Xymon Mailing List Archive search

Some newbie help

10 messages in this thread

list David Gilmore · Wed, 18 Jan 2006 13:29:29 -0500 ·
Can anyone help out a Linux newb with this error?
 
Execution of '/usr/local/sbin/fping -Ae' failed - program not suid root?

I am migrating our monitoring from BB installed on Windows to Hobbit on
Linux.  I was able to successfully install FC4, all of the Hobbit
subcomponents, and Hobbit.  Just this one error has me stumped.  I thought I
corrected it by adding hobbit to the WHEEL group on FC and then editing
sudoers file to uncomment WHEEL, but I still have the error.
 
David Gilmore
Consultant
Stenhouse Consulting, LLC.
X Traverse St
Providence, RI   XXXXX
XXX.XXX.XXXX
XXX.XXX.XXXX (fax)
list Jim Smith · Wed, 18 Jan 2006 12:35:35 -0600 ·
As root, you need to change the owner of "fping" to root and the
permissions to 4755.
quoted from David Gilmore


From: David Gilmore [mailto:user-70507ff7198d@xymon.invalid] 
Sent: Wednesday, January 18, 2006 12:29 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Some newbie help


Can anyone help out a Linux newb with this error?
 
Execution of '/usr/local/sbin/fping -Ae' failed - program not suid root?

I am migrating our monitoring from BB installed on Windows to Hobbit on
Linux.  I was able to successfully install FC4, all of the Hobbit
subcomponents, and Hobbit.  Just this one error has me stumped.  I
thought I corrected it by adding hobbit to the WHEEL group on FC and
then editing sudoers file to uncomment WHEEL, but I still have the
error.
 
David Gilmore
Consultant
Stenhouse Consulting, LLC.
X Traverse St
Providence, RI   XXXXX
XXX.XXX.XXXX
XXX.XXX.XXXX (fax)
 

NOTICE: This email contains confidential or proprietary information which may be legally privileged. It is intended only for the named recipient(s). If an addressing error has misdirected the email, please notify the author by replying to this message. If you are not the named recipient, you are not authorized to use, disclose, distribute, copy, print or rely on this email, and should immediately delete it from your computer system.
list Adam Scheblein · Wed, 18 Jan 2006 14:43:03 -0600 ·
Otherwise, check your sudoers file and see if wheel is the following

 
%wheel ALL=(ALL)       NOPASSWD: ALL

 
If it is, then when you setup hobbit server (doing the ./configure
-server) when it asks about the command for fping, put in sudo fping
instead.

 
Adam
quoted from Jim Smith

 
From: Smith, Jim [mailto:user-dc30f243a817@xymon.invalid] 
Sent: Wednesday, January 18, 2006 12:36 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Some newbie help

 
As root, you need to change the owner of "fping" to root and the
permissions to 4755.

 
From: David Gilmore [mailto:user-70507ff7198d@xymon.invalid] 
Sent: Wednesday, January 18, 2006 12:29 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Some newbie help

Can anyone help out a Linux newb with this error?

 
Execution of '/usr/local/sbin/fping -Ae' failed - program not suid root?

I am migrating our monitoring from BB installed on Windows to Hobbit on
Linux.  I was able to successfully install FC4, all of the Hobbit
subcomponents, and Hobbit.  Just this one error has me stumped.  I
thought I corrected it by adding hobbit to the WHEEL group on FC and
then editing sudoers file to uncomment WHEEL, but I still have the
error.

 
David Gilmore

Consultant

Stenhouse Consulting, LLC.

X Traverse St

Providence, RI   XXXXX

XXX.XXX.XXXX

XXX.XXX.XXXX (fax)

 
NOTICE: This email contains confidential or proprietary information
which may be legally privileged. It is intended only for the named
recipient(s). If an addressing error has misdirected the email, please
notify the author by replying to this message. If you are not the named
recipient, you are not authorized to use, disclose, distribute, copy,
print or rely on this email, and should immediately delete it from your
computer system.
list David Gilmore · Wed, 18 Jan 2006 15:56:21 -0500 ·
Adam,
 
I got it working with Jim's solution.  When I setup hobbit I simply ran
./configure.  For future reference, and seeing as how I want to install a
client on an OS X machine, should I specify the ./configure -server and
-client?
 
