fping has to bet suid root so it can run.. there should be something in fping doc on how to do this.

From: Josh Luthman [mailto:josh at imaginenetworksllc.com] 
Sent: Wednesday, December 19, 2007 1:28 PM
To: hobbit at hswn.dk
Subject: Re: [hobbit] CONN status is white for all hosts


Modify the permissions so that the hobbit user can execute

fping!

Assuming your hobbit user is "hobbit" you'll need to either a)

change the group owner of /usr/sbin/fping to hobbit or b) add hobbit to group adm or c) make it so everyone can r-x /usr/sbin/fping

On 12/19/07, Frank M. Ramaekers <FRamaekers at ailife.com> wrote: 

	I've just got through installing a fresh version of

hobbit and now everything looks great except for the "conn" status which is showing up white and showing "Hobbit system error". bb-network.log : 2007-12-19 13:15:10 Could not run the command '/usr/sbin/fping -Ae' (exec failed) 2007-12-19 13:15:10 hobbitping invocation failed: Permission denied -rwsr-x--- 1 root adm 35281 Mar 7 2007 /usr/sbin/fping -rwsr-x--- 1 root hobbit 71927 Apr 13 2007 /usr/libexec/hobbit/server/bin/hobbitping TIA, Frank M. Ramaekers Jr. Systems Programmer MCP, MCP+I, MCSE & RHCE American Income Life Insurance Co. Phone: (254)761-6649 1200 Wooded Acres Dr. Fax: (254)741-5777 Waco, Texas 76701 _____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct at ailife.com. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

-- 
Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it,

poorly. --- Henry Spencer

UNIX/Linux thing -- you have to be root to use a privileged port ( < 1024) unless SELinux gets around it. The first entry in your list below shows the "set uid" bit has been set, which means /usr/sbin/fping will run as root:adm no matter who launches it. Your particular Linux distribution/package output is not necessarily representative of all systems, Josh.

By the way, I for one admire the way you have quickly advanced from "Hobbit newbie" to a key person who tries to help others on this list...

Happy Holidays!

GLH

From: Josh Luthman [mailto:josh at imaginenetworksllc.com] 
Sent: Wednesday, December 19, 2007 1:40 PM
To: hobbit at hswn.dk
Subject: Re: [hobbit] CONN status is white for all hosts


I didn't say anything about user name - only the group or

global.

Your options are...

-rwsr-xr-x 1 root adm 35281 Mar  7  2007 /usr/sbin/fping
-rwsr-x--- 1 root adm 35281 Mar  7  2007 /usr/sbin/fping #add

hobbituser to group adm -rwsr-x--- 1 root hobbit 35281 Mar 7 2007 /usr/sbin/fping #add hobbituser to group adm

On 12/19/07, Hubbard, Greg L < greg.hubbard at eds.com

<mailto:greg.hubbard at eds.com> > wrote:

	fping has to bet suid root so it can run.. there should

be something in fping doc on how to do this.

		From: Josh Luthman

[mailto:josh at imaginenetworksllc.com] Sent: Wednesday, December 19, 2007 1:28 PM To: hobbit at hswn.dk Subject: Re: [hobbit] CONN status is white for all hosts Modify the permissions so that the hobbit user can execute fping! Assuming your hobbit user is "hobbit" you'll need to either a) change the group owner of /usr/sbin/fping to hobbit or b) add hobbit to group adm or c) make it so everyone can r-x /usr/sbin/fping On 12/19/07, Frank M. Ramaekers <FRamaekers at ailife.com> wrote:

			I've just got through installing a fresh

version of hobbit and now everything looks great except for the "conn" status which is showing up white and showing "Hobbit system error". bb-network.log : 2007-12-19 13:15:10 Could not run the command '/usr/sbin/fping -Ae' (exec failed) 2007-12-19 13:15:10 hobbitping invocation failed: Permission denied -rwsr-x--- 1 root adm 35281 Mar 7 2007 /usr/sbin/fping -rwsr-x--- 1 root hobbit 71927 Apr 13 2007

