Xymon Mailing List Archive search

CONN status is white for all hosts

list Greg L Hubbard
Wed, 19 Dec 2007 13:58:26 -0600
Message-Id: <user-f802933c018c@xymon.invalid>

UNIX/Linux thing -- you have to be root to use a privileged port ( <
1024) unless SELinux gets around it.  The first entry in your list below
shows the "set uid" bit has been set, which means /usr/sbin/fping will
run as root:adm no matter who launches it.  Your particular Linux
distribution/package output is not necessarily representative of all
systems, Josh.
 
By the way, I for one admire the way you have quickly advanced from
"Hobbit newbie" to a key person who tries to help others on this list...
 
Happy Holidays!
 
GLH


	From: Josh Luthman [mailto:user-4c45a83f15cb@xymon.invalid] 
	Sent: Wednesday, December 19, 2007 1:40 PM
	To: user-ae9b8668bcde@xymon.invalid
	Subject: Re: [hobbit] CONN status is white for all hosts
	
	
	I didn't say anything about user name - only the group or
global.
	
	Your options are...
	
	-rwsr-xr-x 1 root adm 35281 Mar  7  2007 /usr/sbin/fping
	-rwsr-x--- 1 root adm 35281 Mar  7  2007 /usr/sbin/fping #add
hobbituser to group adm 
	-rwsr-x--- 1 root hobbit 35281 Mar  7  2007 /usr/sbin/fping #add
hobbituser to group adm
	
	
	On 12/19/07, Hubbard, Greg L < user-d970b5e56ec9@xymon.invalid
<mailto:user-d970b5e56ec9@xymon.invalid> > wrote: 

		fping has to bet suid root so it can run.. there should
be something in fping doc on how to do this.


			From: Josh Luthman
[mailto:user-4c45a83f15cb@xymon.invalid] 
			Sent: Wednesday, December 19, 2007 1:28 PM
			To: user-ae9b8668bcde@xymon.invalid
			Subject: Re: [hobbit] CONN status is white for
all hosts
			
			
			Modify the permissions so that the hobbit user
can execute fping!
			
			Assuming your hobbit user is "hobbit" you'll
need to either a) change the group owner of /usr/sbin/fping to hobbit or
b) add hobbit to group adm or c) make it so everyone can r-x
/usr/sbin/fping 
			
			
			On 12/19/07, Frank M. Ramaekers
<user-dbd5c100cfe9@xymon.invalid> wrote: 

				I've just got through installing a fresh
version of hobbit and now
				everything looks great except for the
"conn" status which is showing up
				white and showing "Hobbit system error".
				
				bb-network.log :
				
				2007-12-19 13:15:10 Could not run the
command '/usr/sbin/fping -Ae'
				(exec failed)
				2007-12-19 13:15:10 hobbitping
invocation failed: Permission denied
				
				-rwsr-x--- 1 root adm    35281 Mar  7
2007 /usr/sbin/fping 
				
				-rwsr-x--- 1 root hobbit 71927 Apr 13
2007
	
/usr/libexec/hobbit/server/bin/hobbitping
				
				TIA,
				
				Frank M. Ramaekers Jr.
				Systems Programmer
MCP, MCP+I, MCSE & RHCE
				American Income Life Insurance Co.
Phone: (XXX)XXX-XXXX 
				XXXX Wooded Acres Dr.
Fax:   (XXX)XXX-XXXX
				Waco, Texas  76701
				
				
				This message contains information which
is privileged and confidential and is solely for the use of the 
				intended recipient. If you are not the
intended recipient, be aware that any review, disclosure,
				copying, distribution, or use of the
contents of this message is strictly prohibited. If you have
				received this in error, please destroy
it immediately and notify us at user-2f780dbd82da@xymon.invalid.
				
				
			-- 
			Josh Luthman
			Office: XXX-XXX-XXXX
			Direct: XXX-XXX-XXXX
			XXXX Wayne St
			Suite XXXX
			Troy, OH XXXXX
			
			Those who don't understand UNIX are condemned to
reinvent it, poorly. 
			--- Henry Spencer 


	-- 
	Josh Luthman
	Office: XXX-XXX-XXXX
	Direct: XXX-XXX-XXXX
	XXXX Wayne St
	Suite XXXX
	Troy, OH XXXXX
	
	Those who don't understand UNIX are condemned to reinvent it,
poorly. 
	--- Henry Spencer