如何配置nagios監控SUN(富士通)MX000系列伺服器的XSCF

標籤：style   class   blog   code   http   color   

• 配置環境說明

192.168.3.80－XSCF地址192.168.2.80－solaris作業系統IP地址 (nagios用戶端）192.168.2.120－nagios伺服器端check_xscf.pl－檢查xscf的執行指令碼，放在nagios用戶端上。check_xscf.cfg－檢查xscf的設定檔，主要用於設定溫度和電壓的閾值，放在nagios用戶端上。指令碼：http://exchange.nagios.org/directory/Plugins/Uncategorized/Plugin-to-check-Sun%27s-XSCF-%28local-service%29/details指令碼執行方式：nagios伺服器端通過check_nrpe調用nagios用戶端上的check_xscf.pl指令碼來執行xscf命令。

• 在nagios用戶端上為使用者nagios產生rsa key

以root登入nagios用戶端: 192.168.2.80-bash-3.00# grep nagios /etc/shadownagios:*LK*:::::::-bash-3.00# su - nagiosSun Microsystems Inc.   SunOS 5.10      Generic January 2005為nagios使用者產生ssh rsa key:$ /usr/bin/ssh-keygen -t rsaGenerating public/private rsa key pair.Enter file in which to save the key (/usr/local/nagios/.ssh/id_rsa):Created directory ‘/usr/local/nagios/.ssh‘.Enter passphrase (empty for no passphrase):Enter same passphrase again:Your identification has been saved in /usr/local/nagios/.ssh/id_rsa.Your public key has been saved in /usr/local/nagios/.ssh/id_rsa.pub.The key fingerprint is:69:d5:16:3a:e7:0d:0d:df:fe:26:96:08:f3:a4:55:f3 [email protected]$ cd /usr/local/nagios/.ssh$ lsid_rsa      id_rsa.pub$ more id_rsa.pubssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvryQqyhFPzcXzSJiIM9JWm0jl3igF8MgJQAUMZCj6YTajXNMZOfrjY/OO0gjmGyz/t+I4EJDsVw4g8bvbYvsolp7acE6eJ43wCQ+5Gx/rjqxwE7LYnwGBPxDLtuSXIjwwwroLbjNMe0cbYjmA04HHnX58yu+Ne+TOvcqttXzVN0= [email protected]以上是rsa public key的內容。

• 登入XSCF,增加ssh使用者public key

XSCF> showssh -c pubkeyXSCF> setssh -c addpubkey -u mlcPlease input a public key:ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvryQqyhFPzcXzSJiIM9JWm0jl3igF8MgJQAUMZCj6YTajXNMZOfrjY/OO0gjmGyz/t+I4EJDsVw4g8bvbYvsolp7acE6eJ43wCQ+5Gx/rjqxwE7LYnwGBPxDLtuSXIjwwwroLbjNMe0cbYjmA04HHnX58yu+Ne+TOvcqttXzVN0= [email protected]XSCF> showssh -c pubkeyPublic key:     1  ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvryQqyhFPzcXzSJiIM9JWm0jl3igF8MgJQAUMZCj6YTajXNMZOfrjY/OO0gjmGyz/t+I4EJDsVw4g8bvbYvsolp7acE6eJ43wCQ+5Gx/rjqxwE7LYnwGBPxDLtuSXIjwwwroLbjNMe0cbYjmA04HHnX58yu+Ne+TOvcqttXzVN0= [email protected]XSCF> exit

• 測試使用者SSH public key方式進行身分識別驗證

測試使用者nagios是否能夠通過identity_file在XSCF上執行命令 (192.168.2.80)$ ssh -l mlc -i /usr/local/nagios/.ssh/id_rsa 192.168.3.80 showdomainstatus -aThe authenticity of host ‘192.168.3.80 (192.168.3.80)‘ can‘t be established.RSA key fingerprint is d1:83:1b:b7:eb:f3:70:f2:b8:f5:e2:43:5c:af:a1:e9.Are you sure you want to continue connecting (yes/no)? yesWarning: Permanently added ‘192.168.3.80‘ (RSA) to the list of known hosts.DID         Domain Status00          Running01          -02          -03          -$ more /usr/local/nagios/.ssh/known_hosts192.168.3.80 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyRYZFTYrKzK/XYSnxUe8lvTEErvy2LV6F0vIBjiwUwEKYh8KIFTeUdkiJbt4yn0UkjN3UDP16Ao8n53xRKRXqXlkWFmrqeY4NCY5ahG4FFayNBWVJ0MVrL9wRak1d6il9XEv8iN3k3xayb8O22S/SID238/TbDYj9YebIkpLVpc=第一次執行時先把xscf的地址加入到known_hosts裡。$ ssh -l mlc -i /usr/local/nagios/.ssh/id_rsa 192.168.3.80 showdomainstatus -aDID         Domain Status00          Running01          -02          -03          -第二次執行時直接就輸出命令執行結果了。

• 配置nagios用戶端

把檢查指令碼check_xscf.pl和設定檔check_xscf.cfg拷貝到nagios用戶端192.168.2.80的/usr/local/nagios/libexec目錄下，並為check_xscf.pl檔案增加執行許可權-bash-3.00# chmod a+x /usr/local/nagios/libexec/check_xscf.pl在nagios用戶端的/usr/local/nagios/etc/nrpe.cfg中增加:command[check_xscf_hw]=/usr/local/nagios/libexec/check_xscf.pl -n 192.168.3.80 -u mlc -i /usr/local/nagios/.ssh/id_rsa -c showhardconfcommand[check_xscf_ev]=/usr/local/nagios/libexec/check_xscf.pl -n 192.168.3.80 -u mlc -i /usr/local/nagios/.ssh/id_rsa -c showenvironment /usr/local/nagios/libexec/check_xscf.cfg使用nagios試運行新加的兩個檢查使用nagios使用者試運行新加的兩個檢查項： -bash-3.00# su - nagios Sun Microsystems Inc.   SunOS 5.10      Generic January 2005 $ /usr/local/nagios/libexec/check_xscf.pl -n 192.168.3.80 -u mlc -i /usr/local/nagios/.ssh/id_rsa -c showhardconf Hardware OK ! | $ /usr/local/nagios/libexec/check_xscf.pl -n 192.168.3.80 -u mlc -i /usr/local/nagios/.ssh/id_rsa -c showenvironment /usr/local/nagios/libexec/check_xscf.cfg Environment OK ! |100C, 70C, 1.1*U, 0.9*U,

• 在nagios伺服器端增加相應check_nrpe的配置即可。