From johnf@sac.sfbay.sun.com Thu Nov 5 08:16:37 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nA5GGbr7016448 for ; Thu, 5 Nov 2009 08:16:37 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nA5GGbBc026450; Thu, 5 Nov 2009 08:16:37 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSN00E3J97KVP00@nwk-avmta-2.sfbay.sun.com>; Thu, 05 Nov 2009 08:16:32 -0800 (PST) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSN004EW97HJ7D0@nwk-avmta-2.sfbay.sun.com>; Thu, 05 Nov 2009 08:16:29 -0800 (PST) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nA5GGQnO010208; Thu, 05 Nov 2009 08:16:26 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nA5GGP9m016443; Thu, 05 Nov 2009 08:16:25 -0800 (PST) Received: (from johnf@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id nA5GGPxL016439; Thu, 05 Nov 2009 08:16:25 -0800 (PST) Date: Thu, 05 Nov 2009 08:16:25 -0800 (PST) From: John Fischer Subject: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] To: LSARC-ext@sun.com Cc: Deepti.Vaidya@sun.com, Spoorthy.Shankarmurthy@sun.com Message-id: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 2884 Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI This information is Copyright 2009 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: NRPE - nagios-addons 1.2. Name of Document Author/Supplier: Author: Spoorthy Shankarmurthy 1.3 Date of This Document: 05 November, 2009 4. Technical Description Summary ======= NRPE is an addon that allows you to execute Nagios plugins on remote Linux/Unix hosts. This is useful if you need to monitor local resources/attributes like disk usage, CPU load, memory usage, etc. on a remote host. Similiar functionality can be accomplished by using the check_by_ssh plugin, although it can impose a higher CPU load on the monitoring machine - especially if you are monitoring hundreds or thousands of hosts. There are two pieces to this addon: 1) NRPE - This program runs as a background process on the remote host and processes command execution requests from the check_nrpe plugin on the Nagios host. Upon receiving a plugin request from an authorized host, it will execute the command line associated with the command name it received and send the program output and return code back to the check_nrpe plugin 2) check_nrpe - This is a plugin that is run on the Nagios host and is used to contact the NRPE process on remote hosts. The plugin requests that a plugin be executed on the remote host and wait for the NRPE process to execute the plugin and return the result. The plugin then uses the output and return code from the plugin execution on the remote host for its own output and return code. The latest version of Nagios-addons is 2.12 and will be installed as SUNWnrpe package. This project is targetting a Minor release of Solaris. Dependencies ============ SUNWnagiosr, SUNWnagiosu, SUNWnagios-plugins Interfaces ========== The SUNWnrper and SUNWnrpeu packages are Uncommitted. The remaining interfaces are Volatile. Exported Interfaces ------------------- /usr/bin/nrpe - NRPE Executable /usr/lib/check_nrpe /usr/etc/nrpe.cfg - NRPE Configuaration file /var/svc/manifest/network/nrpe-tcp.xml - NRPE xml file to start service Imported Interfaces ------------------- Nagios -- Uncommitted LSARC 2009/603 Reference Documents =================== [1] www.nagios.org [2] http://nagios.sourceforge.net/docs/3_0/addons.html [3] nrpe.png -- NRPE direct architecture diagram [4] indirect-nrpe.png -- NRPE indirect architecture diagram 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: SFW 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Alan.Coopersmith@sun.com Thu Nov 5 08:22:47 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nA5GMjlt016681 for ; Thu, 5 Nov 2009 08:22:46 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nA5GMb4a006657 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 5 Nov 2009 16:22:45 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSN00J4R9HWYK00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 09:22:44 -0700 (MST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSN0082O9HSWH70@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 09:22:40 -0700 (MST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nA5GMeUl017275 for ; Thu, 05 Nov 2009 08:22:40 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSN00F009556F00@fe-sfbay-10.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 08:22:40 -0800 (PST) Received: from [129.145.155.53] ([unknown] [129.145.155.53]) by fe-sfbay-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSN00FZ99HQ2C90@fe-sfbay-10.sun.com>; Thu, 05 Nov 2009 08:22:38 -0800 (PST) Date: Thu, 05 Nov 2009 08:22:38 -0800 From: Alan Coopersmith Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> Sender: Alan.Coopersmith@sun.com To: John Fischer Cc: LSARC-ext@sun.com, Deepti.Vaidya@sun.com, Spoorthy.Shankarmurthy@sun.com Message-id: <4AF2FBCE.1070103@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Enigmail-Version: 0.95.1 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.22 (X11/20090720) Status: RO Content-Length: 226 John Fischer wrote: > /usr/etc/nrpe.cfg - NRPE Configuaration file /usr/etc ? Shouldn't that be just /etc? -- -Alan Coopersmith- alan.coopersmith@sun.com Sun Microsystems, Inc. - X Window System Engineering From John.Fischer@sun.com Thu Nov 5 08:25:37 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nA5GPZCU016790 for ; Thu, 5 Nov 2009 08:25:36 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id nA5GPXat028279 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 6 Nov 2009 00:25:35 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSN00F079MLCL00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 08:25:33 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSN004N69MKJGE0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 08:25:32 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nA5GPWUl025952 for ; Thu, 05 Nov 2009 16:25:32 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSN00B008VIMA00@mail-amer.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 09:25:32 -0700 (MST) Received: from [192.168.10.4] ([unknown] [76.20.56.47]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSN00MQ89M2C4B0@mail-amer.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 09:25:15 -0700 (MST) Date: Thu, 05 Nov 2009 08:22:17 -0800 From: John Fischer Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> Sender: John.Fischer@sun.com Cc: LSARC-ext@sun.com, Spoorthy.Shankarmurthy@sun.com, Deepti.Vaidya@sun.com Reply-to: John.Fischer@sun.com Message-id: <4AF2FBB9.1060707@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20090929) Status: RO Content-Length: 3607 LSARC, I am sponsoring this fast track for Spoorthy Shankarmurthy. The case directory contains this proposal and a couple of architecture diagrams. I have set the timeout for Thursday, November 12th, 2009. This project proposes to include the NRPE Nagios addon into a Minor release of Solaris. This plugin allows the system administrator to monitor system resources and attributes like CPU load, disk usage and memory usage. This project depends upon the Nagios interfaces (see LSARC 2009/603 for details) and will not be delivered until those interfaces are approved and delivered. Thanks, John Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI This information is Copyright 2009 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: NRPE - nagios-addons 1.2. Name of Document Author/Supplier: Author: Spoorthy Shankarmurthy 1.3 Date of This Document: 05 November, 2009 4. Technical Description Summary ======= NRPE is an addon that allows you to execute Nagios plugins on remote Linux/Unix hosts. This is useful if you need to monitor local resources/attributes like disk usage, CPU load, memory usage, etc. on a remote host. Similiar functionality can