Re: [Ganglia-developers] enabling PHP module with package install

2014-08-06 Thread Alex Dean
On Aug 6, 2014, at 12:40 PM, Daniel Pocock dan...@pocock.pro wrote:

 I've noticed that in some fresh installs where the PHP module or CGI is
 not already enabled, my own package, ganglia-web, is not enabling it
 either and the PHP source code is being served to clients without being
 interpreted/executed.
 
 I'd like to tidy up the debian/control Depends field and the postinst to
 try and avoid this
 
 Is there any best practice for packages like this that use PHP,
 
 a) technique for enabling PHP support?
 
 b) preventing the display of PHP source code when PHP is not enabled?

It's not simple because apache + mod_php is only 1 way to deploy PHP. If I ran 
nginx + php-fgci, i'd be pretty annoyed by ganglia-web requiring me to use 
apache. (as the debian postinst script you linked to appears to do)

 
 To make matters more confusing, people who land in this situation with
 the Ganglia package usually see an error Sorry, you do not have access
 to this resource..  One of the first lines of code in the PHP is
 checking an ACL.  

This doesn't sound right. If PHP isn't enabled, a user won't see this error. 
(PHP would have to run in order for this to be the output.) They would see a 
source-code dump, as you said.

 If PHP is not executed at all, the browser renders the
 error anyway.  Maybe we need something like this at the top of every PHP
 file:
 
 ?php
 if(1  2) {
  die(htmlheadtitlePHP not enabled/titlebodyh4Your PHP
 module or CGI support is not enabled.  Please check the web server.
 Ignore any other messages below this line./h4/body/html);
 }

PHP would have to run in order for this to work.

maybe something like this:

?php
//
// Dear Mr. User: 
//   If you can see this, then PHP is not configured correctly.
//
?

alex
--
Infragistics Professional
Build stunning WinForms apps today!
Reboot your WinForms applications with our WinForms controls. 
Build a bridge from your legacy apps to the future.
http://pubads.g.doubleclick.net/gampad/clk?id=153845071iu=/4140/ostg.clktrk
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Has anyone considered using php accelerators such as eaccelerator

2013-07-08 Thread Alex Dean
If anyone is so inclined, xdebug + kcachegrind is a pretty good combination for 
figuring out where PHP is spending its time.

alex

On Jul 8, 2013, at 10:16 AM, Jesse Becker haw...@gmail.com wrote:

 I always figured that most of the time spent on rendering a Ganglia
 page is due to the many calls to rrdtool to render the images.  I
 don't know how much a PHP accelerator would help in that case.  That
 said, I don't have any actual numbers or testing to back that up.
 
 On Mon, Jul 8, 2013 at 10:27 AM, Chris Burroughs
 chris.burrou...@gmail.com wrote:
 I'm not aware of anyone that has tried and published their results.
 
 Does eaccelerator improve both time and memory use, or make time/memory
 tradeoffs in favor of the cpu?  My largest server side gweb performance
 gripe is that I have needed to bump php.ini's memory_limit several
 times, currently at 512M.
 
 
 On 07/06/2013 10:11 AM, Nikhil wrote:
 Hi,
 
 I was wondering if anyone has considered using any php accelerator for the
 ganglia web to improve the serving performance. I am not sure if the
 ganglia web code memory print is minimalistic, but I do tend to believe
 with the addition of php accelerator such as eaccelerator for apache + php
 ganglia web can improve upon results. I do want to know if any of others in
 the group has tried their hands at this and have been successful in doing
 so.
 
 Thanks,
 Nikhil
 
 
 
 
 --
 This SF.net email is sponsored by Windows:
 
 Build for Windows Store.
 
 http://p.sf.net/sfu/windows-dev2dev
 
 
 
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 --
 This SF.net email is sponsored by Windows:
 
 Build for Windows Store.
 
 http://p.sf.net/sfu/windows-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 
 -- 
 Jesse Becker
 
 --
 This SF.net email is sponsored by Windows:
 
 Build for Windows Store.
 
 http://p.sf.net/sfu/windows-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 


--
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] ganglia.info down

2012-11-05 Thread Alex Dean

On Nov 5, 2012, at 2:08 PM, Nicholas Satterly wrote:

 Looks ok to me and to isup... http://www.isup.me/ganglia.info/
 
 --Nick.

Looks ok from here now as well.

--
LogMeIn Central: Instant, anywhere, Remote PC access and management.
Stay in control, update software, and manage PCs from one command center
Diagnose problems and improve visibility into emerging IT issues
Automate, monitor and manage. Do more in less time with Central
http://p.sf.net/sfu/logmein12331_d2d
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] dynamic discovery of hosts in EC2

2012-10-12 Thread Alex Dean

On Oct 10, 2012, at 7:38 AM, Paul Hewlett wrote:

  
 Hi Nick
  
 Modify gmond to write a special file /etc/ganglia/ec2.conf with the 
 discovered instances and then modify gmetric to read that file – using a 
 cmdline option perhaps
 This change should be lightweight enough for gmetric

I haven't looked at this code specifically, but just a general suggestion: A 
process shouldn't typically be able to write to files in /etc. Any data that 
gmond needs to write out should probably go somewhere in /var.

alex


--
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] UUID instead of hostname/XDR change

2012-08-22 Thread Alex Dean
Putting a UUID in a field called 'HOST' seems backwards-incompatible to me. 
You're changing the meaning of the HOST field, even if the data type remains 
the same.

