We have configured Nagios XI on Linux server and are define checks, commands and services. The issue we are having is we have CA control minder and it not allowing us to apply and save configuration changes. If we turn it off we are able to save the changes or else it fails. I was told that nagios is trying sudo to root which the control minder doesn't like and denies. We need to have special rules in Control Minder for nagios to be allowed sudo?? Any input or suggestions appreciated.
One more issue:
I have configured check_users command on nagios server and remote client. When I run the check user command it looks fine but in the console its showing zero users.
/usr/local/nagios/libexec/check_nrpe -H xx.xx.xxx.xx -t 30 -c check_users -a '-w 5 -c 10'
USERS OK - 2 users currently logged in |users=2;5;10;0
but in console
USERS OK - 0 users currently logged in
Why is it showing this behavior??
permissions issue with CA Control minder and user issue
-
vidhyadhar
- Posts: 9
- Joined: Thu Apr 20, 2017 9:27 am
-
dwhitfield
- Former Nagios Staff
- Posts: 4583
- Joined: Wed Sep 21, 2016 10:29 am
- Location: NoLo, Minneapolis, MN
- Contact:
Re: permissions issue with CA Control minder and user issue
Please post your NRPE issue in another thread.
As for the control minder, we do not support any type hardening, such as SELinux. If you need to do this hardening, you will need to work on that yourself.
In order to see what's going on, please try to apply configuration and then immediately create and PM a profile. You can download it by going to Admin > System Config > System Profile and click the ***Download Profile*** button towards the top. If for whatever reason you *cannot* download the profile, please put the output of View System Info (5.3.4+, Show Profile if older) in the thread (that will at least get us some info). This will give us access to many of the logs we would otherwise ask for individually. If security is a concern, you can unzip the profile take out what you like, and then zip it up again. We may end up needing something you remove, but we can ask for that specifically.
After you PM the profile, please update this thread. Updating this thread is the only way for it to show back up on our dashboard.
As for the control minder, we do not support any type hardening, such as SELinux. If you need to do this hardening, you will need to work on that yourself.
In order to see what's going on, please try to apply configuration and then immediately create and PM a profile. You can download it by going to Admin > System Config > System Profile and click the ***Download Profile*** button towards the top. If for whatever reason you *cannot* download the profile, please put the output of View System Info (5.3.4+, Show Profile if older) in the thread (that will at least get us some info). This will give us access to many of the logs we would otherwise ask for individually. If security is a concern, you can unzip the profile take out what you like, and then zip it up again. We may end up needing something you remove, but we can ask for that specifically.
After you PM the profile, please update this thread. Updating this thread is the only way for it to show back up on our dashboard.