be accomplished by using the check_by_ssh plugin, although it can impose a higher CPU load on the monitoring machine - especially if you are monitoring hundreds or thousands of hosts. There are two pieces to this addon: 1) NRPE - This program runs as a background process on the remote host and processes command execution requests from the check_nrpe plugin on the Nagios host. Upon receiving a plugin request from an authorized host, it will execute the command line associated with the command name it received and send the program output and return code back to the check_nrpe plugin 2) check_nrpe - This is a plugin that is run on the Nagios host and is used to contact the NRPE process on remote hosts. The plugin requests that a plugin be executed on the remote host and wait for the NRPE process to execute the plugin and return the result. The plugin then uses the output and return code from the plugin execution on the remote host for its own output and return code. The latest version of Nagios-addons is 2.12 and will be installed as SUNWnrpe package. This project is targetting a Minor release of Solaris. Dependencies ============ SUNWnagiosr, SUNWnagiosu, SUNWnagios-plugins Interfaces ========== The SUNWnrper and SUNWnrpeu packages are Uncommitted. The remaining interfaces are Volatile. Exported Interfaces ------------------- /usr/bin/nrpe - NRPE Executable /usr/lib/check_nrpe /usr/etc/nrpe.cfg - NRPE Configuaration file /var/svc/manifest/network/nrpe-tcp.xml - NRPE xml file to start service Imported Interfaces ------------------- Nagios -- Uncommitted LSARC 2009/603 Reference Documents =================== [1] www.nagios.org [2] http://nagios.sourceforge.net/docs/3_0/addons.html [3] nrpe.png -- NRPE direct architecture diagram [4] indirect-nrpe.png -- NRPE indirect architecture diagram 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: SFW 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open _______________________________________________ opensolaris-arc mailing list opensolaris-arc@opensolaris.org From Darren.Moffat@Sun.COM Thu Nov 5 08:40:19 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nA5GeI5I017344 for ; Thu, 5 Nov 2009 08:40:19 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id nA5GeGXr005758 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 6 Nov 2009 00:40:17 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSN00G09AB32P00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 08:40:15 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSN004RJAB2JJE0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 08:40:15 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nA5GeDXh026321 for ; Thu, 05 Nov 2009 16:40:13 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSN00700A53ZD00@fe-emea-09.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 05 Nov 2009 16:40:11 +0000 (GMT) Received: from [192.168.1.105] (cpc2-rdng20-2-0-cust917.15-3.cable.virginmedia.com [86.28.167.150]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSN006M2AAHNVD0@fe-emea-09.sun.com>; Thu, 05 Nov 2009 16:39:58 +0000 (GMT) Date: Thu, 05 Nov 2009 16:39:53 +0000 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> Sender: Darren.Moffat@Sun.COM To: John Fischer Cc: LSARC-ext@Sun.COM, Deepti.Vaidya@Sun.COM, Spoorthy.Shankarmurthy@Sun.COM Message-id: <4AF2FFD9.1010407@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20090929) Status: RO Content-Length: 856 John Fischer wrote: > The SUNWnrper and SUNWnrpeu packages are Uncommitted. Same comment as on the main Nagios case lets stop pretending we need separate root and usr packages. > The remaining interfaces are Volatile. > > Exported Interfaces > ------------------- > /usr/bin/nrpe - NRPE Executable > /usr/lib/check_nrpe > /usr/etc/nrpe.cfg - NRPE Configuaration file Same comment as the Nagios case we don't have and you won't be creating a /usr/etc on OpenSolaris. > /var/svc/manifest/network/nrpe-tcp.xml - NRPE xml file to start service Why is the SMF XML file Volatile ? It should be Project Private. The interface is the SMF FMRI not the xml file. What is the FMRI ? Does the FMRI for nrpe depend on the nagios FMRI on the local machine ? What user/group/privileges does the SMF manifest start nrpe with ? -- Darren J Moffat From mark.carlson@sun.com Tue Nov 10 08:58:16 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAAGwF7F016331 for ; Tue, 10 Nov 2009 08:58:16 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id nAAGwBn6013219 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 11 Nov 2009 00:58:14 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSW00801KH1EV00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 10 Nov 2009 08:58:13 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSW0026XKH1F590@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 10 Nov 2009 08:58:13 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAAGwDnl021516 for ; Tue, 10 Nov 2009 16:58:13 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSW00I00JESS400@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 10 Nov 2009 09:58:13 -0700 (MST) Received: from vpn-129-150-64-10.east.sun.com ([unknown] [129.150.64.10]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSW00AQXKGLS5E0@mail-amer.sun.com>; Tue, 10 Nov 2009 09:58:02 -0700 (MST) Date: Tue, 10 Nov 2009 09:57:56 -0700 From: "Mark A. Carlson" Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AF2FFD9.1010407@Sun.COM> Sender: mark.carlson@sun.com To: Darren J Moffat Cc: John Fischer , Spoorthy.Shankarmurthy@sun.com, Deepti.Vaidya@sun.com, LSARC-ext@sun.com Message-id: <4AF99B94.1020507@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Status: RO Content-Length: 81 The outstanding issues on this case do not seem to have been addressed. -- mark From John.Fischer@Sun.COM Tue Nov 10 10:10:10 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAAIA9IP018391 for ; Tue, 10 Nov 2009 10:10:09 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nAAIA16f025934 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 10 Nov 2009 18:10:08 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSW00H1PNSUFD00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 10 Nov 2009 10:10:06 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSW00GUUNSSJ900@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 10 Nov 2009 10:10:05 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAAIA4iT002650 for ; Tue, 10 Nov 2009 18:10:04 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSW00000M9UDZ00@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 10 Nov 2009 11:10:04 -0700 (MST) Received: from [129.146.227.19] ([unknown] [129.146.227.19]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSW002RCNS397G0@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 10 Nov 2009 11:09:40 -0700 (MST) Date: Tue, 10 Nov 2009 10:06:41 -0800 From: John Fischer Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AF99B94.1020507@sun.com> Sender: John.Fischer@Sun.COM To: "Mark A. Carlson" Cc: Darren J Moffat , Spoorthy.Shankarmurthy@Sun.COM, Deepti.Vaidya@Sun.COM, LSARC-ext@Sun.COM Reply-to: John.Fischer@Sun.COM Message-id: <4AF9ABB1.2040302@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 180 Correct. I have asked the project owner to respond. Thanks, John Mark A. Carlson wrote: > The outstanding issues on this case do not seem to have been addressed. > > -- mark From Spoorthy.Shankarmurthy@sun.com Wed Nov 11 01:56:31 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAB9uUfP019416 for ; Wed, 11 Nov 2009 01:56:30 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nAB9uQf2011928 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 11 Nov 2009 09:56:29 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSX00L05VM43400@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 01:56:28 