I'd favor reserving 'HOST' for a hostname, and adding a 'UUID' field to the XML 
for UUIDs.

On Aug 22, 2012, at 10:02 AM, Daniel Pocock wrote:

 Actually, there will be an option for that in gmond.conf, so it can be
 deployed in either of two ways, depending upon what is needed by the admin:
 
 a) put UUID in HOST/@NAME  (so that XML schema does not change)
 
 b) put UUID in some new attribute

Making this configurable seems like unnecessary complexity. Wouldn't the web UI 
then have to know which mode gmond is running in (and support either), or would 
gmetad normalize this somehow?

alex
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] add extras parsing to json graph-definitions

2012-07-19 Thread Alex Dean

On Jul 19, 2012, at 9:12 AM, Jeff Buchbinder wrote:

 On Thu, Jul 19, 2012 at 8:54 AM, Jochen Hein joc...@jochen.org wrote:
 Vladimir Vuksan vli...@veus.hr writes:
 
 I would define a scaling factor or some other variable. I do want to
 steer away from having tool specific options unless absolutely
 necessary.
 
 I agree that would be a useful goal, I just have no idea what I options
 I may need for my special problem [see my mail to ganglia-general].
 
 I've had a look at the other PHP-reports. A couple of them pass the
 option '--rigid' to rddtool. Other used options are --logarithmic and
 --lower-limit. I've no idea how that could be mapped into json and keep
 the syntax and the parsing simple.
 
 I'd suggest something like:
 
 options: {
 logarithmic: true,
 rigid: false,
 lower-limit: 0
 }
 
 with sensible defaults. If it's ignored by another graphing toolkit,
 that's fine.

Silently ignoring unsupported options seems like a bad choice to me, because it 
makes graph authoring  troubleshooting more difficult. If someone uses an 
unsupported option, we should blow up with an informative error message ASAP. 
Think about when you've misspelled a configuration option (in any system, not 
just gweb), and wasted a lot of time hunting for the cause of the odd results 
you see - totally frustrating, and totally preventable.

More generally: The JSON format should be focused on making the simple  common 
cases easy. The format should be small, simple,  easy to use. Allowing lots of 
platform-specific options dilutes this value. The PHP route is still available 
for the non-trivial cases. If you need RRD-specific features, then I think PHP 
is the way to go.

Presenting platform-specific options in a seemingly platform-agnostic way is 
worse. If we are going to support JSON options which are really RRD-specific, 
we need to make this clear.

One suggestion on how to do this (which I don't like as well, but I'll mention 
it anyway): Put RRD-specific options into something like 
{rrd-options:--color --rigid --whatever}. This at least gives someone else 
a clue that the JSON graph is intended only for use with RRD, rather than 
leaving it up to gweb to determine how to interpret logarithmic or rigid 
for any graphing platform we want to try supporting.

alex
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] jmxetric adapted to git, gmetric4j

2012-07-16 Thread Alex Dean

On Jul 14, 2012, at 1:11 PM, Bernard Li wrote:

 I'm open to suggestions on what directory they should be placed in,
 but IMHO they should not be in the top level.  Perhaps we could rename
 ganglia_contrib to ganglia_thirdparty and place those projects
 there?
 

If we've got a large diversity of projects, I think it makes sense that the top 
level be a little busy. I think that's actually much easier to understand than 
a catch-all repo called third_party which has all manner of semi-related stuff.

I'm thinking about the commit history, wiki, or issue tracker for a 
'third_party' repo, and I think it would be a big mess. Worse that having many 
projects at the top level.

If jmxetric or gmetric4j can be folded into one of the existing ganglia 
projects, that sounds fine. But creating a catch-all doesn't seem like a good 
idea.

Agree/disagree?

alex


--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Ganglia libvirt and other virtualization technologies

2012-06-20 Thread Alex Dean
gweb allows downloading RRD data as either csv or json. Might that help?

On Jun 20, 2012, at 2:40 PM, Simon G. wrote:

 I think I've found answer for my question. I've just read few files from 
 source code of ganglia-web and as i can see they are reading RRD to draw 
 everything so i think I have to write my own wrapper around RRD to do what i 
 need. Anyway thx for informations.
 
 Cheers,
 
 On Wed, Jun 20, 2012 at 8:57 PM, Peter Phaal peter.ph...@inmon.com wrote:
 There are people on this list who should be able to answer questions relating 
 to gmetad (although you might have better luck on the ganglia-general list). 
 My expertise is limited to sFlow.
 
