Omreport and Nagios NRPE Permissions

[Karl Katzke]

Another (and possibly safer) suggested path would be to add the ability for Nagios to run that specific command as root using sudo with the NOPASSWD flag set. 

-K 
 
>>> "Mike Hanby" <mhanby at uab.edu> 11/07/07 10:35 AM >>> 
Ok, the problem had to do with the permissions on /opt/dell

drwx------ root root /opt/dell

 

The nagios user is a member of the nagios group and has the shell
/sbin/nologin.

 

Does anyone see anything wrong (security wise) with setting permissions
for the directory to:

drwxr-x--- root nagios /opt/dell

 

If I do this, the nagios user can successfully run the omreport cli
tool.

 

Thanks, Mike

 

________________________________

From: linux-poweredge-bounces at dell.com
[mailto:linux-poweredge-bounces at dell.com] On Behalf Of Mike Hanby
Sent: Friday, November 02, 2007 11:04
To: linux-poweredge at dell.com
Subject: Omreport and Nagios NRPE Permissions

 

Howdy,

 

I'm using the check_dell plugin perl script to monitor the hardware on
my Nagios server. It works fine.

 

I'm trying to get it working via NRPE to check remote Dell systems. NRPE
is configured using xinetd.

 

If I run the check_dell.pl script locally, the command successfully
executes omreport and spits out the expected info.

 

If I run it via NRPE (either locally or from the Nagios server),
omreport errors siting permissions.

 

Do I have to give the nagios user (or some other account) the privileges
to run omreport? The file permissions look ok, so I'm suspecting
something internal to OpenManage.

 

Thanks for any suggestions,

 

Mike

 

-----

Mike Hanby

Information Systems Specialist II

School of Engineering Dean's Office

University of Alabama at Birmingham