help/suggestion required since upgrade to 4.3.30
list David Smith
Hi I have recently upgraded from 4.3.28 to 4.3.30 Everything seems to have installed ok, without any issues. The problem I think I have is the http(s) test for the actual xymon server, on version 4.3.28 the test worked ok and I got a green result Since upgrading the test now shows red, it actually says https://vmsg-xymon1.corp.renfrewshire.gov.uk/ - Bad Request HTTP/1.1 400 Bad Request Date: Tue, 11 May 2021 09:59:47 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 mod_perl/2.0.11 Perl/v5.16.3 Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 Seconds: 0.002957000 On my other xymon server which is still the older version, same test is ok. The other thing I noticed is that on the xymonnet test on each server, on version 4.3.28 it shows SSL library but on 4.3.30 it does not. Any ideas or suggestions are most welcome David Renfrewshire Council Website -http://www.renfrewshire.gov.uk This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. Renfrewshire Council may, in accordance with the Telecommunications(Lawful Business Practice) (Interception of Communications) Regulations 2000, intercept e-mail messages for the purpose of monitoring or keeping a record of communications on the Council's system. If a message contains inappropriate dialogue it will automatically be intercepted by the Council's Internal Audit section who will decide whether or not the e-mail should be onwardly transmitted to the intended recipient(s).
list Rajesh Kumar
Hi David, Hope you are well! Do you mind sharing the steps/procedures that was taken to upgrade xymon-client from 4.3.28 to 4.3.30 I'm relatively very new to xymon and can't find the steps.
▸
" Hi I have recently upgraded from 4.3.28 to 4.3.30 Everything seems to have installed ok, without any issues. The problem I think I have is the http(s) test for the actual xymon server, on version 4.3.28 the test worked ok and I got a green result Since upgrading the test now shows red, it actually says https://vmsg-xymon1.corp.renfrewshire.gov.uk/ - Bad Request HTTP/1.1 400 Bad Request Date: Tue, 11 May 2021 09:59:47 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 mod_perl/2.0.11 Perl/v5.16.3 Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 Seconds: 0.002957000 On my other xymon server which is still the older version, same test is ok. The other thing I noticed is that on the xymonnet test on each server, on version 4.3.28 it shows SSL library but on 4.3.30 it does not. Any ideas or suggestions are most welcome David " --
Regards,
Rajeshkumar Mani
list Mark Stitson
Hi there,
I?m a bit rusty on this?
My Xymon has the SSL libraries displayed in the xymonnet test:
xymonnet version 4.3.30
SSL library : OpenSSL 1.1.1d 10 Sep 2019
LDAP library: OpenLDAP 20448
I believe you can compile Xymon without SSL support.
You should be able to check the xymonnet binary with the ldd command (using the path where you installed xymonnet of course):
# ldd server/bin/xymonnet | grep ssl
libssl.so.1.1 => /lib64/libssl.so.1.1
If you haven?t got SSL compiled in the https tests will not work.
Mark
▸
From: Xymon <xymon-bounces at xymon.com> On Behalf Of Rajesh Kumar Sent: 21 September 2021 15:13 To: xymon at xymon.com Subject: [Xymon] help/suggestion required since upgrade to 4.3.30 Hi David, Hope you are well! Do you mind sharing the steps/procedures that was taken to upgrade xymon-client from 4.3.28 to 4.3.30 I'm relatively very new to xymon and can't find the steps. " Hi I have recently upgraded from 4.3.28 to 4.3.30 Everything seems to have installed ok, without any issues. The problem I think I have is the http(s) test for the actual xymon server, on version 4.3.28 the test worked ok and I got a green result Since upgrading the test now shows red, it actually says https://vmsg-xymon1.corp.renfrewshire.gov.uk/ - Bad Request HTTP/1.1 400 Bad Request Date: Tue, 11 May 2021 09:59:47 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5 mod_perl/2.0.11 Perl/v5.16.3 Content-Length: 362 Connection: close Content-Type: text/html; charset=iso-8859-1 Seconds: 0.002957000 On my other xymon server which is still the older version, same test is ok. The other thing I noticed is that on the xymonnet test on each server, on version 4.3.28 it shows SSL library but on 4.3.30 it does not. Any ideas or suggestions are most welcome David " -- Regards, Rajeshkumar Mani