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSX008OQVM2S8B0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 01:56:27 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAB9uPEF013221 for ; Wed, 11 Nov 2009 09:56:25 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSX00I00VL8I500@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 17:56:25 +0800 (SGT) Received: from [129.158.230.241] ([unknown] [129.158.230.241]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSX0035FVLWYDA0@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 17:56:25 +0800 (SGT) Date: Wed, 11 Nov 2009 15:21:40 +0530 From: "Spoorthy H.S " Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AF9ABB1.2040302@sun.com> Sender: Spoorthy.Shankarmurthy@sun.com To: John.Fischer@sun.com Cc: "Mark A. Carlson" , Darren J Moffat , Deepti.Vaidya@sun.com, LSARC-ext@sun.com Message-id: <4AFA892C.8030908@sun.com> Organization: Sun Microsystems India MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_VtOWUD/GP/qJ/W7WJeNXqg)" X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> User-Agent: Thunderbird 2.0.0.4 (X11/20070622) Status: RO Content-Length: 3048 This is a multi-part message in MIME format. --Boundary_(ID_VtOWUD/GP/qJ/W7WJeNXqg) Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT Hi John, I have attached the modified ARC one pager. Thanks Spoorthy John Fischer wrote: > Correct. I have asked the project owner to respond. > > Thanks, > > John > > > Mark A. Carlson wrote: >> The outstanding issues on this case do not seem to have been addressed. >> >> -- mark --Boundary_(ID_VtOWUD/GP/qJ/W7WJeNXqg) Content-type: text/plain; name=NRPE-ARC~ Content-transfer-encoding: 7BIT Content-disposition: inline; filename=NRPE-ARC~ Summary ======= NRPE is an addon that allows you to execute Nagios plugins on remote Linux/Unix hosts. This is useful if you need to monitor local resources/attributes like disk usage, CPU load, memory usage, etc. on a remote host. Similiar functionality can be accomplished by using the check_by_ssh plugin, although it can impose a higher CPU load on the monitoring machine - especially if you are monitoring hundreds or thousands of hosts. There are two pieces to this addon: 1) NRPE - This program runs as a background process on the remote host and processes command execution requests from the check_nrpe plugin on the Nagios host. Upon receiving a plugin request from an authorized host, it will execute the command line associated with the command name it received and send the program output and return code back to the check_nrpe plugin 2) check_nrpe - This is a plugin that is run on the Nagios host and is used to contact the NRPE process on remote hosts. The plugin requests that a plugin be executed on the remote host and wait for the NRPE process to execute the plugin and return the result. The plugin then uses the output and return code from the plugin execution on the remote host for its own output and return code. The latest version of Nagios-addons is 2.12 and will be installed as SUNWnrper and SUNWnrpeu package. Dependencies ============ SUNWnagiosr, SUNWnagiosu,SUNWnagios-plugins Interfaces ========== The SUNWnrper and SUNWnrpeu packages are Uncommitted. The remaining interfaces are Volatile. Exported Interfaces ------------------- /usr/bin/nrpe - NRPE Executable /usr/lib/nagios/check_nrpe /etc/nagios/nrpe.cfg - NRPE Configuaration file /var/svc/manifest/network/nrpe-tcp.xml - This is Project Private. Its an xml file to start NRPE daemon service Imported Interfaces ------------------- SUNWipfh Nagios -- Uncommitted LSARC 2009/603 Reference Documents =================== [1] www.nagios.org [2] http://nagios.sourceforge.net/docs/3_0/addons.html [3] nrpe.png -- NRPE direct architecture diagram [4] indirect-nrpe.png -- NRPE indirect architecture diagram --Boundary_(ID_VtOWUD/GP/qJ/W7WJeNXqg)-- From Darren.Moffat@sun.com Wed Nov 11 08:29:23 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nABGTNq1026808 for ; Wed, 11 Nov 2009 08:29:23 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id nABGTIsX004368 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 11 Nov 2009 09:29:23 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSY0001ZDSXEI00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 08:29:21 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSY0000GDSWE800@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 08:29:21 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nABGTJSp025943 for ; Wed, 11 Nov 2009 16:29:20 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSY00400D87OV00@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 16:28:55 +0000 (GMT) Received: from [10.0.189.215] ([unknown] [192.18.41.196]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSY00CPODRZH730@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 16:28:51 +0000 (GMT) Date: Wed, 11 Nov 2009 08:28:47 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFA892C.8030908@sun.com> Sender: Darren.Moffat@sun.com To: "Spoorthy H.S" Cc: John.Fischer@sun.com, "Mark A. Carlson" , Deepti.Vaidya@sun.com, LSARC-ext@sun.com Message-id: <4AFAE63F.7080802@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 490 The FMRI is still not listed in the case material. The manifest XML file is not sufficient, and in fact isn't actually that interesting because nothing can depend on it. The FMRI is the interface the admin sees and that other things can depend on so it must be listed in the case. Also what is the method credentials used to start the service ? What uid/gid does it run with, does it run with any privileges (other than basic - and does it even need those ?) -- Darren J Moffat From Darren.Moffat@sun.com Wed Nov 11 08:29:48 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nABGTlA4026822 for ; Wed, 11 Nov 2009 08:29:47 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nABGTgTT024164 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 11 Nov 2009 16:29:46 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSY00B0HDTK4I00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 08:29:44 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSY00610DTJWR70@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 08:29:44 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nABGTgEX026003 for ; Wed, 11 Nov 2009 16:29:42 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSY00100DKWDA00@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 16:29:35 +0000 (GMT) Received: from [10.0.189.215] ([unknown] [192.18.41.196]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSY00JMCDT35D40@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 16:29:31 +0000 (GMT) Date: Wed, 11 Nov 2009 08:29:26 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFA892C.8030908@sun.com> Sender: Darren.Moffat@sun.com To: "Spoorthy H.S" Cc: John.Fischer@sun.com, "Mark A. Carlson" , Deepti.Vaidya@sun.com, LSARC-ext@sun.com Message-id: <4AFAE666.1080905@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 145 Why is SUNWipfh (which is a package name) listed as an imported interface ? What is actually being imported from IPfilter ? -- Darren J Moffat From Spoorthy.Shankarmurthy@sun.com Wed Nov 11 09:40:53 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nABHerC8029613 for ; Wed, 11 Nov 2009 09:40:53 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nABHeqav002059 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 11 Nov 2009 09:40:53 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSY0042VH44QL00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 09:40:52 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSY000Y4H42EA40@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 09:40:51 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nABHeopo023423 for ; Wed, 11 Nov 2009 17:40:50 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSY00K00GNARZ00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 