By the way, for further info see the xinetd man page, which (on my
system, anyway) states:
group
determines the gid for the server process. The group name must exist
in /etc/group. If a group is not specified, the group of user will
be used (from /etc/passwd). This attribute is ineffective if the
effective user ID of xinetd is not super-user.
Note that it's only going to use the primary group. Other group rights
are dropped.
On Thu, 23 Apr 2009, Adam Mooz wrote:
> No, it's not, but that doesn't matter. I can manually execute the
> plugin, but not via NRPE, so I think something isn't running as
> nagios. Top says NRPE is running as nagios though. What user does
> the NRPE run it's scripts as on the remote machine?
>
> On 23-Apr-09, at 3:01 PM, Patrick Morris wrote:
>
> > On Thu, 23 Apr 2009, Adam Mooz wrote:
> >
> >> I'm using Nagios and NRPE to monitor some system logs on a remote
> >> system via check_logfiles.
> >>
> >> Here's the setup:
> >> -user 'nagio's is part of the 'adm' group
> >> -/var/log/syslog is readable by the 'adm' group
> >> -manually executing check_logfiles as nagios (sudo -u nagios ./
> >> check_logfiles <etc>) works
> >> -executing remotely via NRPE fails
> >> -NRPE is being started via xinetd and running as 'nagios'
> >>
> >> changing syslog to be world readable fixes the problem, however it
> >> does just that; leaves the syslog file world readable. This behavior
> >> is being repeated for several other log files as well (mysql, apache)
> >> where despite nagios being part of the appropriate groups still not
> >> remotely readable. This is clearly a problem of something running as
> >> a different user.
> >>
> >> Ideas?
> >
> > If I were a betting man I'd say that adm is not the nagios user's
> > primary group, and/or you've specified a different group in your
> > xinetd
> > config.
>
>
> ------------------------------------------------------------------------------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensign option that enables unlimited
> royalty-free distribution of the report engine for externally facing
> server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> Nagios-users mailing list
> Nagios-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting
> any issue.
> ::: Messages without supporting info will risk being sent to /dev/null
------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensign option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue.
::: Messages without supporting info will risk being sent to /dev/null
