Setup Remote Access

From MyLVS
Jump to navigation Jump to search

This is the remote access basic. NSCLIENT is used for the myLVS communication
between the myLVS host (client) and the real server which are required to run
the NSCLIENT server part. For more information about NRPE please see http://www.nsclient.org


Setup myLVS with the NSClient (the client part)

  • On Debian8 run the installation command
root@mylvs01:/# apt-get install nagios-nrpe-plugin -s
  • Check to see if the plugin runs without any error, run:
root@mylvs01:/# /usr/lib/nagios/plugins/check_nrpe

Setup the Linux server with the NSClient (the server part)

  • Install NSClient Server part to the myLVS client
root@myLVS-LinuxClient:~# apt-get install nagios-nrpe-server
  • Add to sudo
nagios ALL=NOPASSWD: /sbin/ipvsadm
nagios ALL=NOPASSWD: /sbin/init

Edit /etc/nagios/nrpe.cfg

  • Set Allowed hosts
allowed_hosts=127.0.0.1 192.168.2.100
  • Set dont blame
dont_blame_nrpe=1
  • Set two new commands, restart web and reboot
command[reset_apache]=/etc/init.d/apache2 restart
command[reboot]=init 6
  • Restart nrpe server
root@myLVS-LinuxClient:~# /etc/init.d/nagios-nrpe-server restart



Setup the Windows server with the NSClient (the server part)

Get the Windows client here: http://www.nsclient.org/download

  • Install the client, the settings are not that important, just remove the password.



Edit C:\Program Files\NSClient++\nsclient++.ini

  • Add to allowed hosts
allowed hosts = 127.0.0.1,::1,192.168.2.100
  • SSL options needed for the classic npe client, worst case is to allow only:
ssl options = sslv2,sslv3
  • Verify off
verify mode = none
  • Insecure true
insecure = true
  • Add commands:
[/settings/external scripts/scripts]
reset_iis="C:\Program Files\NSClient++\scripts\resetiis.bat"
reboot="C:\Program Files\NSClient++\scripts\reboot.bat"

Add two new batch files

  • C:\Program Files\NSClient++\scripts\reset_iis.bat
iisreset
  • C:\Program Files\NSClient++\scripts\reboot
shutdown /r /f


Restart nrpe++ service

Testing the myLVS access

root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reset_iis
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reset_apache
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.221 -p 5666  -c reboot
root@mylvs01:/home/demo# /usr/lib/nagios/plugins/check_nrpe -H 192.168.2.222 -p 5666  -c reboot