Setup Remote Access: Difference between revisions

From MyLVS
Jump to navigation Jump to search
No edit summary
Line 1: Line 1:
This is the remote access basic. NSCLIENT is used for the myLVS communication <br>
Remote access is done with nsclient. myLVS supports both, the nsclient version which comes from debian<br>
between the myLVS host (client) and the real server which are required to run <br>
and the windows version which comes with http://nsclient.org'''
the NSCLIENT server part. For more information about NRPE please see http://www.nsclient.org
<br>
<br>
=Setup myLVS with the NSClient (the client part)=
=Setup myLVS with the NSClient (the client part)=

Revision as of 18:37, 2 September 2015

Remote access is done with nsclient. myLVS supports both, the nsclient version which comes from debian
and the windows version which comes with http://nsclient.org

Setup myLVS with the NSClient (the client part)

  • On Debian8 run the installation command
root@mylvs01:/# apt-get install nagios-nrpe-plugin -s
  • Check to see if the plugin runs without any error, run:
root@mylvs01:/# /usr/lib/nagios/plugins/check_nrpe

Setup the Linux server with the NSClient (the server part)

  • Install NSClient Server part to the myLVS client
root@myLVS-LinuxClient:~# apt-get install nagios-nrpe-server
  • Add to sudo
nagios ALL=NOPASSWD: /sbin/ipvsadm
nagios ALL=NOPASSWD: /sbin/init

Edit /etc/nagios/nrpe.cfg

  • Set Allowed hosts
allowed_hosts=127.0.0.1 192.168.2.100
  • Set dont blame
dont_blame_nrpe=1
  • Set two new commands, restart web and reboot
command[reset_apache]=/etc/init.d/apache2 restart
command[reboot]=init 6
  • Restart nrpe server
root@myLVS-LinuxClient:~# /etc/init.d/nagios-nrpe-server restart



Setup the Windows server with the NSClient (the server part)

Get the Windows client here: http://www.nsclient.org/download

  • Install the client, the settings are not that important, just remove the password.



Edit C:\Program Files\NSClient++\nsclient++.ini

  • Add to allowed hosts
allowed hosts = 127.0.0.1,::1,192.168.2.100
  • SSL options needed for the classic npe client, worst case is to allow only:
ssl options = sslv2,sslv3
  • Verify off
verify mode = none
  • Insecure true
insecure = true
  • Add commands:
[/settings/external scripts/scripts]
reset_iis="C:\Program Files\NSClient++\scripts\resetiis.bat"
reboot="C:\Program Files\NSClient++\scripts\reboot.bat"

Add two new batch files

  • C:\Program Files\NSClient++\scripts\reset_iis.bat
iisreset
  • C:\Program Files\NSClient++\scripts\reboot.bat
shutdown /r /f


Restart nrpe++ service

Testing the myLVS access

  • Reset the IIS on Windows
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reset_iis
  • Reset the Apache on Linux
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reset_apache
  • Reboot Windows
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reboot
  • Reboot Linux
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reboot