 
 On Jun 20, 2012, at 11:39 AM, Simon G. wrote:
 
 In next 2-5 days I'll try ganglia + sFlow again, so I'll definitely let you 
 know about my problems.
 
 If you can't answer my previous question to whom should I send it?
 
 Cheers,
 
 On Wed, Jun 20, 2012 at 8:24 PM, Peter Phaal peter.ph...@inmon.com wrote:
 I can't help you with your questions about gmetad, but I would be very 
 interested in hearing where you ran into trouble during the sFlow/Ganglia 
 configuration. I am currently working on documentation and would like to 
 make sure that I fill any gaps.
 
 
 On Jun 20, 2012, at 11:09 AM, Simon G. wrote:
 
 I've already seen sFlow and ganglia about month ago, and I had some 
 problems during configuration, but maybe I should try it again. 
 
 So maybe I have different question now. Is there any way to query gmetad 
 about historical data? I'd like to retrieve some data in my external piece 
 of software (python module) to analyze those data and do some actions if 
 proper conditions are fulfilled. I don't want store data twice (in my 
 module for example in my Mysql database and in RRD files created by 
 gmetad), so my true question is: can i query gmetad to get those data, or 
 should i just read gmetad's RRD file and do not connect with gmetad itself 
 or maybe should i get data through tcp from gmetad and store it in my own 
 way and own database? I don't know much about RRD and I'd like to avoid 
 reading RRD files myself, but also I don't want to store them twice. It 
 would be perfect if I could get them through ganglia (from gmetad after 
 proper request), because mostly, I'm interested in historical data. 
 
 Btw. what differences are between gmetad and gmetad-python? Beside language 
 of course. Both implementations have the same features?
 
 
 On Tue, Jun 19, 2012 at 12:04 AM, Peter Phaal peter.ph...@inmon.com wrote:
 Simon,
 
 Ganglia 3.2+ can collect and display sFlow metrics:
 http://blog.sflow.com/2012/01/using-ganglia-to-monitor-virtual.html
 
 You can monitor the virtual machines by installing Host sFlow agents 
 (http://host-sflow.sourceforge.net/ ) on the hypervisors. The sFlow agents 
 export libvirt metrics using the sFlow protocol. Currently, Host sFlow 
 supports KVM, Xen and Hyper-V.
 
 Cheers,
 Peter
 
 On Jun 18, 2012, at 2:50 PM, Simon G. wrote:
 
 Hello,
 
 Is there any way to use Ganglia to monitor virtual machines? Right now I'd 
 like to get data from libvirt's api (CPU usage, IO, Network etc), but I 
 don't want to reinvent the wheel and I'd like to use already mature tools 
 to do that, for example Ganglia. I know collectd has plugins which support 
 libvirt, but from what I've read, ganglia could be better solution.
 
 1st question is: how can I monitor virtual machines in Ganglia. Especially 
 using libvirt, but later also Xen, VMware, Hyper-V. Is it possible? Can 
 ganglia monitor virtual machines? What can I monitor without additional 
 agent on guest and what can I monitor with such agent?
 2nd question: I've just found out gmetad-python, but before I'll try to 
 use it I'd like to ask about possibilities to use python scripts to 
 collect data from gmond. What is the easiest way to do that? 
 
 I'm interested in python, because I'd like to try create simple Openstack 
 and Ganglia proof of concept. I was going to use existing simple 
 monitoring around libvirt from openstack and implement storing data in RRD 
 files, but as I've mentioned above, I don't want to reinvent the wheel and 
 I think a better way is to integrate already existing solutions. The 
 question is how to integrate those two projects. My first step is to run 
 gmond on each host, collect data from it via python script, save those 
 data into RRD file and use this data in Openstack's environment. If 
 gmetad-python can do that, it's great. Then second step will be to get 
 that data from gmetad-python (via python script) and use it in Openstack's 
 environment.
 
 Cheers,
 -- 
 Simon
 
 
 --
 Live Security Virtual Conference
 Exclusive live event will cover all the ways today's security and 
 threat landscape has changed and how IT managers can respond. Discussions 
 will include endpoint security, mobile security and the latest in malware 
 threats. 
 

Re: [Ganglia-developers] Trac Wiki, Bugzilla and GitHub

2012-05-11 Thread Alex Dean
The integration between github issues and the general github workflow (linking 
of issues to pull requests, etc) is pretty nice to work with. I think we'll 
have fewer problems with the bug-tracker being out of sync with the real state 
of the code if we use github.

alex

On May 11, 2012, at 7:44 PM, Bernard Li wrote:

 Hi Daniel:
 
 On Fri, May 11, 2012 at 3:08 AM, Daniel Pocock dan...@pocock.com.au wrote:
 
 If I host it, it would purely be on a voluntary basis, so I would be
 hoping for upstream and/or Debian to be providing convenient packages
 and security updates.  Although I am quite capable of installing it
 manually, time spent maintaining such an install of bugzilla would cut
 into time spent maintaining any other open source packages I contribute to
 
 Thanks to Ben Hartshorne, I was able to find this:
 
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638705
 
 So yeah, bugzilla is temporarily removed from Debian.  However, it's
 still available in EPEL:
 
 http://dl.fedoraproject.org/pub/epel/6/x86_64/
 
 Is this really an issue?
 