/usr/libexec/hobbit/server/bin/hobbitping TIA, Frank M. Ramaekers Jr. Systems Programmer MCP, MCP+I, MCSE & RHCE American Income Life Insurance Co. Phone: (254)761-6649 1200 Wooded Acres Dr. Fax: (254)741-5777 Waco, Texas 76701

			This message contains information which

is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct at ailife.com. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

		-- 
		Josh Luthman
		Office: 937-552-2340
		Direct: 937-552-2343
		1100 Wayne St
		Suite 1337
		Troy, OH 45373
		
		Those who don't understand UNIX are condemned to

reinvent it, poorly. --- Henry Spencer

-- 
Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it,

poorly. --- Henry Spencer

On Dec 19, 2007 2:14 PM, Frank M. Ramaekers <FRamaekers at ailife.com> wrote:

I tried that and it didn't help:

2007-12-19 14:09:19 Could not run the command '/usr/sbin/fping -Ae' (exec failed)

2007-12-19 14:09:19 hobbitping invocation failed: Permission denied

/etc/group

adm:x:4:root,adm,daemon,hobbit

Did you stop and restart hobbit after changing the /etc/group file?? If you start it in a terminal window, you'll probably need to logout and log back in.

Ralph Mitchell

Seems that I CAN do that:

su - hobbit

-bash-3.1$ /usr/sbin/fping 4.2.2.2

4.2.2.2 is alive

-bash-3.1$

and

sudo -u hobbit fping 4.2.2.2

4.2.2.2 is alive

So, perhaps it has to do with hobbitping?

Frank M. Ramaekers Jr.

Systems Programmer

MCP, MCP+I, MCSE & RHCE

American Income Life Insurance Co.

Phone: (254)761-6649

1200 Wooded Acres Dr.

Fax: (254)741-5777

Waco, Texas 76701

From: Josh Luthman [mailto:josh at imaginenetworksllc.com] Sent: Wednesday, December 19, 2007 2:40 PM To: hobbit at hswn.dk Subject: Re: [hobbit] CONN status is white for all hosts

Do an su hobbit Then try /usr/sbin/fping 4.2.2.2 and see if you can execute it there.

On 12/19/07, Ralph Mitchell < ralphmitchell at gmail.com <mailto:ralphmitchell at gmail.com> > wrote:

On Dec 19, 2007 2:14 PM, Frank M. Ramaekers < FRamaekers at ailife.com> wrote:

I tried that and it didn't help:

 

2007-12-19 14:09:19 Could not run the command '/usr/sbin/fping

-Ae' (exec failed)

2007-12-19 14:09:19 hobbitping invocation failed: Permission

denied

/etc/group

 

adm:x:4:root,adm,daemon,hobbit

Did you stop and restart hobbit after changing the /etc/group file?? If you start it in a terminal window, you'll probably need to logout and log back in.

Ralph Mitchell

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct at ailife.com.

]# grep -i ping /etc/hobbit/hobbitserver.cfg

Make sure the path includes the directories where you have fping, mail

and (optionally) ntpdate installed,

PINGCOLUMN="conn" # Column where the ping-test reports results.

CONNTEST="TRUE" # Should we 'ping' hosts ?

FPING="/usr/sbin/fping" # Path and options for the ping program.

TRACEROUTE="traceroute" # How to do traceroute on failing ping tests. Requires "trace" in bb-hosts.

TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tc p,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sen dmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy ,hobbitd,files,procs=processes,ports,clock,lines"

Frank M. Ramaekers Jr.

Systems Programmer

MCP, MCP+I, MCSE & RHCE

American Income Life Insurance Co.