01:40:50 +0800 (SGT) Received: from [192.168.1.2] (ABTS-KK-dynamic-038.54.172.122.airtelbroadband.in [122.172.54.38]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSY00LNCH3UGEC0@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 01:40:50 +0800 (SGT) Date: Wed, 11 Nov 2009 23:10:43 +0530 From: spoorthy Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFAE666.1080905@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFAF71B.9030503@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE666.1080905@Sun.COM> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 289 Sorry for the same... SUNWipfh is a package nrpe depends on. So, this should be listed in Dependencies. Darren J Moffat wrote: > Why is SUNWipfh (which is a package name) listed as an imported > interface ? > > What is actually being imported from IPfilter ? > > -- > Darren J Moffat From Darren.Moffat@sun.com Wed Nov 11 10:15:59 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nABIFx5A001531 for ; Wed, 11 Nov 2009 10:15:59 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nABIFvd9016661 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 11 Nov 2009 10:15:59 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSY00K09IQNN100@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 11:15:59 -0700 (MST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSY00EZCIQLKE50@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 11:15:58 -0700 (MST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nABIFvrQ004032 for ; Wed, 11 Nov 2009 18:15:57 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSY00A00IN4GN00@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 18:15:32 +0000 (GMT) Received: from [10.0.189.215] ([unknown] [192.18.41.196]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSY00C9ZIPQH760@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 18:15:30 +0000 (GMT) Date: Wed, 11 Nov 2009 10:15:25 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFAF71B.9030503@sun.com> Sender: Darren.Moffat@sun.com To: spoorthy Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFAFF3D.3050604@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE666.1080905@Sun.COM> <4AFAF71B.9030503@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 497 spoorthy wrote: > Sorry for the same... SUNWipfh is a package nrpe depends on. So, this > should be listed in Dependencies. So nrpe includes IPfilter header files ? What IPfilter APIs is it consuming - that is your imported interface not the package name that contains the headers. Also the SUNWipfh package really shouldn't be a package dependency since it only has header files in it. If nrpe really uses the IPfilter header files at runtime then I'm very worried. -- Darren J Moffat From Spoorthy.Shankarmurthy@sun.com Wed Nov 11 20:07:42 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAC47fuE016932 for ; Wed, 11 Nov 2009 20:07:41 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nAC47SAV017934 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 04:07:40 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSZ00103A4P5400@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 20:07:37 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSZ000CLA4OFO30@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Wed, 11 Nov 2009 20:07:37 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAC47aqb010452 for ; Thu, 12 Nov 2009 04:07:36 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSZ00D009U1HR00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 12:07:36 +0800 (SGT) Received: from [192.168.1.2] (ABTS-KK-dynamic-051.108.172.122.airtelbroadband.in [122.172.108.51]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSZ00LDIA4DGEK0@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 12:07:35 +0800 (SGT) Date: Thu, 12 Nov 2009 09:37:26 +0530 From: spoorthy Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFAFF3D.3050604@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFB89FE.2030807@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE666.1080905@Sun.COM> <4AFAF71B.9030503@sun.com> <4AFAFF3D.3050604@Sun.COM> User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) Status: RO Content-Length: 790 The file under /include/config.h needs this line "#include " to get appended so that the package works on opensolaris. So, I guess it uses the ipfilter header files. I am not sure what will be problem with its usage. Thanks Spoorthy Darren J Moffat wrote: > spoorthy wrote: >> Sorry for the same... SUNWipfh is a package nrpe depends on. So, this >> should be listed in Dependencies. > > So nrpe includes IPfilter header files ? What IPfilter APIs is it > consuming - that is your imported interface not the package name that > contains the headers. > > Also the SUNWipfh package really shouldn't be a package dependency > since it only has header files in it. If nrpe really uses the > IPfilter header files at runtime then I'm very worried. > From Spoorthy.Shankarmurthy@sun.com Thu Nov 12 01:51:02 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAC9p2fT004404 for ; Thu, 12 Nov 2009 01:51:02 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id nAC9p18x018717 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 02:51:02 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSZ00C0FQ11NP00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 01:51:01 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSZ0081TQ10RN50@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 01:51:01 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAC9p0Mu029460 for ; Thu, 12 Nov 2009 09:51:00 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSZ00E00Q0Z5D00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:51:00 +0800 (SGT) Received: from [129.150.146.17] ([unknown] [129.150.146.17]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSZ00FOGQ0FKH90@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:50:59 +0800 (SGT) Date: Thu, 12 Nov 2009 15:20:35 +0530 From: Spoorthy H S Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFAE63F.7080802@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFBDA6B.20602@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) Status: RO Content-Length: 670 FMRI will be as svc:/network/nrpe/tcp:default To start the service, it needs root privilages. gid and uid i'm not assigning as in Nagios. Thanks Spoorthy Darren J Moffat wrote: > The FMRI is still not listed in the case material. > > The manifest XML file is not sufficient, and in fact isn't actually > that interesting because nothing can depend on it. The FMRI is the > interface the admin sees and that other things can depend on so it > must be listed in the case. > > Also what is the method credentials used to start the service ? What > uid/gid does it run with, does it run with any privileges (other than > basic - and does it even need those ?) > From Darren.Moffat@Sun.COM Thu Nov 12 08:49:41 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACGneBV011444 for ; Thu, 12 Nov 2009 08:49:41 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nACGnd1d003237 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 16:49:40 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00005H9EQG000@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 08:49:38 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT000LW29EO0R00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 08:49:37 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nACGnZ8t015738 for ; Thu, 12 Nov 2009 16:49:36 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT00050066O6R00@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 16:49:30 +0000 (GMT) Received: from [192.168.2.108] (99-52-200-208.lightspeed.snjsca.sbcglobal.net [99.52.200.208]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT0007809E7EZD0@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 