 Thanks,
 
 Bernard
 
 --
 Live Security Virtual Conference
 Exclusive live event will cover all the ways today's security and 
 threat landscape has changed and how IT managers can respond. Discussions 
 will include endpoint security, mobile security and the latest in malware 
 threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 



signature.asc
Description: Message signed with OpenPGP using GPGMail
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] nearly 3.3.5...

2012-03-29 Thread Alex Dean
On Mar 29, 2012, at 6:40 PM, Bernard Li wrote:

 We found a memory leak in gmond which is considered a showstopper:
 
 http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=327

Off-topic, but I'm curious: Are gmond bugs being tracking in bugzilla, github, 
or both?

signature.asc
Description: Message signed with OpenPGP using GPGMail
--
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] 3.3.3 tagged

2012-03-21 Thread Alex Dean

On Mar 21, 2012, at 11:50 AM, Daniel Pocock wrote:

 On 21/03/2012 16:49, Jeff Buchbinder wrote:
 I found a small RPM packaging issue, which I corrected here:
 
 https://github.com/ganglia/monitor-core/commit/c25c4b31a874ab7105395eb712f5be8fc5a0539e
 
 I haven't changed the tagging or anything yet.
 
 Thanks for spotting that
 
 I'll see if there is any more feedback and then push out 3.3.4 tomorrow 
 with that fix.  It should not prevent other people testing 3.3.3 though.

I recall some confusion from users the last time we went through this process 
of incrementing the minor version number several times before a release: from 
3.1.2 to 3.1.7, I think.  We end up with a series of unreleased version numbers 
and that made some people wonder if they missed something.

http://www.mail-archive.com/ganglia-developers@lists.sourceforge.net/msg05496.html




signature.asc
Description: Message signed with OpenPGP using GPGMail
--
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Ganglia 3.3.1 configure.in broken, 3.3.2 needed

2012-03-08 Thread Alex Dean
In case there's any confusion about which wiki to use: We're working on porting 
the information which is in the Trac wiki over to github. I think anyone with a 
github account can create or a page.

https://github.com/ganglia/monitor-core/wiki
https://github.com/ganglia/ganglia-web/wiki

Github lets you select from several different types of formatting. I favor 
asciidoc, since it's easy to convert that to docbook  other formats. The 
ganglia-web pages I've moved over so far are all asciidoc if you want some 
examples.

alex

On Mar 8, 2012, at 9:34 AM, Daniel Pocock wrote:

 
 
 Michael, do you have write access on the wiki?  I think we need to get
 this distribution-specific stuff captured there along with the general
 notes I provided below.
 
 I will do the same for the OpenCSW process, then if one of us gets hit
 by a bus, the releases can live on
 
 Regards,
 
 Daniel
 
 
 
 On 08/03/12 16:26, Michael Perzl wrote:
 If you do an update to 3.3.2 could you also please make sure that the
 following files exist:
 
 ChangeLog
 libmetrics/ChangeLog
 libmetrics/INSTALL
 
 As with the 3.3.1 tar.gz file they don't exist thus preventing a
 autoreconf -fiv that I need to perform for all my additional Ganglia
 modules. Here is the code snippet from one of the SPEC files. This was
 not necessary with any previous version before.
 
 ##
 ## PREP
 ##
 %prep
 %setup -q -n ganglia-%{version}
 export PATH=/opt/freeware/bin:$PATH
 # apply all necessary AIX patches
 %patch0
 %patch1
 # apply the patch for the mod_ibmpower module
 %patch2
 *# autoreconf seems to need this one
 touch ChangeLog libmetrics/ChangeLog libmetrics/INSTALL*
 
 ##
 ## BUILD
 ##
 %build
 export CC=xlc_r -U_AIX43
 export LDFLAGS=-L/opt/freeware/lib -Wl,-bmaxdata:0x8000 -Wl,-brtl
 autoreconf -fiv
 ./configure \
 
 Thanks.
 
 Regards,
 Michael
 
 On 03/08/2012 03:33 PM, Daniel Pocock wrote:
 
 I notice that configure.in was only updated to 3.3.1 after the package
 was put out on Sourceforge
 
 This breaks the OpenCSW package build and may impact other people too
 
 Can I propose a 3.3.2 release?
 
