Updates from November, 2008 Toggle Comment Threads | Keyboard Shortcuts

  • Sonyboy 01:01 on November 2, 2008 Permalink | Reply
    Tags: debian, howto, nagios3,   

    Nagios3 – Could not stat() command file 

    On Debian and Ubuntu I have seen this error a lot of times with Nagios3.

    Error: Could not stat() command file ‘/var/lib/nagios3/rw/nagios.cmd’!

    To solve it, simply run

    /etc/init.d/nagios3 stop
    dpkg-statoverride –update –add nagios www-data 2710 /var/lib/nagios3/rw
    dpkg-statoverride –update –add nagios nagios 751 /var/lib/nagios3
    /etc/init.d/nagios3 start

     
  • Sonyboy 23:36 on September 28, 2008 Permalink | Reply
    Tags: ,   

    NTP: Who is using my NTP server? 

    You can check which hosts are talking to your time server by using the monlist command of ntpdc, e.g. ntpdc -c monlist Please note that a maximum of 600 entries is supported with current versions of ntpdc. The protocol (or better: the contents of the return packets) used by ntpdc is not standardized, therefore it is recommended to only use ntpdc with a matching ntpd, i.e. both should have the same version number.

    To get by this 600 entry limitation, many server operators run client statistics scripts, such as Wayne Schlitt’s ntp_clients and ntp_clients_stats scripts, which can be found at http://www.schlitt.net/scripts/ntp/index.html . They work very well, but can use quite a bit of system resources if your client counts are in the high thousands. Examples of these scripts in action can be found at:

    ntpq -p

    The character in the left margin indicates the fate of this peer in the clock selection process. The codes mean:

    <sp> discarded due to high stratum and/or failed sanity checks;
    “x” designated falsticker by the intersection algorithm;
    “.” culled from the end of the candidate list;
    “-” discarded by the clustering algorithm;
    “+” included in the final selection set;
    “#” selected for synchronization but distance exceeds maximum;
    “*” selected for synchronization;
    “o” selected for synchronization, PPS signal in use.

     
  • Sonyboy 23:27 on September 28, 2008 Permalink | Reply
    Tags: apparmor, , selinux,   

    Disable AppArmor 

    AppArmor is a security extension (similar to SELinux) that should provide extended security. In my opinion you don’t need it to configure a secure system, and it usually causes more problems than advantages (think of it after you have done a week of trouble-shooting because some service wasn’t working as expected, and then you find out that everything was ok, only AppArmor was causing the problem).

    We can disable it like this:

    /etc/init.d/apparmor stop
    update-rc.d -f apparmor remove

     
c
compose new post
j
next post/next comment
k
previous post/previous comment
r
reply
e
edit
o
show/hide comments
t
go to top
l
go to login
h
show/hide help
esc
cancel