16:49:22 +0000 (GMT) Date: Thu, 12 Nov 2009 08:49:20 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFBDA6B.20602@sun.com> Sender: Darren.Moffat@Sun.COM To: Spoorthy H S Cc: John.Fischer@Sun.COM, "Mark A. Carlson" , LSARC-ext@Sun.COM Message-id: <4AFC3C90.5040904@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 339 Spoorthy H S wrote: > FMRI will be as svc:/network/nrpe/tcp:default Why is "tcp" in the FMRI ? That implies that there could be a network/npre/udp or something else. > To start the service, it needs root privilages. gid and uid i'm not > assigning as in Nagios. What does it do that requires it to run as root ? -- Darren J Moffat From Spoorthy.Shankarmurthy@Sun.COM Thu Nov 12 09:35:19 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACHZJRt013215 for ; Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nACHZJWC001267 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00070FBIVH100@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT0001WABIU0MC0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nACHZHRB029858 for ; Thu, 12 Nov 2009 17:35:17 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000100BDJ9000@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:35:17 +0800 (SGT) Received: from [192.168.1.2] (ABTS-KK-dynamic-079.56.172.122.airtelbroadband.in [122.172.56.79]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT0002VEBISQHC0@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:35:17 +0800 (SGT) Date: Thu, 12 Nov 2009 23:05:16 +0530 From: Spoorthy H S Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC3C90.5040904@Sun.COM> Sender: Spoorthy.Shankarmurthy@Sun.COM To: Darren J Moffat Cc: John.Fischer@Sun.COM, "Mark A. Carlson" , LSARC-ext@Sun.COM Message-id: <4AFC4754.3070004@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) Status: RO Content-Length: 877 To monitor some system services, we start nrpe from root. Without root privilage also, we can start this service. tcp is in FMRI since i am using the autogenerated nrpe.xml file. NRPE required xinet service which is unavailable in solaris AFIK. I got info from some link http://tarique21.wordpress.com/2009/08/23/binding-nrpe-with-inetdxinetd-on-solaris-10/ to simulate this feature on solaris. If I am supposed to change anything here, let me know please. I can do the changes regarding this. Thanks Spoorthy Darren J Moffat wrote: > Spoorthy H S wrote: >> FMRI will be as svc:/network/nrpe/tcp:default > > Why is "tcp" in the FMRI ? That implies that there could be a > network/npre/udp or something else. > >> To start the service, it needs root privilages. gid and uid i'm not >> assigning as in Nagios. > > What does it do that requires it to run as root ? > From Darren.Moffat@sun.com Thu Nov 12 09:47:42 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACHlfb7013879 for ; Thu, 12 Nov 2009 09:47:42 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nACHlUPT014142 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 17:47:40 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00080NC3E5J00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:47:38 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT00014GC3D0NC0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:47:38 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nACHlbIO021171 for ; Thu, 12 Nov 2009 17:47:37 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000700BXKGH00@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:47:29 +0000 (GMT) Received: from [192.168.2.108] (99-52-200-208.lightspeed.snjsca.sbcglobal.net [99.52.200.208]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT000CG5C30L6D0@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:47:29 +0000 (GMT) Date: Thu, 12 Nov 2009 09:47:24 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC4754.3070004@sun.com> Sender: Darren.Moffat@sun.com To: Spoorthy H S Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFC4A2C.1040302@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 998 Spoorthy H S wrote: > To monitor some system services, we start nrpe from root. Without root > privilage also, we can start this service. That doesn't answer the question I asked. Why does nrpe need to run as root ? If it doesn't need to then it should not make it so. > tcp is in FMRI since i am using the autogenerated nrpe.xml file. NRPE > required xinet service which is unavailable in solaris AFIK. I got info > from some link > http://tarique21.wordpress.com/2009/08/23/binding-nrpe-with-inetdxinetd-on-solaris-10/ > to simulate this feature on solaris. > If I am supposed to change anything here, let me know please. I can do > the changes regarding this. Yes remove the tcp part from the FMRI at least, but there may also be a better place in the hierarchy for example: svc:/application/management/npre:default svc:/network/nrpe:default It isn't the ARC's place to design this for you, ask for advice in the SMF community smf-discuss@opensolaris.org. -- Darren J Moffat From Spoorthy.Shankarmurthy@sun.com Thu Nov 12 09:56:05 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACHu5OB014358 for ; Thu, 12 Nov 2009 09:56:05 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nACHu3RQ023863 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 09:56:05 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT000711CHFX000@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:56:03 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT0006XTCHDZ500@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:56:02 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nACHu1QT010267 for ; Thu, 12 Nov 2009 17:56:01 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000700CB3FN00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:56:01 +0800 (SGT) Received: from [192.168.1.2] (ABTS-KK-dynamic-079.56.172.122.airtelbroadband.in [122.172.56.79]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT0002X3CHBQHC0@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:56:00 +0800 (SGT) Date: Thu, 12 Nov 2009 23:25:59 +0530 From: Spoorthy H S Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC4A2C.1040302@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFC4C2F.3020800@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> <4AFC4A2C.1040302@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) Status: RO Content-Length: 1189 Darren J Moffat wrote: >> To monitor some system services, we start nrpe from root. Without >> root privilage also, we can start this service. > > That doesn't answer the question I asked. Why does nrpe need to run > as root ? If it doesn't need to then it should not make it so. > I checked now. This smf can run in user privilage also. >> tcp is in FMRI since i am using the autogenerated nrpe.xml file. NRPE >> required xinet service which is unavailable in solaris AFIK. I got >> info from some link >> http://tarique21.wordpress.com/2009/08/23/binding-nrpe-with-inetdxinetd-on-solaris-10/ >> to simulate this feature on solaris. >> If I am supposed to change anything here, let me know please. I can >> do the changes regarding this. > > Yes remove the tcp part from the FMRI at least, but there may also be > a better place in the hierarchy for example: > > svc:/application/management/npre:default > svc:/network/nrpe:default > Thank you. I will do the same. I will remove that part of it and take it as svc:/network/nrpe:default -Spoorthy > It isn't the ARC's place to design this for you, ask for advice in the > SMF community smf-discuss@opensolaris.org. > From Darren.Moffat@Sun.COM Thu Nov 12 10:38:28 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACIcRJj015736 for ; Thu, 12 Nov 2009 10:38:27 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id nACIbOHp030255 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 11:38:27 