Dave
 

From: hobbit-return-5349-david=user-9e293dd11111@xymon.invalid
[mailto:hobbit-return-5349-david=user-9e293dd11111@xymon.invalid] On Behalf
Of Scheblein, Adam
Sent: Wednesday, January 18, 2006 3:43 PM
quoted from Adam Scheblein
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Some newbie help


Otherwise, check your sudoers file and see if wheel is the following

 
%wheel ALL=(ALL)       NOPASSWD: ALL

 
If it is, then when you setup hobbit server (doing the ./configure -server)
when it asks about the command for fping, put in sudo fping instead.

 
Adam

 
From: Smith, Jim [mailto:user-dc30f243a817@xymon.invalid] 
Sent: Wednesday, January 18, 2006 12:36 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: RE: [hobbit] Some newbie help

 
As root, you need to change the owner of "fping" to root and the permissions
to 4755.

 
From: David Gilmore [mailto:user-70507ff7198d@xymon.invalid] 
Sent: Wednesday, January 18, 2006 12:29 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: [hobbit] Some newbie help

Can anyone help out a Linux newb with this error?

 
Execution of '/usr/local/sbin/fping -Ae' failed - program not suid root?

I am migrating our monitoring from BB installed on Windows to Hobbit on
Linux.  I was able to successfully install FC4, all of the Hobbit
subcomponents, and Hobbit.  Just this one error has me stumped.  I thought I
corrected it by adding hobbit to the WHEEL group on FC and then editing
sudoers file to uncomment WHEEL, but I still have the error.

 
David Gilmore

Consultant

Stenhouse Consulting, LLC.

X Traverse St

Providence, RI   XXXXX

XXX.XXX.XXXX

XXX.XXX.XXXX (fax)

 
NOTICE: This email contains confidential or proprietary information which
may be legally privileged. It is intended only for the named recipient(s).
If an addressing error has misdirected the email, please notify the author
by replying to this message. If you are not the named recipient, you are not
authorized to use, disclose, distribute, copy, print or rely on this email,
and should immediately delete it from your computer system.
list Rob Munsch · Wed, 18 Jan 2006 16:32:34 -0500 ·
Once the server is up and running, for every other physical machine you 
want to monitor, run configure-client (only).

You should know:
the user set up that's going to run hobbit on the client - hobbit works 
well :D
the IP of the machine where the hobbit server was installed

the configure-client will ask you for these things when it runs and fill 
in the .cfg apropriately. If you tell it the name of an existing user 
(like say, 'hobbit') it will find it and stuff the client files into 
that homedir.

- fellow newbie
quoted from David Gilmore

David Gilmore wrote:
Adam,
I got it working with Jim's solution. When I setup hobbit I simply ran 
./configure. For future reference, and seeing as how I want to install 
a client on an OS X machine, should I specify the ./configure -server 
and -client?
Dave

    *From:* hobbit-return-5349-david=user-9e293dd11111@xymon.invalid
    [mailto:hobbit-return-5349-david=user-9e293dd11111@xymon.invalid]
    *On Behalf Of *Scheblein, Adam
    *Sent:* Wednesday, January 18, 2006 3:43 PM
    *To:* user-ae9b8668bcde@xymon.invalid
    *Subject:* RE: [hobbit] Some newbie help

    Otherwise, check your sudoers file and see if wheel is the following

    %wheel ALL=(ALL) NOPASSWD: ALL

    If it is, then when you setup hobbit server (doing the ./configure
    –server) when it asks about the command for fping, put in sudo
    fping instead.

    Adam


    *From:* Smith, Jim [mailto:user-dc30f243a817@xymon.invalid]
    *Sent:* Wednesday, January 18, 2006 12:36 PM
    *To:* user-ae9b8668bcde@xymon.invalid
    *Subject:* RE: [hobbit] Some newbie help

    **As root, you need to change the owner of "fping" to root and the
    permissions to 4755.**


    *From:* David Gilmore [mailto:user-70507ff7198d@xymon.invalid]
    *Sent:* Wednesday, January 18, 2006 12:29 PM
    *To:* user-ae9b8668bcde@xymon.invalid
    *Subject:* [hobbit] Some newbie help

    Can anyone help out a Linux newb with this error?

