1 |
swift 08/07/30 18:28:15 |
2 |
|
3 |
Modified: nagios-guide.xml |
4 |
Log: |
5 |
small updates |
6 |
|
7 |
Revision Changes Path |
8 |
1.6 xml/htdocs/doc/en/nagios-guide.xml |
9 |
|
10 |
file : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/doc/en/nagios-guide.xml?rev=1.6&view=markup |
11 |
plain: http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/doc/en/nagios-guide.xml?rev=1.6&content-type=text/plain |
12 |
diff : http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/doc/en/nagios-guide.xml?r1=1.5&r2=1.6 |
13 |
|
14 |
Index: nagios-guide.xml |
15 |
=================================================================== |
16 |
RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/en/nagios-guide.xml,v |
17 |
retrieving revision 1.5 |
18 |
retrieving revision 1.6 |
19 |
diff -u -r1.5 -r1.6 |
20 |
--- nagios-guide.xml 9 Jul 2008 16:54:13 -0000 1.5 |
21 |
+++ nagios-guide.xml 30 Jul 2008 18:28:15 -0000 1.6 |
22 |
@@ -1,5 +1,5 @@ |
23 |
<?xml version="1.0" encoding="UTF-8"?> |
24 |
-<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/nagios-guide.xml,v 1.5 2008/07/09 16:54:13 swift Exp $ --> |
25 |
+<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/nagios-guide.xml,v 1.6 2008/07/30 18:28:15 swift Exp $ --> |
26 |
<!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> |
27 |
|
28 |
<guide disclaimer="draft"> |
29 |
@@ -224,22 +224,25 @@ |
30 |
<body> |
31 |
|
32 |
<p> |
33 |
-There are two methods available to monitor remote hosts. |
34 |
+There are various methods available to monitor remote hosts. |
35 |
</p> |
36 |
|
37 |
<ol> |
38 |
<li> |
39 |
- Use the <path>check_ssh</path> command to log on remotely to the system and |
40 |
- execute the check you want to perform on that system |
41 |
- </li> |
42 |
- <li> |
43 |
Use the <e>NRPE</e> daemon on the remote host and have Nagios communicate to |
44 |
this daemon using the <path>check_nrpe</path> plugin |
45 |
</li> |
46 |
+ <li> |
47 |
+ Use a password-less SSH connection to execute the command remotely |
48 |
+ </li> |
49 |
+ <li> |
50 |
+ Trap SNMP events and create Nagios alerts from it |
51 |
+ </li> |
52 |
</ol> |
53 |
|
54 |
<p> |
55 |
-We first focus on using the NRPE method as it is the most popular one. |
56 |
+We focus on using the NRPE method as it is the most popular one and leave the |
57 |
+other methods as an interesting excercise. |
58 |
</p> |
59 |
|
60 |
</body> |
61 |
@@ -378,39 +381,76 @@ |
62 |
|
63 |
</body> |
64 |
</section> |
65 |
-</chapter> |
66 |
-<chapter> |
67 |
-<title>Adding Gentoo Support</title> |
68 |
<section> |
69 |
-<title>System Security Checks</title> |
70 |
+<title>Using Passwordless SSH Connection</title> |
71 |
<body> |
72 |
|
73 |
<p> |
74 |
-TODO integrate glsa-check plugin, cf. wschlich stuff? |
75 |
+Just as we did by creating the <c>check_nrpe</c> command, we can create a |
76 |
+command that executes a command remotely through a passwordless SSH connection. |
77 |
+We leave this up as an interesting exercise to the reader. |
78 |
</p> |
79 |
|
80 |
+<p> |
81 |
+A few pointers and tips: |
82 |
+</p> |
83 |
+ |
84 |
+<ul> |
85 |
+ <li> |
86 |
+ Make sure the passwordless SSH connection is set up for a dedicated user |
87 |
+ (definitely not root) - most checks you want to execute do not need root |
88 |
+ privileges anyway |
89 |
+ </li> |
90 |
+ <li> |
91 |
+ Creating a passwordless SSH key can be accomplished with <c>ssh-keygen</c>, |
92 |
+ you install a key on the destination system by adding the public key to the |
93 |
+ <path>.ssh/authorized_keys</path> file |
94 |
+ </li> |
95 |
+</ul> |
96 |
+ |
97 |
</body> |
98 |
</section> |
99 |
</chapter> |
100 |
<chapter> |
101 |
<title>More Resources</title> |
102 |
<section> |
103 |
-<title>Nagios Resources</title> |
104 |
+<title>Adding Gentoo Checks</title> |
105 |
<body> |
106 |
|
107 |
<p> |
108 |
-TODO check plugins (nagiosexchange.org) |
109 |
+It is quite easy to extend Nagios to include Gentoo-specific checks, such as |
110 |
+security checks (GLSAs). Gentoo developer Wolfram Schlich has a |
111 |
+<c>check_glsa.sh</c> script <uri |
112 |
+link="http://dev.gentoo.org/~wschlich/misc/nagios/nagios-plugins-extra/nagios-plugins-extra-4/plugins/">available</uri> |
113 |
+amongst others. |
114 |
</p> |
115 |
|
116 |
-<p> |
117 |
-TODO additional nagios packages |
118 |
-</p> |
119 |
+</body> |
120 |
+</section> |
121 |
+<section> |
122 |
+<title>Nagios Resources</title> |
123 |
+<body> |
124 |
+ |
125 |
+<ul> |
126 |
+ <li> |
127 |
+ <uri>http://www.nagios.org</uri>, the official Nagios website |
128 |
+ </li> |
129 |
+ <li> |
130 |
+ <uri>http://www.nagiosexchange.org</uri>, where you can find Nagios plugins |
131 |
+ and addons |
132 |
+ </li> |
133 |
+ <li> |
134 |
+ <uri>http://www.nagiosforge.org</uri>, where developers host Nagios addon |
135 |
+ projects |
136 |
+ </li> |
137 |
+ <li> |
138 |
+ <uri>http://www.nagioswiki.org</uri>, for more information and tutorials on |
139 |
+ Nagios |
140 |
+ </li> |
141 |
+</ul> |
142 |
|
143 |
</body> |
144 |
</section> |
145 |
</chapter> |
146 |
-<!-- TODO additional chapter "Extending the Nagios Installation", |
147 |
- dixit dertobi123 |
148 |
---> |
149 |
</guide> |