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00015LEG25900@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:38:26 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT000L8JEG110B0@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:38:25 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nACIcOLv004619 for ; Thu, 12 Nov 2009 18:38:24 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000300DXUQR00@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 18:38:14 +0000 (GMT) Received: from [10.0.189.215] ([unknown] [192.18.41.196]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT000G7XEFALZ00@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 18:38:02 +0000 (GMT) Date: Thu, 12 Nov 2009 10:37:58 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC4C2F.3020800@sun.com> Sender: Darren.Moffat@Sun.COM To: Spoorthy H S Cc: John.Fischer@Sun.COM, "Mark A. Carlson" , LSARC-ext@Sun.COM Message-id: <4AFC5606.8070508@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> <4AFC4A2C.1040302@Sun.COM> <4AFC4C2F.3020800@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 455 Spoorthy H S wrote: > Darren J Moffat wrote: >>> To monitor some system services, we start nrpe from root. Without >>> root privilage also, we can start this service. >> >> That doesn't answer the question I asked. Why does nrpe need to run >> as root ? If it doesn't need to then it should not make it so. >> > I checked now. This smf can run in user privilage also. So what user/group and privileges with SMF start nrpe with ? -- Darren J Moffat From Darren.Moffat@sun.com Fri Nov 13 13:26:45 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACGneBV011444 for ; Thu, 12 Nov 2009 08:49:41 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nACGnd1d003237 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 16:49:40 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00005H9EQG000@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 08:49:38 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT000LW29EO0R00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 08:49:37 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nACGnZ8t015738 for ; Thu, 12 Nov 2009 16:49:36 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT00050066O6R00@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 16:49:30 +0000 (GMT) Received: from [192.168.2.108] (99-52-200-208.lightspeed.snjsca.sbcglobal.net [99.52.200.208]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT0007809E7EZD0@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 16:49:22 +0000 (GMT) Date: Thu, 12 Nov 2009 08:49:20 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFBDA6B.20602@sun.com> Sender: Darren.Moffat@sun.com To: Spoorthy H S Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFC3C90.5040904@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 339 Spoorthy H S wrote: > FMRI will be as svc:/network/nrpe/tcp:default Why is "tcp" in the FMRI ? That implies that there could be a network/npre/udp or something else. > To start the service, it needs root privilages. gid and uid i'm not > assigning as in Nagios. What does it do that requires it to run as root ? -- Darren J Moffat From Darren.Moffat@sun.com Fri Nov 13 13:27:06 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACIcRJj015736 for ; Thu, 12 Nov 2009 10:38:27 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id nACIbOHp030255 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 11:38:27 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00015LEG25900@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:38:26 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT000L8JEG110B0@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:38:25 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nACIcOLv004619 for ; Thu, 12 Nov 2009 18:38:24 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000300DXUQR00@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 18:38:14 +0000 (GMT) Received: from [10.0.189.215] ([unknown] [192.18.41.196]) by fe-emea-09.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT000G7XEFALZ00@fe-emea-09.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 18:38:02 +0000 (GMT) Date: Thu, 12 Nov 2009 10:37:58 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC4C2F.3020800@sun.com> Sender: Darren.Moffat@sun.com To: Spoorthy H S Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFC5606.8070508@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> <4AFC4A2C.1040302@Sun.COM> <4AFC4C2F.3020800@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 455 Spoorthy H S wrote: > Darren J Moffat wrote: >>> To monitor some system services, we start nrpe from root. Without >>> root privilage also, we can start this service. >> >> That doesn't answer the question I asked. Why does nrpe need to run >> as root ? If it doesn't need to then it should not make it so. >> > I checked now. This smf can run in user privilage also. So what user/group and privileges with SMF start nrpe with ? -- Darren J Moffat From Spoorthy.Shankarmurthy@sun.com Fri Nov 13 13:29:03 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAC9p2fT004404 for ; Thu, 12 Nov 2009 01:51:02 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id nAC9p18x018717 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 02:51:02 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KSZ00C0FQ11NP00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 01:51:01 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KSZ0081TQ10RN50@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 01:51:01 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAC9p0Mu029460 for ; Thu, 12 Nov 2009 09:51:00 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KSZ00E00Q0Z5D00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:51:00 +0800 (SGT) Received: from [129.150.146.17] ([unknown] [129.150.146.17]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KSZ00FOGQ0FKH90@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:50:59 +0800 (SGT) Date: Thu, 12 Nov 2009 15:20:35 +0530 From: Spoorthy H S Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFAE63F.7080802@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFBDA6B.20602@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) Status: RO Content-Length: 670 FMRI will be as svc:/network/nrpe/tcp:default To start the service, it needs root privilages. gid and uid i'm not assigning as in Nagios. Thanks Spoorthy Darren J Moffat wrote: > The FMRI is still not listed in the case material. > > The manifest XML file is not sufficient, and in fact isn't actually > that interesting because nothing can depend on it. The FMRI is the > interface the admin sees and that other things can depend on so it > must be listed in the case. > > Also what is the method credentials used to start the service ? What > uid/gid does it run with, does it run with any privileges (other than > basic - and does it even need those ?) > From Spoorthy.Shankarmurthy@sun.com Fri Nov 13 13:29:39 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACHZJRt013215 for ; Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nACHZJWC001267 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00070FBIVH100@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT0001WABIU0MC0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:35:19 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nACHZHRB029858 for ; Thu, 12 Nov 2009 17:35:17 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000100BDJ9000@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:35:17 +0800 (SGT) Received: from [192.168.1.2] (ABTS-KK-dynamic-079.56.172.122.airtelbroadband.in [122.172.56.79]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT0002VEBISQHC0@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:35:17 +0800 (SGT) Date: Thu, 12 Nov 2009 23:05:16 +0530 