Access denied message while monitoring filesystems.

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
RIDS_I2MP
Posts: 751
Joined: Thu Mar 13, 2014 9:25 am

Access denied message while monitoring filesystems.

Post by RIDS_I2MP »

Hi Team,

We are trying to monitor concurrent file systems of remote host, but we are receiving access denied message refer the attached screenshot.

Whereas we are able to monitor other file systems of same host.

These concurrent file systems are accessible by nagios user on remote host but not accessible from our Nagios server, kindly refer the attached screenshot:
You do not have the required permissions to view the files attached to this post.
Thanks & Regards,
I2MP Team.
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: Access denied message while monitoring filesystems.

Post by lmiltchev »

Does adding the following two lines to sudoers on the remote box fix the issue?

Code: Select all

Defaults:nagios !requiretty
nagios ALL=NOPASSWD: /usr/local/nagios/libexec/check_disk *
What kind of system is this? Can you run the following commands on the remote machine, and show us the output?

Code: Select all

uname -a
cat /etc/*release
How did you install the Linux agent (NRPE + nagios plugins)? Did you follow the document below?
https://assets.nagios.com/downloads/nag ... _Agent.pdf
Be sure to check out our Knowledgebase for helpful articles and solutions!
RIDS_I2MP
Posts: 751
Joined: Thu Mar 13, 2014 9:25 am

Re: Access denied message while monitoring filesystems.

Post by RIDS_I2MP »

Hi Team,

I feel adding below lines to sudoers on remote box will not resolve the issue as we are able to monitor other file systems using same plugin check_disk, please find the attached snapshot:

Defaults:nagios !requiretty
nagios ALL=NOPASSWD: /usr/local/nagios/libexec/check_disk *

Please find the attached output of the cmds.
You do not have the required permissions to view the files attached to this post.
Thanks & Regards,
I2MP Team.
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Access denied message while monitoring filesystems.

Post by tgriep »

In the AIX server, can you run the following and post the output?

Code: Select all

ls -l /
ls -l /MQHA
grep nag /etc/group
ps -ef
Thanks
Be sure to check out our Knowledgebase for helpful articles and solutions!
RIDS_I2MP
Posts: 751
Joined: Thu Mar 13, 2014 9:25 am

Re: Access denied message while monitoring filesystems.

Post by RIDS_I2MP »

Hi Team,

Please find the attached outputs for specified commands.
You do not have the required permissions to view the files attached to this post.
Thanks & Regards,
I2MP Team.
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Access denied message while monitoring filesystems.

Post by tgriep »

On your remote server, can you add the nagios user to this group "mqbrkrs" in the /etc/group file?
Then test the command from the XI server and see if it works.
Be sure to check out our Knowledgebase for helpful articles and solutions!
RIDS_I2MP
Posts: 751
Joined: Thu Mar 13, 2014 9:25 am

Re: Access denied message while monitoring filesystems.

Post by RIDS_I2MP »

Hi Team,

We have tried the mentioned solution, but the issue still persists.
Thanks & Regards,
I2MP Team.
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Access denied message while monitoring filesystems.

Post by tgriep »

I was hoping that was it.
Can you check these log files on the AIX server for any errors while you run that check from the Nagios system?

Code: Select all

/var/log/syslog 
/var/log/authlog
/var/adm/messages
Be sure to check out our Knowledgebase for helpful articles and solutions!
RIDS_I2MP
Posts: 751
Joined: Thu Mar 13, 2014 9:25 am

Re: Access denied message while monitoring filesystems.

Post by RIDS_I2MP »

Hi team,

I am not able to find the below mentioned paths neither in nagios server or remote host:
/var/log/syslog
/var/log/authlog

I found the below log, but is consists of no data:
/var/adm/messages
Thanks & Regards,
I2MP Team.
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Access denied message while monitoring filesystems.

Post by tgriep »

I am not familiar with where AIX stores it's logfiles so if you know where they are, take a look to see if are any errors that can help.
Let's try and set the SUID bit on the check_disk plugin and see if that works. Login to the AIX server as root and run the following.

Code: Select all

chmod ug+rws /usr/local/nagios/libexec/check_disk
If this fails, please run the following commands and post the output.

Code: Select all

grep nagios /etc/sudoers
grep nag /etc/group
ls -l /usr/local/nagios/libexec/
Can you post the /usr/local/nagios/etc/nrpe.cfg file?
Thanks
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked