Discussion:
[Nagios-users] check_by_ssh from nagios user
Mario Garcia
2013-07-17 16:10:17 UTC
Permalink
Hello
i want to monitor a bluecoat reporter with check_by_ssh as nrpe or snmp are
not available.

when i loggin from nagios user using simple ssh I can login
when i execute check_by_ssh from root user and execute a command it does
work

when i execute check_by_ssh from the nagios user on the nagios server it
does not work.. the public key is not taken into account as it request the
password despite the fact that i add -i option to check_by_ssh..

do you have an idea what could this be? is it the bluecoat reporter which
is refusing check_by_ssh, why does not refuse when i just use ssh ..

note I am conneciting from nagios user on nagios server to root user on
bluecoat reporter..maybe i should try to login to nagios user on the remote
system?

i am out of ideas

thanks
--
*--
Mario Garcia*
ABSI SA
224 Bd de l'Humanité
1190 Brussels Belgium
www.absi.be
Tel 00 322 333 40 00
Sunil Sankar
2013-07-17 16:49:28 UTC
Permalink
Can you do an ssh from nagios server as nagios user to the blue host server
without password with -i option
ssh -i .ssh/<key> <bluehost>
Post by Mario Garcia
Hello
i want to monitor a bluecoat reporter with check_by_ssh as nrpe or snmp
are not available.
when i loggin from nagios user using simple ssh I can login
when i execute check_by_ssh from root user and execute a command it does
work
when i execute check_by_ssh from the nagios user on the nagios server it
does not work.. the public key is not taken into account as it request the
password despite the fact that i add -i option to check_by_ssh..
do you have an idea what could this be? is it the bluecoat reporter which
is refusing check_by_ssh, why does not refuse when i just use ssh ..
note I am conneciting from nagios user on nagios server to root user on
bluecoat reporter..maybe i should try to login to nagios user on the remote
system?
i am out of ideas
thanks
--
*--
Mario Garcia*
ABSI SA
224 Bd de l'Humanité
1190 Brussels Belgium
www.absi.be
Tel 00 322 333 40 00
------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Nagios-users mailing list
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
--
Regards
Sunil Sankar
MAHONEY, DANIEL
2013-07-17 16:49:08 UTC
Permalink
If the bluecoat is configured to allow root login, then make sure that the nagios machine's nagios user's public key is in the bluecoat machine's root user's authorized_keys file. Otherwise just log in as the nagios user. For security reasons it's most likely a better idea to work as a noon-root user anyway.

From: Mario Garcia [mailto:***@absi.be]
Sent: Wednesday, July 17, 2013 11:10 AM
To: nagios-***@lists.sourceforge.net
Subject: [Nagios-users] check_by_ssh from nagios user

Hello
i want to monitor a bluecoat reporter with check_by_ssh as nrpe or snmp are not available.

when i loggin from nagios user using simple ssh I can login
when i execute check_by_ssh from root user and execute a command it does work

when i execute check_by_ssh from the nagios user on the nagios server it does not work.. the public key is not taken into account as it request the password despite the fact that i add -i option to check_by_ssh..

do you have an idea what could this be? is it the bluecoat reporter which is refusing check_by_ssh, why does not refuse when i just use ssh ..

note I am conneciting from nagios user on nagios server to root user on bluecoat reporter..maybe i should try to login to nagios user on the remote system?

i am out of ideas

thanks

--
--
Mario Garcia
ABSI SA
224 Bd de l'Humanité
1190 Brussels Belgium
www.absi.be<http://www.absi.be>
Tel 00 322 333 40 00
Mario Garcia
2013-07-18 14:53:23 UTC
Permalink
Hello

the problem does not occur when logging with simple nagios user
it only occurs when trying with check_by_ssh.

edit:
I managed to get it to work.. but i do not really know which solution
worked..

i edited sshd_onfig and disabled PAM
on the bluecoat I created a nagios users, gave it a home dir and assigned
it a password... restarted the ssh daemon, logged off and logged back in..

does check_by_ssh triggers some PAM authentication requirements?

thank you for your support.
Post by MAHONEY, DANIEL
If the bluecoat is configured to allow root login, then make sure that
the nagios machine’s nagios user’s public key is in the bluecoat machine’s
root user’s authorized_keys file. Otherwise just log in as the nagios user.
For security reasons it’s most likely a better idea to work as a noon-root
user anyway.****
** **
*Sent:* Wednesday, July 17, 2013 11:10 AM
*Subject:* [Nagios-users] check_by_ssh from nagios user****
** **
Hello ****
i want to monitor a bluecoat reporter with check_by_ssh as nrpe or snmp
are not available. ****
** **
when i loggin from nagios user using simple ssh I can login ****
when i execute check_by_ssh from root user and execute a command it does
work ****
** **
when i execute check_by_ssh from the nagios user on the nagios server it
does not work.. the public key is not taken into account as it request the
password despite the fact that i add -i option to check_by_ssh.. ****
** **
do you have an idea what could this be? is it the bluecoat reporter which
is refusing check_by_ssh, why does not refuse when i just use ssh ..****
** **
note I am conneciting from nagios user on nagios server to root user on
bluecoat reporter..maybe i should try to login to nagios user on the remote
system? ****
** **
i am out of ideas****
** **
thanks
****
** **
-- ****
*--
Mario Garcia*****
ABSI SA****
224 Bd de l'Humanité****
1190 Brussels Belgium****
www.absi.be****
Tel 00 322 333 40 00****
------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
Nagios-users mailing list
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null
--
*--
Mario Garcia*
ABSI SA
224 Bd de l'Humanité
1190 Brussels Belgium
www.absi.be
Tel 00 322 333 40 00
Loading...