[Fedora-directory-users] snmp monitoring
by Scott A Phipps
I've been trying to get the snmp monitoring with cacti going, but I've
run into a snag. After I set everything up and run an snmp walk to test
the setup, the subagent crashes. Here is part of what I get from strace:
gettimeofday({1169063878, 909115}, NULL) = 0
select(8, [4 6 7], NULL, NULL, {6, 52205}) = 1 (in [4], left {6, 56000})
read(4, " ", 1) = 1
writev(2, [{"/opt/fedora-ds/bin/slapd/server/"..., 42}, {": ", 2},
{"symbol lookup error", 19}, {": ", 2},
{"/usr/lib/libnetsnmpagent.so.5", 29}, {": ", 2}, {"undefined symbol:
hosts_ctl", 27}, {"", 0}, {"", 0}, {"\n", 1}], 10) = 124
exit_group(127) = ?
Process 29587 detached
I'm running fds 1.0.2 on FC4. If someone could point me in the right
direction, I'd appreciate it.
Thanks,
Scott
17 years, 3 months
RE: [Fedora-directory-users] FDS, SNMP & Cacti...
by HAWKER, Dan
> > >
> > >Have had a quick surf and there are couple of OpenLDAP and
> SunOne DS
> > >templates out there I can use as a starting point, but nothing
> > >specifically for FDS.
> > >
> > >
> > The SunOne template should work, since the SNMP MIB is identical.
> >
>
> Thanks for the info Dave.
>
> I'll have a look at it tomorrow and let you all know.
>
> Dan
Well, am glad to report success :)
Wandered across both an OpenLDAP response[1] and a SunOneDS[2], Cacti
template for use in monitoring an FDS box. Works nicely. The generic one
shows how quick it responds, the SunOne template shows you more specific
stats (binds, searches, etc) per second and other odds and sods.
The Generic one worked out of the box, the Sun one took a small amount of
munging, as despite what you'd expect/hope, the MIBs are seemingly not the
same anymore. Think its just a vendor attribute, as each OID needed just a
slight adjustment (see below).
If anyone wants my ready FDS-ified cacti templates, send me an email and
I'll forward it on. (or is there a special accessories area on the wiki I
can upload it to???).
Thanks for all who responded :)
Dan
########
[1] http://www.linagora.org/article125.html
[2] http://forums.cacti.net/about16638.html
OID in SunOne templates for dsAnonymousBinds
.1.3.6.1.4.1.1450.7.1.1.1.389
FDS OID for dsAnonymousBinds
.1.3.6.1.4.1.2312.6.1.1.1.389
Note the 1450.7 rather than 2312.6
#########
--
Dan Hawker
Linux System Administrator
Astrium
--
This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure.
If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system.
Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified.
---------------------------------------------------------------------
Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England
17 years, 3 months
[Fedora-directory-users] Back in SSL hell again!
by Glenn
So I'm just about to finish getting Windows Sync working between RH Directory
Server 7.1SP3 and Active Directory. The latest error message in the passsync
log says "insufficient access", so I create an ACI that gives the replication
manager access to everything, just to see if it will work. Nope. So I
think, maybe I have to restart the Directory Server. And then it fails to
restart, logging the error message:
SSL alert: CERT_VerifyCertificateNow: verify certificate failed for cert
server-cert of family cn=RSA,cn=encryption,cn=cconfig (Netscape Portable
Runtime error -8181 - Peer's Certificate has expired.)
Yeah, right. Here's a copy of the certificate:
[root@ourserver alias]# ./certutil -L -d ./ -n server-cert
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:43:78:57:00:00:00:00:00:0e
Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption
Issuer:
"CN=OURCA,DC=ad,DC=ourshop,DC=edu"
Validity:
Not Before: Tue Nov 14 22:50:17 2006
Not After : Thu Nov 13 22:50:17 2008
...
Now, I'll grant you that this little synchronization exercise FEELS like it
has gone on for more than two years, but according to the certificate, it has
taken barely two months so far, leaving the certificate good for another 22
months. Once again, the SSL error message seems to have little to do with
reality.
I just restarted the server three hours earlier, and it worked fine then.
Can anyone suggest what I might try now? Thanks. -Glenn.