 I was going to add a release manager document on the wiki, but I don't
 have write access (can someone please help me with that).  Here are the
 steps that I use with ganglia-modules-linux, I believe it is the same
 for Ganglia now that git is in use, but any further feedback would be
 helpful:
 
 
 a) review the changes from the last release (git diff 3.3.1 3.3.2) -
 look for anything that might impact binary compatibility with existing
 3rd party modules, etc
 
 b) run git log (from the previous release) and note all the changes, add
 them to the changelog (where is it now?  couldn't find it in git for
 monitor-core)
 
 c) update monitor-core/configure.in, in particular:
 
 GANGLIA_MAJOR_VERSION=3
 GANGLIA_MINOR_VERSION=3
 GANGLIA_MICRO_VERSION=2
 
 and commit that change together with change log:
 
 git add configure.in Changelog
 git commit -m 'Prepare v3.3.2 release'
 git push
 
 d) clone the repo into a fresh directory, bootstrap, build a tarball:
 
 git clone git:///github/ganglia ganglia-dist
 cd ganglia-dist  ./bootstrap  ./configure  make dist
 
 e) test the tarball
 
 f) if the tarball is good, tag the clone
 
 git tag -s -m 'Tag v3.3.2' 3.3.2
 git push --tags
 
 g) get a checksum of the tarball
 
 sha256sum ganglia-3.3.2.tar.gz
 
 h) upload the tarball to sourceforge
 
 i) announce it on the mailing list, publish both the checksum and the
 commit number of the tag, sign the email with the same PGP key used to tag
 
 j) update other web sites (e.g. ganglia.info)
 
 
 I'm sure that other optional steps could be added (e.g. more tests to
 run on the tarball prior to distribution, building binary packages for
 Debian/RH,...) but the steps above are probably the essential ones
 
 --
 Virtualization  Cloud Management Using Capacity Planning
 Cloud computing makes use of virtualization - but cloud computing 
 also focuses on allowing computing to be delivered as a service.
 http://www.accelacomm.com/jaw/sfnl/114/51521223/
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 --
 Virtualization  Cloud Management Using Capacity Planning
 Cloud computing makes use of virtualization - but cloud computing 
 also focuses on allowing computing to be delivered as a service.
 http://www.accelacomm.com/jaw/sfnl/114/51521223/
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 



signature.asc
Description: Message signed with OpenPGP using GPGMail
--

[Ganglia-developers] 'latest' release on sourceforge

2012-02-04 Thread Alex Dean
https://sourceforge.net/projects/ganglia/files/gweb/ says the latest release is 
3.2.0.

Can someone who has permissions update that link?

alex
--
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Protocol Efficiency Ideas

2012-02-03 Thread Alex Dean
On Feb 3, 2012, at 10:18 AM, Vladimir Vuksan wrote:

 It may be simple to export a simple hash table however you have to worry 
 about encoding. For example we have had issues with XML export in gmond
 where if you sent metrics with e.g.  or  things would break since XML tags 
 would break. So I'm in favor of outsourcing the JSON export to a library.
 
 Vladimir

+1

I've hunted numerous bugs in the past which turned out to be caused encoding 
code (for either JSON or XML) which was incomplete or overly simplistic. 
Character sets, properly escaping control characters, etc.  To do it well isn't 
as simple as it sounds.

alex
--
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Protocol Efficiency Ideas

2012-01-27 Thread Alex Dean

On Jan 27, 2012, at 8:59 AM, Im Root wrote:

 I believe that adding json would be a mistake. The reason is that when users 
 install the main package there would be now a dependency on having json 
 installed. It just adds to the complexity and helps to perpetuate RPM hell. 
 I've had to deal with installing json in the past and it's been awful. It may 
 be nice for a developer but not so nice for the end users.

I disagree for a few reasons.

 1. As a user, I sometimes want to consume ganglia data in other contexts (not 
just in gweb).  I'd much prefer working with JSON instead of XML.
 2. gweb currently allows users to download metrics as JSON.  This is done by 
getting XML from gmetad, and transforming it into JSON in PHP.  If gmetad could 
create JSON natively, gweb code could probably be streamlined.



Dave: At one time, Erik Kastner created a patch for rrdtool which allowed it to 
produce JSON from rrd file data.  Might be worth seeing where that project 
stands.  That's not exactly the same as what you're proposing, but it seems 
complementary.

 - http://oss.oetiker.ch/rrdtool/forum.en.html#nabble-td5629054
 - https://gist.github.com/614476

alex
--
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Gauging interest in writing a Ganglia eBook

2011-12-01 Thread Alex Dean
On Dec 1, 2011, at 1:31 PM, Matt Massie wrote:

 There's an O'reilly editor who's interested in publishing a ~50-page eBook on 
 ganglia.

I'd love to help out with documentation on the web frontend.

alex
--
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Upcoming Ganglia Web features

2011-11-29 Thread Alex Dean
I'd hoped to get it done this weekend, but no joy.  If I can't get it done this 
week, just go ahead and release.  I'll get it in the next one.

alex

On Nov 27, 2011, at 8:46 PM, Vladimir Vuksan wrote:

 I would like to wrap it up next week but it can wait. What's your timeline 
 look like ?
 