    Execution of '/usr/local/sbin/fping -Ae' failed - program not suid
    root?

    I am migrating our monitoring from BB installed on Windows to
    Hobbit on Linux. I was able to successfully install FC4, all of
    the Hobbit subcomponents, and Hobbit. Just this one error has me
    stumped. I thought I corrected it by adding hobbit to the WHEEL
    group on FC and then editing sudoers file to uncomment WHEEL, but
    I still have the error.

    David Gilmore

    Consultant

    Stenhouse Consulting, LLC.

    X Traverse St

    Providence, RI XXXXX

    XXX.XXX.XXXX

    XXX.XXX.XXXX (fax)

    NOTICE: This email contains confidential or proprietary
    information which may be legally privileged. It is intended only
    for the named recipient(s). If an addressing error has misdirected
    the email, please notify the author by replying to this message.
    If you are not the named recipient, you are not authorized to use,
    disclose, distribute, copy, print or rely on this email, and
    should immediately delete it from your computer system.
list David Gilmore · Wed, 18 Jan 2006 16:54:29 -0500 ·
Rob,

Thank you.  I must say that this is a great list.  BB lists are DEAD
compared to the activity here.  I love the fact that posts have replies
within minutes!

Thank you all!

Dave
 
-----Original Message-----
From: hobbit-return-5351-david=user-9e293dd11111@xymon.invalid [mailto:hobbit-return-5351-david=stenhouseconsulting.com at hswn.
dk] On Behalf Of Rob Munsch
Sent: Wednesday, January 18, 2006 4:33 PM
quoted from Rob Munsch
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Some newbie help

Once the server is up and running, for every other physical machine you want to monitor, run configure-client (only).

You should know:
the user set up that's going to run hobbit on the client - hobbit works well :D the IP of the machine where the hobbit server was installed

the configure-client will ask you for these things when it runs and fill in the .cfg apropriately. If you tell it the name of an existing user (like say, 'hobbit') it will find it and stuff the client files into that homedir.

- fellow newbie

David Gilmore wrote:
Adam,
I got it working with Jim's solution. When I setup hobbit I simply ran > ./configure. For future reference, and seeing as how I want to install > a client on an OS X machine, should I specify the ./configure -server > and -client?
Dave

    *From:* hobbit-return-5349-david=user-9e293dd11111@xymon.invalid
    [mailto:hobbit-return-5349-david=user-9e293dd11111@xymon.invalid]
    *On Behalf Of *Scheblein, Adam
    *Sent:* Wednesday, January 18, 2006 3:43 PM
    *To:* user-ae9b8668bcde@xymon.invalid
    *Subject:* RE: [hobbit] Some newbie help

    Otherwise, check your sudoers file and see if wheel is the > following

    %wheel ALL=(ALL) NOPASSWD: ALL

    If it is, then when you setup hobbit server (doing the ./configure
    -server) when it asks about the command for fping, put in sudo
    fping instead.

    Adam

--

    *From:* Smith, Jim [mailto:user-dc30f243a817@xymon.invalid]
    *Sent:* Wednesday, January 18, 2006 12:36 PM
    *To:* user-ae9b8668bcde@xymon.invalid
    *Subject:* RE: [hobbit] Some newbie help

    **As root, you need to change the owner of "fping" to root and the
    permissions to 4755.**

--

    *From:* David Gilmore [mailto:user-70507ff7198d@xymon.invalid]
    *Sent:* Wednesday, January 18, 2006 12:29 PM
    *To:* user-ae9b8668bcde@xymon.invalid
    *Subject:* [hobbit] Some newbie help

    Can anyone help out a Linux newb with this error?

    Execution of '/usr/local/sbin/fping -Ae' failed - program not suid
    root?

    I am migrating our monitoring from BB installed on Windows to
    Hobbit on Linux. I was able to successfully install FC4, all of
    the Hobbit subcomponents, and Hobbit. Just this one error has me
    stumped. I thought I corrected it by adding hobbit to the WHEEL
    group on FC and then editing sudoers file to uncomment WHEEL, but
    I still have the error.

