a warning that "-p is no longer supported". So it may be a good idea to remove the "-p 1" from NTPDATEOPTS="-u -q -p 1" # Standard options to ntpdate in xymond/etcfiles/xymonserver.cfg.DIST. The attached patch solves this issue. Greetings Roland

4 7

Patch: PCRE2 support
by roland＠spinnaker.de 12 Feb '24

12 Feb '24

Hi! In https://bugs.debian.org/999921 Yavor Doganov provided a patch to convert xymon from outdated pcre3 to pcre2. Since I didn't see this patch here on the list, I'll forward it here. Currently it's against 4.3.30, but Yavor offered to rebase it on 4.4-alpha. It would be great if you could get rid of pcre3. Greetings Roland

1 1

Patch: Regenerating HTML man pages
by roland＠spinnaker.de 11 Feb '24

11 Feb '24

Hi, while building the Debian package of xymon I noticed two issues with re-generating the HTML man pages: a) Generating the man pages places the current day in the header, so the files cannot be generated reproducible (see https://en.wikipedia.org/wiki/Reproducible_builds) Using SOURCE_DATE_EPOCH (if it is set) solves this problem. b) Without "-H localhost" as parameter of man2html the generated HTML files differ from what is packaged in the tarball. So I added this option. The attached patch implements these two cases. Greetings Roland

1 0

Patch: Typo \fb instead of \fB in man pages
by roland＠spinnaker.de 11 Feb '24

11 Feb '24

Hi, I just noticed a little typo using \fb (use undefined font "b") instead of \fB (use bold font) in three of the man pages. The attached patch fixes this. Greetings Roland

1 0

Patch: Fix reading service banners from TLS-1.3-enabled hosts
by roland＠spinnaker.de 11 Feb '24

11 Feb '24

Hi, Andreas Oberritter analyzed and fixed the well known and often discussed issue with pop3s/imaps flapping in combination with TLS 1.3. See https://bugs.debian.org/930532 and https://salsa.debian.org/debian/xymon/-/merge_requests/1 I use this patch for many months now without any issues, so I'd like to see it applied in the official code. His patch is appended to this mail. Greetings Roland

1 0

Patch: Encoding of backslash in man pages
by roland＠spinnaker.de 11 Feb '24

11 Feb '24

Hi! According to groff(7) man page, "Printable backslashes must be denoted as \e". The attached patch replaces all \\ in the man pages by \e. Greetings Roland

1 0