Hi everyone,
I am having a problem with some of my disk reporting. Postgres requires 700 permissions on its data directory, which in my case is also a mount. That causes non-root users (xymon) to get a permission denied error when running checks like inode and df. I can't change the permissions on the directory or postgres won't start so the only other options I can come up with are to make xymon run as root (not a good idea), or have it use sudo to run its disk tests somehow. Anyone run into this before? Any words of wisdom on if it's possible to use sudo to run the df/inode tests in xymon?
Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy>
[cid:lzbVertical_hres.jpg]
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
I have always ran the Xymon client as root. It's never been a problem and make things easier. If that's not an option, change the xymonclient-linux.sh (or whatever OS you are using) and modify the "df" command to use sudo. I've done the same to modify the df command to tell it to monitor NFS mounted drives when desired.
I'll be watching this thread for a more elegant solution.
David
From: Scot Kreienkamp <Scot.Kreienkamp at la-z-boy.com> To: "xymon at xymon.com" <xymon at xymon.com> Date: 01/04/2017 10:43 AM Subject: [Xymon] Disk not being reported Sent by: "Xymon" <xymon-bounces at xymon.com>
Hi everyone,
I am having a problem with some of my disk reporting. Postgres requires 700 permissions on its data directory, which in my case is also a mount. That causes non-root users (xymon) to get a permission denied error when running checks like inode and df. I can’t change the permissions on the directory or postgres won’t start so the only other options I can come up with are to make xymon run as root (not a good idea), or have it use sudo to run its disk tests somehow. Anyone run into this before? Any words of wisdom on if it’s possible to use sudo to run the df/inode tests in xymon?
Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | ( 734-384-6403 | | ) 7349151444 | * Scot.Kreienkamp at la-z-boy.com www.la-z-boy.com | facebook.com/lazboy | twitter.com/lazboy | youtube.com/ lazboy
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you._______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
You could copy the df/inode fragments from the original client script and make up a script for root to run from cron every 5 minutes. Drop the output into a file that the Xymon client can read and just alter the client script to cat the file content. You won't need to give sudo to xymon for that.
Ralph Mitchell
On Wed, Jan 4, 2017 at 10:42 AM, Scot Kreienkamp < Scot.Kreienkamp at la-z-boy.com> wrote:
Hi everyone,
I am having a problem with some of my disk reporting. Postgres requires 700 permissions on its data directory, which in my case is also a mount. That causes non-root users (xymon) to get a permission denied error when running checks like inode and df. I can’t change the permissions on the directory or postgres won’t start so the only other options I can come up with are to make xymon run as root (not a good idea), or have it use sudo to run its disk tests somehow. Anyone run into this before? Any words of wisdom on if it’s possible to use sudo to run the df/inode tests in xymon?
*Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate* One La-Z-Boy Drive | Monroe, Michigan 48162 | ( 734-384-6403 <(734)%20384-6403> | | ) 7349151444 <(734)%20915-1444> | * Scot. Kreienkamp at la-z-boy.com <%7BE-mail%7D> www <http://www.la-z-boy.com/>.la-z-boy.com <http://www.la-z-boy.com/> | facebook. <https://www.facebook.com/lazboy>com <https://www.facebook.com/lazboy>/ <https://www.facebook.com/lazboy>lazboy <http://facebook.com/lazboy> | twitter.com/lazboy | youtube.com/ <https://www.youtube.com/user/lazboy>lazboy <https://www.youtube.com/user/lazboy>
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
David/Ralph,
The solution I finally settled on was very simple… for the xymon client user, the first location in the PATH environment variable is /usr/libexec/xymon-client. So I put a script called df in that directory with the sudo df command in it. Since it’s first in the path for the xymon user and not in anyone else’s path that fixes my problem for xymon while not affecting anyone else on the system. It is also minimally invasive, easily repeatable on all my other systems via puppet, and requires no future maintenance as I’m not changing any files that can be overwritten later.
Thanks!
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Ralph Mitchell Sent: Wednesday, January 4, 2017 11:09 AM To: Scot Kreienkamp Cc: xymon at xymon.com Subject: Re: [Xymon] Disk not being reported
You could copy the df/inode fragments from the original client script and make up a script for root to run from cron every 5 minutes. Drop the output into a file that the Xymon client can read and just alter the client script to cat the file content. You won't need to give sudo to xymon for that. Ralph Mitchell
On Wed, Jan 4, 2017 at 10:42 AM, Scot Kreienkamp <Scot.Kreienkamp at la-z-boy.com<mailto:Scot.Kreienkamp at la-z-boy.com>> wrote: Hi everyone,
I am having a problem with some of my disk reporting. Postgres requires 700 permissions on its data directory, which in my case is also a mount. That causes non-root users (xymon) to get a permission denied error when running checks like inode and df. I can’t change the permissions on the directory or postgres won’t start so the only other options I can come up with are to make xymon run as root (not a good idea), or have it use sudo to run its disk tests somehow. Anyone run into this before? Any words of wisdom on if it’s possible to use sudo to run the df/inode tests in xymon?
Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | • 734-384-6403<tel:(734)%20384-6403> | | • 7349151444<tel:(734)%20915-1444> | • Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy>
[cid:image001.jpg at 01D2667F.59049D00]
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon
Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | Office: 734-384-6403 | | Mobile: 7349151444 | Email: Scot.Kreienkamp at la-z-boy.com
participants (3)
-
ralphmitchell＠gmail.com
-
Scot.Kreienkamp＠la-z-boy.com
-
stuffle＠us.ibm.com