17 years, 3 months
[Fedora-directory-users] Failed attempts & Locked accounts ... unlock ?
by clockwork＠sigsys.org
So I have a pair of FDS servers and a few users automate scripts to run
against some development boxes, if they use the wrong password the
essentially surpass the max retry limit. After looking around I cannot find
an easy way to unlock the accounts. They are logging into RHEL, Solaris 9 &
10 systems. The output in the logs is like so:
error: PAM: Authentication failed for $USER from $IP
Is there some magic field that needs to be reset to unlock the account ?
17 years, 3 months
[Fedora-directory-users] Can't use admconfig with FDS
by Chandana De Silva
I am trying to use the admconfig utility with Fedora Directory Server.
Initially it gave the following error;
./admconfig: line 55: /opt/fedora-ds/bin/base/jre/bin/java: No such file or directory
./admconfig: line 55: exec: /opt/fedora-ds/bin/base//opt/fedora-ds/bin/base/jre/bin/java: cannot execute: No such file or directory
I then sym linked the JDK 1.7 jre directory at /opt/fedora-ds/bin/base/
and tried again. I now get this error;
./admconfig
Error: native VM not supported
Does anyone know anything about this ?
regards
Chandana
17 years, 3 months
[Fedora-directory-users] Error on starting Admin. console
by Gopan
hi everybody,
i was trying to set up a directory server in my
RHEL4 box. but whenever i am trying to start the administration
console, i am getting an error. I am quite sure about that JRE is
installed. Pls help me....
[root@server fedora-ds]# ./startconsole -u admin -a
http://server.net.edu:47736/
Warning: -ms8m not understood. Ignoring.
Warning: -mx64m not understood. Ignoring.
Exception in thread "main" java.lang.NoSuchMethodError: method
com.netscape.management.client.util.RemoteImage.setImage was not
found.
at _Jv_ResolvePoolEntry(java.lang.Class, int) (/usr/lib/libgcj.so.5.0.0)
at
com.netscape.management.client.util.RemoteImage.RemoteImage(java.lang.String)
(Unknown Source)
at
com.netscape.management.nmclf.SuiLookAndFeel.initComponentDefaults(javax.swing.UIDefaults)
(Unknown Source)
at com.netscape.management.nmclf.SuiLookAndFeel.getDefaults()
(Unknown Source)
at javax.swing.UIManager.put(java.lang.Object, java.lang.Object)
(/usr/lib/libgcj.so.5.0.0)
at
com.netscape.management.client.components.FontFactory.initializeLFFonts()
(Unknown Source)
at
com.netscape.management.client.console.Console.common_init(java.lang.String)
(Unknown Source)
at com.netscape.management.client.console.Console.Console(java.lang.String,
java.lang.String, java.lang.String, java.lang.String,
java.lang.String, java.lang.String) (Unknown Source)
at com.netscape.management.client.console.Console.main(java.lang.String[])
(Unknown Source)
thanks and regards,
Gopan S
***********************************************************************************************
This email was sent using Amrita Mail.
"Maintained by IT Enabled Services"
http://ites.amrita.ac.in
17 years, 3 months
[Fedora-directory-users] Error on starting Admin. console
by Gopan
hi everybody,
i was trying to set up a directory server in my
RHEL4 box. but whenever i am trying to start the administration
console, i am getting an error. I am quite sure about that JRE is
installed. Pls help me....
[root@server fedora-ds]# ./startconsole -u admin -a
http://server.net.edu:47736/
Warning: -ms8m not understood. Ignoring.
Warning: -mx64m not understood. Ignoring.
Exception in thread "main" java.lang.NoSuchMethodError: method
com.netscape.management.client.util.RemoteImage.setImage was not
found.
at _Jv_ResolvePoolEntry(java.lang.Class, int) (/usr/lib/libgcj.so.5.0.0)
at
com.netscape.management.client.util.RemoteImage.RemoteImage(java.lang.String)
(Unknown Source)
at
com.netscape.management.nmclf.SuiLookAndFeel.initComponentDefaults(javax.swing.UIDefaults)
(Unknown Source)
at com.netscape.management.nmclf.SuiLookAndFeel.getDefaults()
(Unknown Source)
at javax.swing.UIManager.put(java.lang.Object, java.lang.Object)
(/usr/lib/libgcj.so.5.0.0)
at
com.netscape.management.client.components.FontFactory.initializeLFFonts()
(Unknown Source)
at
com.netscape.management.client.console.Console.common_init(java.lang.String)
(Unknown Source)
at com.netscape.management.client.console.Console.Console(java.lang.String,
java.lang.String, java.lang.String, java.lang.String,
java.lang.String, java.lang.String) (Unknown Source)
at com.netscape.management.client.console.Console.main(java.lang.String[])
(Unknown Source)
thanks and regards,
Gopan S
***********************************************************************************************
This email was sent using Amrita Mail.
