Mailing List Archive: Linux-HA: Users

RE: Strange HB Status displayed for root vs.unprivilegedusers; bug or feature?

Index | Next | Previous | View Threaded

Ralph.Grothe at itdz-berlin

Jul 2, 2008, 2:54 AM

Post #1 of 2 (98 views)
Permalink

RE: Strange HB Status displayed for root vs.unprivilegedusers; bug or feature?

> -----Original Message-----
> From: linux-ha-bounces[at]lists.linux-ha.org
> [mailto:linux-ha-bounces[at]lists.linux-ha.org]On Behalf Of Michael
> Schwartzkopff
> Sent: Wednesday, July 02, 2008 10:32 AM
> To: General Linux-HA mailing list
> Subject: Re: [Linux-HA] Strange HB Status displayed for root
> vs.unprivilegedusers; bug or feature?
>
>
> Am Mittwoch, 2. Juli 2008 07:51 schrieb Ralph.Grothe[at]itdz-berlin.de:
> (...) [Long discussion, shortened to save bandwidth]
>
> Why do you folks do not use plain SNMP? heartbeat has a
> wonderful subagent!
> SNMP is internet standard (RFC), everywhere implemented and platform
> independend! Contrary to your own nagios installation.

The catch here is that this HB cluster offers webservices to the WWW
and thus resides in our perimeter DMZ.
I really can't imagine that our firewall folks would hapilly open ports for SNMP to pass to my monitoring manager,
especially as SNMP (despite how unfounded this prejudice may be for V3) has a pretty bad repution among fw admins.

Also, even if I could persuade them I would be required to rig up an snmpd agent to pass caught traps to my Nagios server
(though this might not be too dificult if I used the free and well documented net-snmp suite,
but in any way would mean more extra work than a wee quickly written custom Nagios plugin for this simple purpose)

>
> Greetings,
>
> --
> Dr. Michael Schwartzkopff
> MultiNET Services GmbH
> Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany
> Tel: +49 - 89 - 45 69 11 0
> Fax: +49 - 89 - 45 69 11 21
> mob: +49 - 174 - 343 28 75
>
> mail: misch[at]multinet.de
> web: www.multinet.de
>
> Sitz der Gesellschaft: 85630 Grasbrunn
> Registergericht: Amtsgericht München HRB 114375
> Geschäftsführer: Günter Jurgeneit, Hubert Martens
>
> ---
>
> PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
> Skype: misch42
> _______________________________________________
> Linux-HA mailing list
> Linux-HA[at]lists.linux-ha.org
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
>
_______________________________________________
Linux-HA mailing list
Linux-HA[at]lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

misch at multinet

Jul 2, 2008, 3:04 AM

Post #2 of 2 (88 views)
Permalink

Re: Strange HB Status displayed for root vs.unprivilegedusers; bug or feature? [In reply to]

Am Mittwoch, 2. Juli 2008 11:54 schrieb Ralph.Grothe[at]itdz-berlin.de:
> > -----Original Message-----
(...)
> > Am Mittwoch, 2. Juli 2008 07:51 schrieb Ralph.Grothe[at]itdz-berlin.de:
> > (...) [Long discussion, shortened to save bandwidth]
> >
> > Why do you folks do not use plain SNMP? heartbeat has a
> > wonderful subagent!
> > SNMP is internet standard (RFC), everywhere implemented and platform
> > independend! Contrary to your own nagios installation.
>
> The catch here is that this HB cluster offers webservices to the WWW
> and thus resides in our perimeter DMZ.
> I really can't imagine that our firewall folks would hapilly open ports for
> SNMP to pass to my monitoring manager, especially as SNMP (despite how
> unfounded this prejudice may be for V3) has a pretty bad repution among fw
> admins.
>
> Also, even if I could persuade them I would be required to rig up an snmpd
> agent to pass caught traps to my Nagios server (though this might not be
> too dificult if I used the free and well documented net-snmp suite, but in
> any way would mean more extra work than a wee quickly written custom Nagios
> plugin for this simple purpose)

I am a firewall admin and have no problems with SNMP, even SNMPv1. net-snmp
has a nice ACL model. So can let only the manager (nagios) queuery the
machine. then you still can use "public" as the community string.

nagios has the native plugin check_snmp. So your nagios can check your cluster
for the health every 5 mins. No traps needed.

Setup time for nagios/SNMP: About 10 mins. And it's really working afterwards.
How much work is writing and testing your own nagios agent?

--
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany
Tel: +49 - 89 - 45 69 11 0
Fax: +49 - 89 - 45 69 11 21
mob: +49 - 174 - 343 28 75

mail: misch[at]multinet.de
web: www.multinet.de

Sitz der Gesellschaft: 85630 Grasbrunn
Registergericht: Amtsgericht München HRB 114375
Geschäftsführer: Günter Jurgeneit, Hubert Martens

---

PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
Skype: misch42
_______________________________________________
Linux-HA mailing list
Linux-HA[at]lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com