Setup Remote Access: Difference between revisions

From MyLVS
Jump to navigation Jump to search
 
(33 intermediate revisions by the same user not shown)
Line 1: Line 1:
This is the remote access basic. NSCLIENT is used for the myLVS communication <br>
myLVS is using the '''NSClient''' solution to communicate from the myLVS server to the nsclient service<br>
between the myLVS host (client) and the real server which are required to run <br>
running on the RealServer.  myLVS supports both, the NSClient version which comes with Debian Linux<br>
the NSCLIENT server part. For more information about NRPE please see http://www.nsclient.org
and the Windows version which comes with http://nsclient.org'''
 
<br>
 
=Setup myLVS with the NSClient (the client part)=
=Setup myLVS with the NSClient (the client part)=
*On Debian8 run the installation command
Remember: myLVS acts as client in the view of nrpe
root@mylvs01:/# '''apt-get install nagios-nrpe-plugin -s'''
*Note: The Debian / Nagios package is required for remote access: '''nagios-nrpe-plugin'''
 
*Check to see if the plugin runs without any error, run:
*Check to see if the plugin runs without any error, run:
  root@mylvs01:/# '''/usr/lib/nagios/plugins/check_nrpe'''
  root@mylvs01:/# '''/usr/lib/nagios/plugins/check_nrpe'''
 
==Setup the Linux Realserver with the NSClient (the server part)==
==Setup the Linux server with the NSClient (the server part)==
Remember: The Realserver on Linux acts as server in the view of nrpe
*Install NSClient Server part to the myLVS client
*Install NSClient Server part to the myLVS client
  root@myLVS-LinuxClient:~# '''apt-get install nagios-nrpe-server'''
  root@myLVS-LinuxClient:~# '''apt-get install nagios-nrpe-server'''
*Run sudo
root@mylvs01:/#  visudo -f /etc/sudoers
*Add to sudo
*Add to sudo
  nagios ALL=NOPASSWD: /sbin/ipvsadm
  nagios ALL=NOPASSWD: /sbin/ipvsadm
  nagios ALL=NOPASSWD: /sbin/init
  nagios ALL=NOPASSWD: /sbin/init


Edit '''/etc/nagios/nrpe.cfg'''
Edit /etc/nagios/nrpe.cfg
*Set Allowed hosts
*Set Allowed hosts
  allowed_hosts=127.0.0.1 192.168.2.100
  allowed_hosts=127.0.0.1 192.168.2.100
Line 26: Line 26:
  command[reset_apache]=/etc/init.d/apache2 restart
  command[reset_apache]=/etc/init.d/apache2 restart
  command[reboot]=init 6
  command[reboot]=init 6
*Restart nrpe server
*Restart the nrpe server
  root@myLVS-LinuxClient:~# /etc/init.d/nagios-nrpe-server restart
  root@myLVS-LinuxClient:~# /etc/init.d/nagios-nrpe-server restart
<br><br>
<br><br>


==Setup the Windows server with the NSClient (the server part)==
==Setup the Windows Realserver with the NSClient (the server part)==
Get the Windows client here: http://www.nsclient.org/download<br>
Remember: Windows acts as server in the view of nrpe
*Get the Windows client here: http://www.nsclient.org/download<br>
*Install the client, the settings are not that important, just remove the password.
*Install the client, the settings are not that important, just remove the password.
[[File:myLVS-NRPEWinSetup.png|320px]]<br><br>
[[File:myLVS-NRPEWinSetup.png|320px]]<br><br>
Line 43: Line 44:
*Insecure true
*Insecure true
  insecure = true
  insecure = true
*Add commands:
*'''Add commands''':
  [/settings/external scripts/scripts]
  '''[/settings/external scripts/scripts]'''
  reset_iis="C:\Program Files\NSClient++\scripts\resetiis.bat"
  reset_iis="C:\Program Files\NSClient++\scripts\resetiis.bat"
  reboot="C:\Program Files\NSClient++\scripts\reboot.bat"
  reboot="C:\Program Files\NSClient++\scripts\reboot.bat"
Line 51: Line 52:
*C:\Program Files\NSClient++\scripts\reset_iis.bat
*C:\Program Files\NSClient++\scripts\reset_iis.bat
  iisreset
  iisreset
*C:\Program Files\NSClient++\scripts\reboot
*C:\Program Files\NSClient++\scripts\reboot.bat
  shutdown /r /f
  shutdown /r /f
<br>'''Don't forget to restart the nrpe++ services when changes are made'''
<br>
=Testing the myLVS access=
*Reset the IIS service on Windows
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reset_iis
*Reset the Apache on Linux
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reset_apache
*Reboot Windows
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reboot
*Reboot Linux
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reboot

Latest revision as of 15:48, 7 September 2015

myLVS is using the NSClient solution to communicate from the myLVS server to the nsclient service
running on the RealServer. myLVS supports both, the NSClient version which comes with Debian Linux
and the Windows version which comes with http://nsclient.org

Setup myLVS with the NSClient (the client part)

Remember: myLVS acts as client in the view of nrpe

  • Note: The Debian / Nagios package is required for remote access: nagios-nrpe-plugin
  • Check to see if the plugin runs without any error, run:
root@mylvs01:/# /usr/lib/nagios/plugins/check_nrpe

Setup the Linux Realserver with the NSClient (the server part)

Remember: The Realserver on Linux acts as server in the view of nrpe

  • Install NSClient Server part to the myLVS client
root@myLVS-LinuxClient:~# apt-get install nagios-nrpe-server
  • Run sudo
root@mylvs01:/#  visudo -f /etc/sudoers
  • Add to sudo
nagios ALL=NOPASSWD: /sbin/ipvsadm
nagios ALL=NOPASSWD: /sbin/init

Edit /etc/nagios/nrpe.cfg

  • Set Allowed hosts
allowed_hosts=127.0.0.1 192.168.2.100
  • Set dont blame
dont_blame_nrpe=1
  • Set two new commands, restart web and reboot
command[reset_apache]=/etc/init.d/apache2 restart
command[reboot]=init 6
  • Restart the nrpe server
root@myLVS-LinuxClient:~# /etc/init.d/nagios-nrpe-server restart



Setup the Windows Realserver with the NSClient (the server part)

Remember: Windows acts as server in the view of nrpe



Edit C:\Program Files\NSClient++\nsclient++.ini

  • Add to allowed hosts
allowed hosts = 127.0.0.1,::1,192.168.2.100
  • SSL options needed for the classic npe client, worst case is to allow only:
ssl options = sslv2,sslv3
  • Verify off
verify mode = none
  • Insecure true
insecure = true
  • Add commands:
[/settings/external scripts/scripts]
reset_iis="C:\Program Files\NSClient++\scripts\resetiis.bat"
reboot="C:\Program Files\NSClient++\scripts\reboot.bat"

Add two new batch files

  • C:\Program Files\NSClient++\scripts\reset_iis.bat
iisreset
  • C:\Program Files\NSClient++\scripts\reboot.bat
shutdown /r /f


Don't forget to restart the nrpe++ services when changes are made

Testing the myLVS access

  • Reset the IIS service on Windows
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reset_iis
  • Reset the Apache on Linux
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reset_apache
  • Reboot Windows
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reboot
  • Reboot Linux
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reboot
Retrieved from "https://mylvs.coolscript.org/index.php?title=Setup_Remote_Access&oldid=1296"