 Vladimir
 
 On Sat, 26 Nov 2011, Alex Dean wrote:
 
 
 On Nov 24, 2011, at 9:40 PM, Vladimir Vuksan wrote:
 
 I just wrote up a blog post about upcoming Ganglia Web features
 
 http://ganglia.info/?p=464
 
 If you have time and can help with writing documentation that would be
 greatly appreciated.
 
 Vladimir
 
 What's the timeline for this release?  I have some changes for the auth 
 system I've been working on, and if I can still get them in I'll try to get 
 them ready.
 
 Main points: make configuration simpler, and allow per-view access (right 
 now our ACL rules support only all/nothing access for all views).
 
 alex
 --
 All the data continuously generated in your IT infrastructure
 contains a definitive record of customers, application performance,
 security threats, fraudulent activity, and more. Splunk takes this
 data and makes sense of it. IT sense. And common sense.
 http://p.sf.net/sfu/splunk-novd2d
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 


--
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Investigating feasibility of moving repo to Github

2011-07-10 Thread Alex Dean

On Jul 10, 2011, at 9:28 PM, Vladimir Vuksan wrote:

 I have made an import of the monitor-core trunk into Github

+1.  I'm all for it.

alex

--
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] [Ganglia-general] Announcing Ganglia Web 2.0RC1

2011-06-22 Thread Alex Dean

On Jun 22, 2011, at 2:51 PM, Seth Graham wrote:

 
 On Jun 9, 2011, at 12:10 PM, Alex Dean wrote:
 I started off intending to allow per-view edit access, just like we allow 
 per-cluster edit access for optional graphs.  The complication is that each 
 resource (a view or a cluster) in the ACL is only identified by a simple 
 string.  Thus you can't have a cluster and a view which share the same name 
 - or, if you did you'd probably unwittingly be granting permissions you 
 didn't mean to.  I thought about introducing some kind of namespacing, and 
 then just decided to punt until it was actually needed.
 
 So... maybe that time is now? :)
 
 Something like this wouldn't be too hard to implement:
 $acl-allowView( 'username', 'view-name', GangliaAcl::EDIT );
 $acl-allowCluster( 'username', 'cluster-name', GangliaAcl::EDIT );
 
 Please suggest alternate APIs here.  That's just my initial brainstorm.
 
 I finally got a chance to sit down and poke at this.
 
 The good news is it's easy to implement a permissions system for adding 
 graphs to an existing view. My method was to edit GangliaAcl.php to add an 
 'EDIT_VIEW' resource, and use the add() function along with a clustername to 
 give a user view editing privileges. After updating the checkAccess() calls 
 where appropriate in host_view.php and views.php, a user can add graphs to 
 their view.

That requires that the view name match the cluster name, right?  Could you post 
your changes somewhere so we could see what you did?

 
 More complicated is the creation of the views themselves. Because views can 
 have names without any relation to ganglia clusters, the ACL system won't 
 work. I guess one could put in a restriction that a user can only create 
 views with the same name of clusters they have edit permissions for, but that 
 would limit them to owning a single view per cluster.
 
 (as an aside, is it intended that once a view is created, it cannot be 
 removed via the web interface?)

Probably more of an oversight.  Patches welcome! :)

 
 The more I look at it, the more inclined I am to leave the configuration as 
 it is. Every idea I come up with limits the flexibility of the Views or 
 requires more acl maintenance in conf.php.


I still want to take a stab at this, I just haven't had the time.  Help me 
understand your use case better.  You want to allow some non-admin users to 
edit a single view, right?  Is there a case for limiting the visibility of a 
view, or are we only concerned with who can change a view?

More generally, what permissions do we need?
 - view a view
 - create a view
 - edit a view
 - delete a view

I'd say sensible defaulte are that admins can do all of these things for all 
views, and anonymous users can view all views which haven't been specifically 
hidden.

alex
--
Simplify data backup and recovery for your virtual environment with vRanger.
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Data protection magic?
Nope - It's vRanger. Get your free trial download today.
http://p.sf.net/sfu/quest-sfdev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] [Ganglia-general] Announcing Ganglia Web 2.0RC1

2011-06-09 Thread Alex Dean

On Jun 9, 2011, at 11:02 AM, Seth Graham wrote:

 On Jun 8, 2011, at 8:25 PM, Alex Dean wrote:
 
 Hi Seth.  I'm just back from a week off the grid, and trying to get caught 
 up on a mountain of electronic stuff.  Here's my quick response.  Please let 
 me know if more explanation is required.
 
 Nope, the explanation makes sense. The only thing I was missing was detail 
 about the philosophy behind the privileges system. 
 
 Editing views is not per-cluster permission because views can contain graphs 
 from many clusters.  Currently, we only support a single 'edit' permission 
 for all views.  (A user can either edit all views, or can edit none.)  You 
 can't selectively grant edit permission on a single view.  That restriction 
 could possible be lifted in the future if there is demand for it.
 
 It's my primary motivation for updating to the new interface, actually. 

Interesting.