list Dave Who
Hi Rajesh, Here are my notes on my install. I continued without using HTTPS. Good luck! XYMON Server Install: It is strongly encouraged that the server be installed only on one or two machines. The client data will reside on these machines. This method will prevent the wasting of disk space. 1. Create the xymon userid groupadd xymon useradd ?g xymon ?m xymon 2. Yum updates needed yum install gcc make yum install pcre-devel openssl-devel openldap-devel rrdtool-devel rrdtool yum install yum install libtirpc-devel libtirpc *Note: RRDTOOL-DEVEL is only available in the RHEL Server Optional (v. 6 IBM System z) channel* *RHEL7 - subscription-manager repos --enable=rhel-7-for-system-z-optional-rpms* *RHEL8 - subscription-manager repos --enable codeready-builder-for-rhel-8-s390x-rpms or downloadable from Redhat:* https://access.redhat.com/downloads/content/rrdtool/1.7.0-16.el8/s390x/fd431d51/package https://access.redhat.com/downloads/content/rrdtool-devel/1.7.0-16.el8/s390x/fd431d51/package * Note: Error: /usr/bin/ld: cannot find -ltirpc, collect2: error: ld returned 1 exit status* [root at web02 tmp]# wget https://downloads.sourceforge.net/libtirpc/libtirpc-1.2.5.tar.bz2 [root at web02 tmp]# yum install bzip2 [root at web02 tmp]# bzip2 -kd libtirpc-1.2.5.tar.bz2 [root at web02 tmp]# tar xf libtirpc-1.2.5.tar [root at web02 libtirpc-1.2.5]# ./configure --prefix=/usr \ --sysconfdir=/etc \ --disable-static \ --disable-gssapi && make [root at web02 libtirpc-1.2.5]# make install [root at web02 libtirpc-1.2.5]# mv -v /usr/lib/libtirpc.so.* /lib [root at web02 libtirpc-1.2.5]# ln -sfv ../../lib/libtirpc.so.3.0.0 /usr/lib/libtirpc.so Or remove it from the Makefile, Another option is to remove "-ltirpc" from the Makefile that has been generated after ./configure is run. Install all dependencies. This is stored in the M drive under the XYMON software folder: rpm -i dejavu-fonts-common-2.35-6.el8.noarch.rpm rpm -i dejavu-sans-mono-fonts-2.35-6.el8.noarch.rpm rpm -i rrdtool-1.7.0-16.el8.s390x.rpm rpm -i rrdtool-devel-1.7.0-16.el8.s390x.rpm 3. Install fping at the root home directory ? wget http://fping.org/dist/fping-3.2.tar.gz ? tar zxf fping-3.2.tar.gz ? cd fping-3.2 ? ./configure ? make && make install ? cd .. ? rm ?rf fping-3.2.tar.gz 4. install xymon software ? wget ftp://odcdocs.in.dc.gov/archive/Utilities/xymon-4.3.28.tar.gz ? tar zxf xymon-4.3.28.tar.gz ? cd xymon-4.3.28.tar.gz ? ./configure.server Answer yes to fping yes to SSL yes to LDAP Choose the default for the rest of the options and specify the IP address of the server ? make && make install ? Configure Apache with the Xymon definitions: ln -s /home/xymon/server/etc/xymon-apache.conf /etc/httpd/conf.d/ o Required Modififications: Modify xymon-apache.conf to be only /xymon and not /xymon/ o Update xymon-apache.conf with the following: Alias /xymon "/home/xymon/server/www" <Directory "/home/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews Order allow,deny Allow from all </Directory> ScriptAlias /xymon-cgi/ "/home/xymon/cgi-bin/" <Directory "/home/xymon/cgi-bin"> AllowOverride None Options ExecCGI FollowSymLinks Includes Order allow,deny Allow from all </Directory> ScriptAlias /xymon-seccgi/ "/home/xymon/cgi-secure/" <Directory "/home/xymon/cgi-secure"> AllowOverride None Options ExecCGI FollowSymLinks Includes Order