topic Re: Nagios NRPE + sudo + hpacucli not working in Operating System - Linux

Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Tue, 14 Apr 2009 09:01:22 GMT

I´m downloaded the nagios pluginet check_hparray that can get hp raid status from hpacucli:
http://www.nagiosexchange.org/cgi-bin/p ... 8.html;d=1

Also configured /etc/sudoers:
nagios ALL = NOPASSWD: /usr/sbin/hpacucli

If I "su" to user nagios and run the command check_hparray it is working fine.
However, when I try the same thing from nrpe daemon I notice that hpacucli is returning an error status (not 0) but without any error messages/output.

Note: OS is Red Hat Enterprise Linux 5.2.
I am calling multipath command in the same way using nrpe + sudo and this is working.
SELinux is NOT activated.

Any ideas?
Thanks...

Re: Nagios NRPE + sudo + hpacucli not working

Ivan Ferreira — Tue, 14 Apr 2009 19:46:00 GMT

Edit the check_hparray script and add an echo statement in the -s) section:

-s)
check=`sudo -u root $HPACUCLI controller slot=$2 ld all show`
# Add this line
echo $check > /tmp/check_array.out 2>&1
check_raid
;;

Consult the /tmp/check_array.out file

Re: Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Wed, 15 Apr 2009 04:32:18 GMT

I only get "check_hparray Error" output from the script and /tmp/check_array.out is empty.

Re: Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Thu, 16 Apr 2009 07:52:50 GMT

*bump*

no suggestions...? Thanks ...

Re: Nagios NRPE + sudo + hpacucli not working

Ivan Ferreira — Thu, 16 Apr 2009 11:47:19 GMT

You get:

echo "$PROGNAME Error. $checkm"

Because the $check variable is empty. There is something wrong because the tmp file has no output, that means that sudo and hpacucli is not being executed.

What do you get if you run:

sudo -u root /usr/sbin/hpacucli controller slot=$2 ld all show

From the command line? Replace $2 for the correct value as in your nrpe.cfg

Post your nrpe.cfg configuration file also for this section.

Re: Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Fri, 17 Apr 2009 05:11:27 GMT

Thanks for your reply...

If I "su" to user nagios it works:

-sh-3.2$ sudo -u root /usr/sbin/hpacucli controller slot=0 ld all show

Smart Array E200i in Slot 0

array A

logicaldrive 1 (136.7 GB, RAID 1+0, OK)

nrpe.cfg:
command[check_hparray]=/usr/lib/nagios/plugins/check_hparray -s $ARG1$

To me it appears like a problem calling sudo thru nrpe...IÂ´m lost...

Re: Nagios NRPE + sudo + hpacucli not working

Ivan Ferreira — Fri, 17 Apr 2009 12:06:27 GMT

What if you hard code the slot number in the npre.cfg file instead of having $ARG1$?

Re: Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Fri, 17 Apr 2009 12:10:05 GMT

Same problem when hard coding parameter IÂ´m afraid ...

Re: Nagios NRPE + sudo + hpacucli not working

Ivan Ferreira — Fri, 17 Apr 2009 13:10:23 GMT

You could try this:

- Set SUID to hpacucli
chmod u+s /usr/sbin/hpacucli

- set root:root as owner
chown root:root /usr/sbin/hpacucli

- Remove others read and execution permissions
chmod o-rw /usr/sbin/hpacucli

- Add nagios to root group
gpasswd -a nagios root

- Try again

Re: Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Fri, 24 Apr 2009 14:25:36 GMT

Solved it, if I added the whole command line in /etc/sudoers it worked:
nagios ALL = NOPASSWD: /usr/sbin/hpacucli controller slot=0 ld all show

This didnÂ´t work:
nagios ALL = NOPASSWD: /usr/sbin/hpacucli
(according to the plugin docs it should be enough but wasnÂ´t for some reason)

Re: Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Fri, 24 Apr 2009 14:26:23 GMT

/etc/sudoers:

nagios ALL = NOPASSWD: /usr/sbin/hpacucli controller slot=0 ld all show

Re: Nagios NRPE + sudo + hpacucli not working

Rick Garland — Mon, 04 May 2009 16:07:16 GMT

I know this is closed but to add my experience;

My sudoers file has the following,
nagios ALL=NOPASSWD:/usr/sbin/hpacucli

This has worked for several months without issue.

Instead of the check_array plugin I am using a script, but HP says it doesn't matter.

What has been an issue is that the array check via hpacucli is not supported and has caused some of our systems to crash and not reboot. Feedback from HP says that even though there is this hpacucli check option it is not intended to query the array for prolonged periods. HP says that doing the hpacucli forces the array to init and flush the buffers. Most of the time this is not a concern as it will ride out. But watch out for when it does come back and bite you.

If a system does crash check the messages file. The last entry is a nagios sudo to run the hpacucli.

Re: Nagios NRPE + sudo + hpacucli not working

GoranTornqvist — Tue, 05 May 2009 04:43:04 GMT

thanks for the tip ...

should add that the real solution for this was to uncomment "Defaults requiretty" in /etc/sudoers.