Phone: (254)761-6649

1200 Wooded Acres Dr.

Fax: (254)741-5777

Waco, Texas 76701

From: Josh Luthman [mailto:josh at imaginenetworksllc.com] Sent: Wednesday, December 19, 2007 2:54 PM To: hobbit at hswn.dk Subject: Re: [hobbit] CONN status is white for all hosts

Can you do a

grep -i ping ~hobbit/server/etc/hobbitserver.cfg

then tell us what the FPING= is declared as, please?

On 12/19/07, Frank M. Ramaekers <FRamaekers at ailife.com> wrote:

Seems that I CAN do that:

su - hobbit

-bash-3.1$ /usr/sbin/fping 4.2.2.2

4.2.2.2 is alive

-bash-3.1$

and

sudo -u hobbit fping 4.2.2.2

4.2.2.2 is alive

So, perhaps it has to do with hobbitping?

Frank M. Ramaekers Jr.

Systems Programmer

MCP, MCP+I, MCSE & RHCE

American Income Life Insurance Co.

Phone: (254)761-6649

1200 Wooded Acres Dr.

Fax: (254)741-5777

Waco , Texas 76701

From: Josh Luthman [mailto:josh at imaginenetworksllc.com] Sent: Wednesday, December 19, 2007 2:40 PM To: hobbit at hswn.dk Subject: Re: [hobbit] CONN status is white for all hosts

Do an su hobbit Then try /usr/sbin/fping 4.2.2.2 and see if you can execute it there.

On 12/19/07, Ralph Mitchell < ralphmitchell at gmail.com <mailto:ralphmitchell at gmail.com> > wrote:

On Dec 19, 2007 2:14 PM, Frank M. Ramaekers < FRamaekers at ailife.com> wrote:

I tried that and it didn't help:

 

2007-12-19 14:09:19 Could not run the command '/usr/sbin/fping

-Ae' (exec failed)

2007-12-19 14:09:19 hobbitping invocation failed: Permission

denied

/etc/group

 

adm:x:4:root,adm,daemon,hobbit

Did you stop and restart hobbit after changing the /etc/group file?? If you start it in a terminal window, you'll probably need to logout and log back in.

Ralph Mitchell

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

_____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct at ailife.com.

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer

This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct at ailife.com.

Well every *nix machine I've seen that is not Knoppix always has had...

-> ls -l which ping -rwsr-xr-x 1 root root 33272 Jan 1 2006 /bin/ping*

On 12/19/07, Frank M. Ramaekers <FRamaekers at ailife.com> wrote:

Yes. I was su'ed as root and just 'service hobbit restart'. Still the same problem. I notice in my previous installation I simply turn-on world execute:

-rwsr-x--x 1 root adm 29850 Feb 16 2005 fping

But I don't think that is the proper solution, although probably not a problem in my case since my system will not have "real" users.

Thanks,

Frank M. Ramaekers Jr.

Systems Programmer

MCP, MCP+I, MCSE & RHCE

American Income Life Insurance Co.

Phone: (254)761-6649

1200 Wooded Acres Dr.

Fax: (254)741-5777

Waco, Texas 76701

---

*From:* Ralph Mitchell [mailto:ralphmitchell at gmail.com] *Sent:* Wednesday, December 19, 2007 2:30 PM *To:* hobbit at hswn.dk *Subject:* Re: [hobbit] CONN status is white for all hosts

On Dec 19, 2007 2:14 PM, Frank M. Ramaekers <FRamaekers at ailife.com> wrote:

I tried that and it didn't help:

2007-12-19 14:09:19 Could not run the command '/usr/sbin/fping -Ae' (exec failed)

2007-12-19 14:09:19 hobbitping invocation failed: Permission denied

/etc/group

adm:x:4:root,adm,daemon,hobbit

Did you stop and restart hobbit after changing the /etc/group file?? If you start it in a terminal window, you'll probably need to logout and log back in.

Ralph Mitchell _____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at PrivacyAct at ailife.com.

-- Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

Those who don't understand UNIX are condemned to reinvent it, poorly. --- Henry Spencer