12 Sep
2011
12 Sep
'11
10 a.m.
Module: check_mk
Branch: master
Commit: dab664c7790ff9f1014f2b0921c39c124298264b
URL:
http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=dab664c7790ff9…
Author: Florian Heigl <fh(a)mathias-kettner.de>
Date: Mon Sep 12 09:59:51 2011 +0200
Added: install guides for HP-UX and FreeBSD based on my install notes
---
doc/agent/Readme.FreeBSD | 57 ++++++++++++++++++++++++++++++++++++++++++++++
doc/agent/Readme.HP-UX | 48 ++++++++++++++++++++++++++++++++++++++
2 files changed, 105 insertions(+), 0 deletions(-)
diff --git a/doc/agent/Readme.FreeBSD b/doc/agent/Readme.FreeBSD
new file mode 100644
index 0000000..ef1da49
--- /dev/null
+++ b/doc/agent/Readme.FreeBSD
@@ -0,0 +1,57 @@
+
+
+Setup of check_MK agent on FreeBSD:
+-----------------------------------
+
+The check_mk agent is not available as a port so far.
+This means you have to manually downloadf and install it.
+
+
+First we'll be installing a few small ports that allow us to access more
+monitoring data:
+
+sysutils/muse
+sysutils/ipmitool
+devel/libstatgrab
+
+
+Then we'll enable inetd in rc.conf:
+
+inetd_enable=yes
+inetd_flags=-wW
+
+
+We download the most current agent:
+
+cd /usr/local/bin
+fetch
'http://git.mathias-kettner.de/git/?p=check_mk.git;a=blob_plain;f=agents/check_mk_agent.freebsd;hb=HEAD'
+
+-rwx------ 1 root wheel 11599 Mar 15 15:59 /usr/local/bin/check_mk
+
+
+We make it resolveable by adding it to the service names list in /etc/services:
+
+check_mk 6556/tcp #check_mk agent
+
+
+We add an entry to the inetd configuration that ensures it will be run if someone
connects to the port.
+
+check_mk stream tcp nowait root /usr/local/bin/check_mk check_mk
+
+
+And we set up minimum security in /etc/hosts.allow
+
+# Allow nagios server to access us
+check_mk : ip_of_nagios_server : allow
+
+
+# At last,we restart inetd to read in the new config and bring it up
+/etc/rc.d/inetd start
+
+
+
+If access doesn't work right away you can test the tcp wrapper settings using
+tcpdchk.
+Alternatively you can of course also use key-based ssh or any other more secure
+means of transportation.
+
diff --git a/doc/agent/Readme.HP-UX b/doc/agent/Readme.HP-UX
new file mode 100644
index 0000000..8c9e9c0
--- /dev/null
+++ b/doc/agent/Readme.HP-UX
@@ -0,0 +1,48 @@
+
+
+Setup of check_mk agent on HP-UX
+--------------------------------
+
+Note: This is written without access to a HP-UX server.
+Please carefully review and test the changes.
+
+
+: add an entry /etc/services for HP-UX so inetd will know which tcp port:
+# to listen on.
+check_mk 6556/tcp #check_mk nagios agent
+
+
+: add check mk to inetd config :
+# check_mk agent support for remote monitoring
+#
+check_mk stream tcp6 nowait root /usr/local/nagios/check_mk_agent check_mk_agent
+
+
+: inetd security
+# HP-UX does -by default- not use standard TCPWrappers and has a configuration
+# differnt from standard /etc/hosts.allow /etc/hosts.deny
+#
+# The config file is optional and called /var/adm/inetd.sec
+# It has the following syntax:
+#
+# service name { allow | deny }
+# { hostaddrs | hostnames | netaddrs | netnames }
+#
+# please note that in standard setups even very critical services like
+# MC/SG are using inetd for their communications. You should test changes
+# to the TCP security carefully.
+# (We noticed inetd got hung by a misconfiguration, causing cluster warnings.
+# After getting everything right, it worked without issues.
+
+# to allow your nagios servers:
+
+# only allow nagios servers to access the check_mk agent
+check_mk allow NAGIOS-SRV01 NAGIOS-SRV02
+
+# reconfigure inetd to read in the changes.
+inetd -c
+
+
+# to verify configuration and / or check for issues, have a look at tcpdchk(1)
+# http://nixdoc.net/man-pages/hp-ux/man1/tcpdchk.1.html
+# but this might only work if you installed tcpwrappers, which is not commonple.