I started off intending to allow per-view edit access, just like we allow 
per-cluster edit access for optional graphs.  The complication is that each 
resource (a view or a cluster) in the ACL is only identified by a simple 
string.  Thus you can't have a cluster and a view which share the same name - 
or, if you did you'd probably unwittingly be granting permissions you didn't 
mean to.  I thought about introducing some kind of namespacing, and then just 
decided to punt until it was actually needed.

So... maybe that time is now? :)

Something like this wouldn't be too hard to implement:
  $acl-allowView( 'username', 'view-name', GangliaAcl::EDIT );
  $acl-allowCluster( 'username', 'cluster-name', GangliaAcl::EDIT );

Please suggest alternate APIs here.  That's just my initial brainstorm.

alex
--
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] [Ganglia-general] Announcing Ganglia Web 2.0RC1

2011-06-08 Thread Alex Dean
Hi Seth.  I'm just back from a week off the grid, and trying to get caught up 
on a mountain of electronic stuff.  Here's my quick response.  Please let me 
know if more explanation is required.

If you want to allow a user to be able to edit views, you need to grant them 
edit permission on GangliaAcl::ALL_VIEWS.

You can allow users to edit:
 - All views.  
 $acl-allow( 'username', GangliaAcl::ALL_VIEWS, GangliaAcl::EDIT );
 - Optional graphs for all clusters. 
 $acl-allow( 'username', GangliaAcl::ALL_CLUSTERS, GangliaAcl::EDIT );
 - Optional graphs for an individual cluster. 
 $acl-allow( 'username', 'clustername', GangliaAcl::EDIT );

Editing views is not per-cluster permission because views can contain graphs 
from many clusters.  Currently, we only support a single 'edit' permission for 
all views.  (A user can either edit all views, or can edit none.)  You can't 
selectively grant edit permission on a single view.  That restriction could 
possible be lifted in the future if there is demand for it.

Hope that helps.  As I said, please let me know if further explanation is 
required.

alex

On Jun 7, 2011, at 8:20 PM, Vladimir Vuksan wrote:

 Sounds like a bug. We'll take a look. If you end up fixing it feel free to 
 send us a patch.
 
 Thanks,
 Vladimir
 
 On Tue, 7 Jun 2011, Seth Graham wrote:
 
 
 I'm having some issues getting the user roles working as expected.
 
 The wiki instructs something like:
 
 $acl-addRole( $username, GangliaAcl::GUEST );
 $acl-allow( $username, $cluster, GangliaAcl::EDIT );
 
 Which does not result in the little blue + sign to be drawn next to graphs.
 
 From line 71 in host_view.php, there is this line:
 
 if(checkAccess(GangliaAcl::ALL_VIEWS, GangliaAcl::EDIT, $conf)) {
 
 Changing it to:
 
 if(checkAccess($clustername, GangliaAcl::EDIT, $conf)) {
 
 Allows the check to succeed, but I run into the same problem in views.php.
 
 
 What does the 'EDIT' role actually allow a user to edit, if not views? And 
 is it possible to configure the interface to allow a user to only edit 
 specific views? As configured now, it appears view editing is all or nothing.
 
 
 thanks,
 
 
 
 On Jun 1, 2011, at 10:08 AM, Vladimir Vuksan wrote:
 
 
 Announcing Ganglia Web 2.0 Release Candidate 1.
 
 http://ganglia.info/?p=373
 
 Vladimir
 
 --
 Simplify data backup and recovery for your virtual environment with vRanger.
 Installation's a snap, and flexible recovery options mean your data is safe,
 secure and there when you need it. Data protection magic?
 Nope - It's vRanger. Get your free trial download today.
 http://p.sf.net/sfu/quest-sfdev2dev
 ___
 Ganglia-general mailing list
 ganglia-gene...@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-general
 
 
 
 --
 EditLive Enterprise is the world's most technically advanced content
 authoring tool. Experience the power of Track Changes, Inline Image
 Editing and ensure content is compliant with Accessibility Checking.
 http://p.sf.net/sfu/ephox-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 


--
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


[Ganglia-developers] who is using 'private clusters' feature?

2011-04-21 Thread Alex Dean
Hi all.  We're working to provide some access controls for the new features in 
the upcoming 2.0 release of Ganglia Web.  This will largely replace the 
existing 'private clusters' functionality.  I'd like to hear from folks who are 
currently using this feature, to ensure that our replacement continues to meet 
your needs.

Currently:
 - You may define clusters as private, and configure a password which is used 
by anyone who wants to view that cluster.
 - There is a 'controlroom' context which grants access to all clusters to 
anyone who knows the password.

Upcoming:
 - Private clusters are still hidden from guests.
 - Admin users can view  edit all clusters (public  private).  I think this 
will replace the 'controlroom' context.
 - Apache will provide authentication.  Every user who will have elevated 
privileges will need a username  password.  The private_clusters config file 
will be removed.