From: Spoorthy H S Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC3C90.5040904@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFC4754.3070004@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) Status: RO Content-Length: 877 To monitor some system services, we start nrpe from root. Without root privilage also, we can start this service. tcp is in FMRI since i am using the autogenerated nrpe.xml file. NRPE required xinet service which is unavailable in solaris AFIK. I got info from some link http://tarique21.wordpress.com/2009/08/23/binding-nrpe-with-inetdxinetd-on-solaris-10/ to simulate this feature on solaris. If I am supposed to change anything here, let me know please. I can do the changes regarding this. Thanks Spoorthy Darren J Moffat wrote: > Spoorthy H S wrote: >> FMRI will be as svc:/network/nrpe/tcp:default > > Why is "tcp" in the FMRI ? That implies that there could be a > network/npre/udp or something else. > >> To start the service, it needs root privilages. gid and uid i'm not >> assigning as in Nagios. > > What does it do that requires it to run as root ? > From Darren.Moffat@sun.com Fri Nov 13 13:29:56 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACHlfb7013879 for ; Thu, 12 Nov 2009 09:47:42 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id nACHlUPT014142 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 17:47:40 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT00080NC3E5J00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:47:38 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT00014GC3D0NC0@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 09:47:38 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe1.eu.sun.com [192.18.6.7] (may be forged)) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id nACHlbIO021171 for ; Thu, 12 Nov 2009 17:47:37 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000700BXKGH00@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:47:29 +0000 (GMT) Received: from [192.168.2.108] (99-52-200-208.lightspeed.snjsca.sbcglobal.net [99.52.200.208]) by fe-emea-10.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT000CG5C30L6D0@fe-emea-10.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 17:47:29 +0000 (GMT) Date: Thu, 12 Nov 2009 09:47:24 -0800 From: Darren J Moffat Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC4754.3070004@sun.com> Sender: Darren.Moffat@sun.com To: Spoorthy H S Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFC4A2C.1040302@Sun.COM> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091013) Status: RO Content-Length: 998 Spoorthy H S wrote: > To monitor some system services, we start nrpe from root. Without root > privilage also, we can start this service. That doesn't answer the question I asked. Why does nrpe need to run as root ? If it doesn't need to then it should not make it so. > tcp is in FMRI since i am using the autogenerated nrpe.xml file. NRPE > required xinet service which is unavailable in solaris AFIK. I got info > from some link > http://tarique21.wordpress.com/2009/08/23/binding-nrpe-with-inetdxinetd-on-solaris-10/ > to simulate this feature on solaris. > If I am supposed to change anything here, let me know please. I can do > the changes regarding this. Yes remove the tcp part from the FMRI at least, but there may also be a better place in the hierarchy for example: svc:/application/management/npre:default svc:/network/nrpe:default It isn't the ARC's place to design this for you, ask for advice in the SMF community smf-discuss@opensolaris.org. -- Darren J Moffat From Spoorthy.Shankarmurthy@sun.com Fri Nov 13 13:31:48 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nACHu5OB014358 for ; Thu, 12 Nov 2009 09:56:05 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nACHu3RQ023863 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 12 Nov 2009 09:56:05 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT000711CHFX000@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:56:03 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT0006XTCHDZ500@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Thu, 12 Nov 2009 10:56:02 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nACHu1QT010267 for ; Thu, 12 Nov 2009 17:56:01 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT000700CB3FN00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:56:01 +0800 (SGT) Received: from [192.168.1.2] (ABTS-KK-dynamic-079.56.172.122.airtelbroadband.in [122.172.56.79]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT0002X3CHBQHC0@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 13 Nov 2009 01:56:00 +0800 (SGT) Date: Thu, 12 Nov 2009 23:25:59 +0530 From: Spoorthy H S Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC4A2C.1040302@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4AFC4C2F.3020800@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> <4AFC4A2C.1040302@Sun.COM> User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) Status: RO Content-Length: 1189 Darren J Moffat wrote: >> To monitor some system services, we start nrpe from root. Without >> root privilage also, we can start this service. > > That doesn't answer the question I asked. Why does nrpe need to run > as root ? If it doesn't need to then it should not make it so. > I checked now. This smf can run in user privilage also. >> tcp is in FMRI since i am using the autogenerated nrpe.xml file. NRPE >> required xinet service which is unavailable in solaris AFIK. I got >> info from some link >> http://tarique21.wordpress.com/2009/08/23/binding-nrpe-with-inetdxinetd-on-solaris-10/ >> to simulate this feature on solaris. >> If I am supposed to change anything here, let me know please. I can >> do the changes regarding this. > > Yes remove the tcp part from the FMRI at least, but there may also be > a better place in the hierarchy for example: > > svc:/application/management/npre:default > svc:/network/nrpe:default > Thank you. I will do the same. I will remove that part of it and take it as svc:/network/nrpe:default -Spoorthy > It isn't the ARC's place to design this for you, ask for advice in the > SMF community smf-discuss@opensolaris.org. > From Spoorthy.Shankarmurthy@sun.com Sun Nov 15 23:02:42 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nAG72gRF003776 for ; Sun, 15 Nov 2009 23:02:42 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id nAG72biX034052 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Mon, 16 Nov 2009 00:02:42 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KT600L3FWWHSK00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Sun, 15 Nov 2009 23:02:41 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KT600G3GWWFEW40@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Sun, 15 Nov 2009 23:02:40 -0800 (PST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nAG72d3U027290 for ; Mon, 16 Nov 2009 07:02:39 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KT600000WV4Y300@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 16 Nov 2009 15:02:39 +0800 (SGT) Received: from [129.158.230.241] ([unknown] [129.158.230.241]) by mail-apac.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KT600FJ9WWE4W00@mail-apac.