    David Gilmore

    Consultant

    Stenhouse Consulting, LLC.

    X Traverse St

    Providence, RI XXXXX

    XXX.XXX.XXXX

    XXX.XXX.XXXX (fax)

    NOTICE: This email contains confidential or proprietary
    information which may be legally privileged. It is intended only
    for the named recipient(s). If an addressing error has misdirected
    the email, please notify the author by replying to this message.
    If you are not the named recipient, you are not authorized to use,
    disclose, distribute, copy, print or rely on this email, and
    should immediately delete it from your computer system.
list Lars Ebeling · Thu, 19 Jan 2006 09:32:27 +0100 ·
You should add user hobbit to sudoers.

Lars
quoted from David Gilmore
  ----- Original Message ----- 
  From: David Gilmore 
  To: user-ae9b8668bcde@xymon.invalid 
  Sent: Wednesday, January 18, 2006 7:29 PM
  Subject: [hobbit] Some newbie help


  Can anyone help out a Linux newb with this error?

  Execution of '/usr/local/sbin/fping -Ae' failed - program not suid root?

  I am migrating our monitoring from BB installed on Windows to Hobbit on Linux.  I was able to successfully install FC4, all of the Hobbit subcomponents, and Hobbit.  Just this one error has me stumped.  I thought I corrected it by adding hobbit to the WHEEL group on FC and then editing sudoers file to uncomment WHEEL, but I still have the error.

  David Gilmore
  Consultant
  Stenhouse Consulting, LLC.
  X Traverse St
  Providence, RI   XXXXX
  XXX.XXX.XXXX
  XXX.XXX.XXXX (fax)
list Rob Munsch · Thu, 19 Jan 2006 13:20:27 -0500 ·
I have to really, really, really, strongly disagree with this in heavily emphasized bold type.

With a monitor running on every important machine, one of the things I like is that only the hobbit user can run hobbit, and the hobbit user can't do anything else - including sudo.  It's important not to let 'little holes' like this pile up.  The pile gets large rapidly.

I could go on at length about specifics but i'll leave that to your local security list.  No one except no one should be in sudoers except those that consistently need root privs and use them responsibly.  Preferably trusted humans!

lars ebeling wrote:
You should add user hobbit to sudoers.
 Lars

    ----- Original Message -----
    *From:* David Gilmore <mailto:user-70507ff7198d@xymon.invalid>
    *To:* user-ae9b8668bcde@xymon.invalid <mailto:user-ae9b8668bcde@xymon.invalid>
quoted from Lars Ebeling
    *Sent:* Wednesday, January 18, 2006 7:29 PM
    *Subject:* [hobbit] Some newbie help

    Can anyone help out a Linux newb with this error?
         Execution of '/usr/local/sbin/fping -Ae' failed - program not suid
    root?

    I am migrating our monitoring from BB installed on Windows to
    Hobbit on Linux.  I was able to successfully install FC4, all of
    the Hobbit subcomponents, and Hobbit.  Just this one error has me
    stumped.  I thought I corrected it by adding hobbit to the WHEEL
    group on FC and then editing sudoers file to uncomment WHEEL, but
    I still have the error.
         David Gilmore
    Consultant
    Stenhouse Consulting, LLC.
    X Traverse St
    Providence, RI   XXXXX
    XXX.XXX.XXXX
    XXX.XXX.XXXX (fax)
     
list Adam Scheblein · Thu, 19 Jan 2006 13:22:12 -0600 ·
This is not possible all the time however (and when I was talking about
wheel before I meant on the server only)  On the client side, on some of
our boxes, in order to get swap information or some other information
from TOP we need to run it as sudo,  in which case then I have put the
following into the sudoers file on the client servers ;)

hobbit		ALL = /usr/local/bin/top, /usr/sbin/swapinfo,\
/usr/users/hobbit/client/bin/hpux-meminfo

Adam
quoted from Rob Munsch

-----Original Message-----
From: Rob Munsch [mailto:user-f39e4aae1456@xymon.invalid] 
Sent: Thursday, January 19, 2006 12:20 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Some newbie help

I have to really, really, really, strongly disagree with this in heavily

emphasized bold type.