allow,deny Allow from all o If there are errors like this in start up: Directory index forbidden by Options directive: /var/www/html/ Search for : grep -iR 'Indexes' /etc/httpd/* If you use + for one option, you have to use + or - also for the others. Remove all + or ? as needed. See the following article for an example: http://www.linuxquestions.org/questions/linux-newbie-8/apache-directory-index-forbidden-4175492597/ 5. Automatic start of xymon server ? Copy rpm/xymon-init.d to /etc/init.d/xymon ? Edit /etc/init.d/xymon and change "/usr/lib/xymon" in the DAEMON line to the directory where you installed Xymon - e.g. "/home/xymon/server/bin/xymon.sh". ? chkconfig --add xymon ? chkconfig xymon on 6. Give permissions chmod a+x /etc/init.d/xymon chmod +x ?R /home/xymon chmod 755 /var/log/messages chmod -R 0775 /home/xymon/server/www/rep chmod -R 0775 /home/xymon/server/www/snap chown apache:apache /home/xymon/server/www/snap chown apache:apache /home/xymon/server/www/rep 7. Add the following to /home/xymon/server/etc/client-local.cfg to monitor filenames [Linux] log:/var/log/messages:10240 ignore MARK file:/etc/zipl.conf file:/etc/yum.conf file:/etc/sysctl.conf file:/etc/services file:/etc/sudoers file:/etc/sudo.conf file:/etc/passwd file:/etc/profile file:/etc/mtab file:/etc/issue file:/etc/inittab file:/etc/hosts file:/etc/filesystems file:/etc/fstab file:/etc/crontab file:/etc/bashrc file:/etc/auto.nfs file:/etc/rc.d/rc.local file:/etc/default/useradd XYMON Client install: Client machines are separate from the server machine. The server machine will not require an installation of the client software. 1. Create xymon userid groupadd xymon useradd -g xymon -m xymon 2. Yum updates needed yum install -y gcc make yum install -y pcre-devel openssl-devel openldap-devel rrdtool-devel rrdtool *Note: RRDTOOL-DEVEL is only available in the RHEL Server Optional (v. 6 IBM System z) channel* *RHEL7 - subscription-manager repos --enable=rhel-7-for-system-z-optional-rpms* *RHEL8 - subscription-manager repos --enable codeready-builder-for-rhel-8-s390x-rpms or downloadable from Redhat:* https://access.redhat.com/downloads/content/rrdtool/1.7.0-16.el8/s390x/fd431d51/package https://access.redhat.com/downloads/content/rrdtool-devel/1.7.0-16.el8/s390x/fd431d51/package Install all dependencies. This is stored in the M drive under the XYMON software folder: rpm -i dejavu-fonts-common-2.35-6.el8.noarch.rpm rpm -i dejavu-sans-mono-fonts-2.35-6.el8.noarch.rpm rpm -i rrdtool-1.7.0-16.el8.s390x.rpm rpm -i rrdtool-devel-1.7.0-16.el8.s390x.rpm 3. Install fping at the root home directory ? wget http://fping.org/dist/fping-3.2.tar.gz ? tar zxf fping-3.2.tar.gz ? cd fping-3.2 ? ./configure ? make && make install ? cd .. ? rm ?rf fping-3.2.tar.gz 4. install xymon software ? wget ftp:// odcdocs.in.dc.gov/OCTO%20User%20Guides/xymon-4.3.18.tar.gz ? tar zxf xymon-4.3.18.tar.gz ? cd xymon-4.3.18 ? ./configure.client Server will house client information Provide IP address of the server ? make && make install 5. Modify the client settings ? cp rpm/xymon-client.default /etc/default/xymon-client ? Edit /etc/default/xymon-client and provide the right IP address of the server 6. Automatic start of xymon client ? cp rpm/xymon-client.init /etc/init.d/xymonc ? Edit /etc/init.d/xymonc and change "/usr/lib/xymon" in the DAEMON line to the directory where you installed Xymon - e.g. "/home/xymon": PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin DAEMON=/home/xymon/runclient.sh NAME=xymon-client DESC=xymon-client ? chkconfig --add xymonc ? chkconfig xymonc on 7. Give permissions chmod a+x /home/xymon/runclient.sh chmod a+x /etc/init.d/xymonc chmod 777 -R /home/xymon chmod 755 /var/log/messages 8. Add new client to the server?s host listing ? Edit /home/xymon/server/etc/hosts.cfg on the xymon server machine ? Reload the xymon server service xymon reload