"Maintained by IT Enabled Services"
http://ites.amrita.ac.in
17 years, 3 months
[Fedora-directory-users] installation problem
by Gopakumar S
hi everybody,
i was trying to set up a directory server in my
RHEL4 box. but whenever i am trying to start the administration
console, i am getting an error. I am quite sure about that JRE is
installed. Pls help me....
[root@server fedora-ds]# ./startconsole -u admin -a http://server.net.edu:47736/
Warning: -ms8m not understood. Ignoring.
Warning: -mx64m not understood. Ignoring.
Exception in thread "main" java.lang.NoSuchMethodError: method
com.netscape.management.client.util.RemoteImage.setImage was not
found.
at _Jv_ResolvePoolEntry(java.lang.Class, int) (/usr/lib/libgcj.so.5.0.0)
at com.netscape.management.client.util.RemoteImage.RemoteImage(java.lang.String)
(Unknown Source)
at com.netscape.management.nmclf.SuiLookAndFeel.initComponentDefaults(javax.swing.UIDefaults)
(Unknown Source)
at com.netscape.management.nmclf.SuiLookAndFeel.getDefaults()
(Unknown Source)
at javax.swing.UIManager.put(java.lang.Object, java.lang.Object)
(/usr/lib/libgcj.so.5.0.0)
at com.netscape.management.client.components.FontFactory.initializeLFFonts()
(Unknown Source)
at com.netscape.management.client.console.Console.common_init(java.lang.String)
(Unknown Source)
at com.netscape.management.client.console.Console.Console(java.lang.String,
java.lang.String, java.lang.String, java.lang.String,
java.lang.String, java.lang.String) (Unknown Source)
at com.netscape.management.client.console.Console.main(java.lang.String[])
(Unknown Source)
thanks and regards,
Gopan S
17 years, 3 months
RE: [Fedora-directory-users] FDS behind NATed firewall
by bernhard.waldvogel＠freesurf.ch
> I have a master directory server behind a firewall that uses NAT. I
> want to place a read only server behind a different firewall. The new
> server does have a public IP address. Here is my setup:
>
> Master <--> Firewall (NAT) <--> Internet <--> Firewall <--> Read-Only
Question, wath about LDAPS? Is there anything against to use ldaps for the
replication?
This should be secure enough, or not?
Neu: Das erste ADSL-Abo ohne Monatsgebühr! Steigen Sie jetzt auf sunrise
ADSL free um.
http://www.sunrise.ch/privatkunden/iminternetsurfen/adsl/adsl_abosundprei...
17 years, 3 months
RE: [Fedora-directory-users] FDS, SNMP & Cacti...
by HAWKER, Dan
My data is graphing nearly perfectly. I found only two issues. Perl requires
time::HiRes. not on my older solaris cacti machine.
The other thing:
Directory Search Operations:
Total Searches is a purple graph. wholeSubTree is a green graph. wholSubTree
is always less then total, but I do not see it. Is it behind the purple
total searches graph?
Edward
Hi Edward,
time::HiRes - Ummm, sorry :) Is just a quick script I borrowed from another
Cacti template. Works, but my perl programming skills are almost as good as
my skills in any foreign language. I can usually listen, read it and get the
gist of whats going on, however actually making a conversation takes more
than I know.
Good spot. Yeah, it seems it is. This can be seen by changing the graph type
for the total searches. For instance if you change it to Line1, (Graph
Templates -> FDS Search -> Edit Item #9) you can clearly see the other
searches behind.
Dan
This email (including any attachments) may contain confidential and/or privileged information or information otherwise protected from disclosure.
If you are not the intended recipient, please notify the sender immediately, do not copy this message or any attachments and do not use it for any purpose or disclose its content to any person, but delete this message and any attachments from your system.
Astrium disclaims any and all liability if this email transmission was virus corrupted, altered or falsified.
---------------------------------------------------------------------
Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England
17 years, 3 months