With a monitor running on every important machine, one of the things I 
like is that only the hobbit user can run hobbit, and the hobbit user 
can't do anything else - including sudo.  It's important not to let 
'little holes' like this pile up.  The pile gets large rapidly.

I could go on at length about specifics but i'll leave that to your 
local security list.  No one except no one should be in sudoers except 
those that consistently need root privs and use them responsibly.  
Preferably trusted humans!

lars ebeling wrote:
You should add user hobbit to sudoers.
 
Lars

    ----- Original Message -----
    *From:* David Gilmore <mailto:user-70507ff7198d@xymon.invalid>
    *To:* user-ae9b8668bcde@xymon.invalid <mailto:user-ae9b8668bcde@xymon.invalid>
    *Sent:* Wednesday, January 18, 2006 7:29 PM
    *Subject:* [hobbit] Some newbie help

    Can anyone help out a Linux newb with this error?
     
    Execution of '/usr/local/sbin/fping -Ae' failed - program not suid
    root?

    I am migrating our monitoring from BB installed on Windows to
    Hobbit on Linux.  I was able to successfully install FC4, all of
    the Hobbit subcomponents, and Hobbit.  Just this one error has me
    stumped.  I thought I corrected it by adding hobbit to the WHEEL
    group on FC and then editing sudoers file to uncomment WHEEL, but
    I still have the error.
     
    David Gilmore
    Consultant
    Stenhouse Consulting, LLC.
    X Traverse St
    Providence, RI   XXXXX
    XXX.XXX.XXXX
    XXX.XXX.XXXX (fax)
     
list Rob Munsch · Thu, 19 Jan 2006 14:31:05 -0500 ·
yah well, fair 'nuff.  this is system administration after all, and i suppose every absolute final statement has an "....except when:" after it :D.

It was just the bare one-liner 'make hobbit a sudoer' that freaked me out a lil.  Certainly for fping it isn't necessary, and your example shows specifically how to keep it reined in when it is (sorry, lars, i don't mean to pick on you...). 
quoted from Adam Scheblein
Scheblein, Adam wrote:
This is not possible all the time however (and when I was talking about
wheel before I meant on the server only)  On the client side, on some of
our boxes, in order to get swap information or some other information
from TOP we need to run it as sudo,  in which case then I have put the
following into the sudoers file on the client servers ;)

hobbit		ALL = /usr/local/bin/top, /usr/sbin/swapinfo,\
/usr/users/hobbit/client/bin/hpux-meminfo

Adam

-----Original Message-----
From: Rob Munsch [mailto:user-f39e4aae1456@xymon.invalid] Sent: Thursday, January 19, 2006 12:20 PM
To: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Some newbie help

I have to really, really, really, strongly disagree with this in heavily

emphasized bold type.

With a monitor running on every important machine, one of the things I like is that only the hobbit user can run hobbit, and the hobbit user can't do anything else - including sudo.  It's important not to let 'little holes' like this pile up.  The pile gets large rapidly.

I could go on at length about specifics but i'll leave that to your local security list.  No one except no one should be in sudoers except those that consistently need root privs and use them responsibly.  Preferably trusted humans!

lars ebeling wrote:

 
You should add user hobbit to sudoers.

Lars

   ----- Original Message -----
   *From:* David Gilmore <mailto:user-70507ff7198d@xymon.invalid>
   *To:* user-ae9b8668bcde@xymon.invalid <mailto:user-ae9b8668bcde@xymon.invalid>
   *Sent:* Wednesday, January 18, 2006 7:29 PM
   *Subject:* [hobbit] Some newbie help

   Can anyone help out a Linux newb with this error?
       Execution of '/usr/local/sbin/fping -Ae' failed - program not suid
   root?

   I am migrating our monitoring from BB installed on Windows to
   Hobbit on Linux.  I was able to successfully install FC4, all of
   the Hobbit subcomponents, and Hobbit.  Just this one error has me
   stumped.  I thought I corrected it by adding hobbit to the WHEEL
   group on FC and then editing sudoers file to uncomment WHEEL, but
   I still have the error.
       David Gilmore
   Consultant
   Stenhouse Consulting, LLC.
   X Traverse St
   Providence, RI   XXXXX
   XXX.XXX.XXXX
   XXX.XXX.XXXX (fax)