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Mon, 16 Nov 2009 15:02:39 +0800 (SGT) Date: Mon, 16 Nov 2009 12:27:54 +0530 From: "Spoorthy H.S " Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4AFC5606.8070508@Sun.COM> Sender: Spoorthy.Shankarmurthy@sun.com To: Darren J Moffat Cc: John.Fischer@sun.com, "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4B00F7F2.4040601@sun.com> Organization: Sun Microsystems India MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> <4AFC4A2C.1040302@Sun.COM> <4AFC4C2F.3020800@sun.com> <4AFC5606.8070508@Sun.COM> User-Agent: Thunderbird 2.0.0.4 (X11/20070622) Status: RO Content-Length: 722 Hi Darren, The service nrpe starts as "nagios" user. privileges is taken as default. I have not mentioned the privilege in .xml file. I have only this much in my .xml file. "" Thanks Spoorthy Darren J Moffat wrote: > Spoorthy H S wrote: >> Darren J Moffat wrote: >>>> To monitor some system services, we start nrpe from root. Without >>>> root privilage also, we can start this service. >>> >>> That doesn't answer the question I asked. Why does nrpe need to run >>> as root ? If it doesn't need to then it should not make it so. >>> >> I checked now. This smf can run in user privilage also. > > So what user/group and privileges with SMF start nrpe with ? > From Mark.Carlson@sun.com Tue Dec 1 07:51:45 2009 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nB1Fpj00024135 for ; Tue, 1 Dec 2009 07:51:45 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.4) with ESMTP id nB1Fphmg061120 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 1 Dec 2009 08:51:44 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KTZ0010BDE71Q00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 07:51:43 -0800 (PST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KTZ00LRGDE51J50@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 07:51:42 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nB1FpfNa027391 for ; Tue, 01 Dec 2009 15:51:41 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KTZ00J00DALS300@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 08:51:41 -0700 (MST) Received: from vpn-129-150-65-66.east.sun.com ([unknown] [129.150.65.66]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KTZ00AAZDDZ72B0@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 08:51:36 -0700 (MST) Date: Tue, 01 Dec 2009 08:51:34 -0700 From: "Mark A. Carlson" Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4B00F7F2.4040601@sun.com> Sender: Mark.Carlson@sun.com To: LSARC-ext@sun.com Message-id: <4B153B86.8000002@sun.com> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_SeOoWxZCJmLLZD0jJ/E4qQ)" X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> <4AFC4A2C.1040302@Sun.COM> <4AFC4C2F.3020800@sun.com> <4AFC5606.8070508@Sun.COM> <4B00F7F2.4040601@sun.com> User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) Status: RO Content-Length: 4032 This is a multi-part message in MIME format. --Boundary_(ID_SeOoWxZCJmLLZD0jJ/E4qQ) Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT Has this case converged? -- mark Spoorthy H.S wrote: > Hi Darren, > > The service nrpe starts as "nagios" user. privileges is taken as > default. I have not mentioned the privilege in .xml file. > I have only this much in my .xml file. " user='nagios' group='other' />" > > > Thanks > Spoorthy > > > > > Darren J Moffat wrote: >> Spoorthy H S wrote: >>> Darren J Moffat wrote: >>>>> To monitor some system services, we start nrpe from root. Without >>>>> root privilage also, we can start this service. >>>> >>>> That doesn't answer the question I asked. Why does nrpe need to >>>> run as root ? If it doesn't need to then it should not make it so. >>>> >>> I checked now. This smf can run in user privilage also. >> >> So what user/group and privileges with SMF start nrpe with ? >> > _______________________________________________ > opensolaris-arc mailing list > opensolaris-arc@opensolaris.org -- * Mark A. Carlson * Sr. Architect *Systems Group* Phone x69559 / 303-223-6139 Email Mark.Carlson@Sun.COM --Boundary_(ID_SeOoWxZCJmLLZD0jJ/E4qQ) Content-type: text/html; CHARSET=US-ASCII Content-transfer-encoding: 7BIT Has this case converged?

-- mark

Spoorthy H.S wrote:
Hi Darren,

The service nrpe starts as "nagios" user. privileges is taken as default. I have not mentioned the privilege in .xml file.
I have only this much in my .xml file. "<method_credential user='nagios' group='other' />"


Thanks
Spoorthy




Darren J Moffat wrote:
Spoorthy H S wrote:
Darren J Moffat wrote:
To monitor some system services, we start nrpe from root. Without root privilage also, we can start this service.

That doesn't answer the question I asked.  Why does nrpe need to run as root ?  If it doesn't need to then it should not make it so.

I checked now. This smf can run in user privilage also.

So what user/group and privileges with SMF start nrpe with ?

_______________________________________________
opensolaris-arc mailing list
opensolaris-arc@opensolaris.org

--
Mark A. Carlson
Sr. Architect

Systems Group
Phone x69559 / 303-223-6139
Email Mark.Carlson@Sun.COM

--Boundary_(ID_SeOoWxZCJmLLZD0jJ/E4qQ)-- From John.Fischer@Sun.COM Tue Dec 1 08:09:38 2009 Received: from sunmail6brm.central.sun.com (sunmail6brm.Central.Sun.COM [129.147.4.169]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nB1G9c9h024800 for ; Tue, 1 Dec 2009 08:09:38 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail6brm.central.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nB1G9b4B016375 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 1 Dec 2009 10:09:37 -0600 (CST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KTZ0011PE81EJ00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 09:09:37 -0700 (MST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KTZ005O8E80IEE0@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 09:09:36 -0700 (MST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id nB1G9ahg007199 for ; Tue, 01 Dec 2009 16:09:36 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) id <0KTZ00J00DALS300@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 09:09:36 -0700 (MST) Received: from [192.168.10.8] ([unknown] [71.197.72.184]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.04 64bit (built Jul 2 2009)) with ESMTPSA id <0KTZ00JFQE64S840@mail-amer.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 01 Dec 2009 09:08:29 -0700 (MST) Date: Tue, 01 Dec 2009 08:08:21 -0800 From: John Fischer Subject: Re: NRPE - nagios-addons [LSARC/2009/604 FastTrack timeout 11/12/2009] In-reply-to: <4B153B86.8000002@sun.com> Sender: John.Fischer@Sun.COM To: "Mark A. Carlson" Cc: LSARC-ext@Sun.COM Reply-to: John.Fischer@Sun.COM Message-id: <4B153F75.6070200@sun.com> MIME-version: 1.0 Content-type: text/plain; CHARSET=US-ASCII; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200911051616.nA5GGPxL016439@sac.sfbay.sun.com> <4AF2FFD9.1010407@Sun.COM> <4AF99B94.1020507@sun.com> <4AF9ABB1.2040302@sun.com> <4AFA892C.8030908@sun.com> <4AFAE63F.7080802@Sun.COM> <4AFBDA6B.20602@sun.com> <4AFC3C90.5040904@Sun.COM> <4AFC4754.3070004@sun.com> <4AFC4A2C.1040302@Sun.COM> <4AFC4C2F.3020800@sun.com> <4AFC5606.8070508@Sun.COM> <4B00F7F2.4040601@sun.com> <4B153B86.8000002@sun.com> User-Agent: Thunderbird 2.0.0.23 (X11/20091027) Status: RO Content-Length: 1210 All, I have extended the timer to December 12, 2009. John Mark A. Carlson wrote: > Has this case converged? > > -- mark > > Spoorthy H.S wrote: >> Hi Darren, >> >> The service nrpe starts as "nagios" user. privileges is taken as >> default. I have not mentioned the privilege in .xml file. >> I have only this much in my .xml file. "> user='nagios' group='other' />" >> >> >> Thanks >> Spoorthy >> >> >> >> >> Darren J Moffat wrote: >>> Spoorthy H S wrote: >>>> Darren J Moffat wrote: >>>>>> To monitor some system services, we start nrpe from root. Without >>>>>> root privilage also, we can start this service. >>>>> >>>>> That doesn't answer the question I asked. Why does nrpe need to >>>>> run as root ? If it doesn't need to then it should not make it so. >>>>> >>>> I checked now. This smf can run in user privilage also. >>> >>> So what user/group and privileges with SMF start nrpe with ? >>> >> _______________________________________________ >> opensolaris-arc mailing list >> opensolaris-arc@opensolaris.org > > -- > * Mark A. Carlson * > Sr. Architect > > *Systems Group* > Phone x69559 / 303-223-6139 > Email Mark.Carlson@Sun.COM > > >