A configuration file in Ganglia Web will determine which clusters are private, 
and which users may access them.  Access rules are configurable, so I think 
just about any permission scheme can be implemented.  Intermediate levels of 
access (between guest and admin) should be easy to implement.

The big change is going from '1 password per cluster' to '1 password per user', 
and moving authentication from Ganglia to Apache.  If you still want to have '1 
password per cluster', you could just create a single 'user' for each of your 
private clusters, and share this amongst all the people who should be able to 
access the private cluster.

Looking forward to your feedback!

best,
alex
--
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] let Grid and Cluster Load graphs at the web 2.0 interface lock like at the old interface

2011-04-19 Thread Alex Dean

On Apr 19, 2011, at 9:59 AM, Markus Köberl wrote:

 On Tuesday 19 April 2011, Alex Dean wrote:
 On Apr 19, 2011, at 8:34 AM, Markus Köberl wrote:
 { metric: cpu_num, color: 00FF00, label: Nodes, line_width:
 2, type: line, DS: num, context: { cluster: true, meta:
 true } }
 
 This seems like a good idea to me.
 
 What about formatting like this:
 { metric: cpu_num, color: 00FF00, label: Nodes, line_width:
 2, type: line, DS: num, contexts: [cluster, meta] }
 
 You could implement with:
 if ( isSet($item[ 'contexts' ])  array_key_exists($context,
 $item['contexts']) ) { continue;
 }
 
 The context names seem like data here, not keys, so I just thought an array
 might be more appropriate.
 
 Yes, it is much simpler now.
 
 Markus

Ah, yeah, especially since my suggested change implemented the opposite of your 
idea. Oops. :)

Also, I'm remembering to reply to everyone this time.

alex
--
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Web 2.0 UI code freeze

2011-04-14 Thread Alex Dean
Here's what I've been working on:

1. Create a login.php script.  This is protected by Apache authentication so 
you can use htpasswd, LDAP, or whatever you want for authentication.  If you're 
able to access this page, your username + a shared secret is hashed  stored in 
a cookie.  The shared secret is stored in Apache config ('SetEnv ganglia-secret 
myreallysecretphrase'), so it can be read only by root.  Users w/o root access 
could still set it in .htaccess, but it wouldn't be as secure.

2. Using Zend_Acl to set up access controls.
 - Anyone can view any public cluster without logging in.
 - Private clusters don't appear until you log in and have permissions to view 
them.
 - You cannot save views or otherwise make changes unless you log in and have 
appropriate permissions.
Basically, there are only 'view' and 'edit' privileges, applied on a 
per-cluster basis.  There's a 'guest' role which applies if you're not 
authenticated, and there's an 'admin' role which has full access.

3. A ganglia-specific authorization system compares your cookie to the Zend_Acl 
list, and decides whether you can or can't do a certain thing.

4. User-editable files like view definitions get moved to 
/var/lib/ganglia/data.  Keeping them out of the web root reduces the danger if 
the code which does the writing is ever exploited.

I've got a lot of this created.  It's rough, but coming together fairly quickly.

Should we maybe release a 'preview' of the new web UI without this stuff?  I 
agree we should get the new UI out in front of more people.  But I do also 
think we need to address the security implications of what we've currently got 
before making an official release.

thoughts?

alex
--
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Web 2.0 UI code freeze

2011-04-12 Thread Alex Dean

On Apr 11, 2011, at 10:24 PM, Jesse Becker wrote:

 I think that we should punt authentication to other systems/modules
 that are dedicated to doing so.

Yes, I agree that's a good solution.  Dumping the ganglia-specific 
private_clusters database in favor of authentication provided by Apache is a 
good idea, and shouldn't be hard to do.  We still need some sort of 
authorization mechanism though, mapping users-privileges or (as you suggest) 
groups-privileges.

 If a user wants to store custom views and such, push it into a cookie,
 and store it on the browser side.  Under *NO* circumstances should we
 allow a user to write data to the server through Ganglia.

I don't agree.  Restricting to cookie-based storage means views can't be shared 
easily, and will be lost when you clear cookies.  I think it's possible to 
safely allow web-based configuration of views, though I agree it's non-trivial. 
 If it's filesystem access which is the red flag, maybe we look at something 
like sqlite (which is available by default in PHP5), and/or move the conf/ 
directory outside of the web root.

I think it makes sense to ship the UI with a restrictive default access policy 
for people who don't want to allow web-based configuration.  But we should 
implement code to make web-based config possible for those who do.

I put together some idea-code for this last night, but it's all based on 
keeping a text file of users  password like private_clusters.  I'll need to 
take another pass at it to push all authentication back to Apache.  (I agree 
that should be done.)  
https://github.com/alexdean/ganglia-misc/blob/add-acl/ganglia-web/auth.php

alex
--
Forrester Wave Report - Recovery time is now measured in hours and minutes
not days. Key insights are discussed in the 2010 Forrester Wave Report as
part of an in-depth evaluation of disaster recovery service providers.
Forrester found the best-in-class provider in terms of services and vision.
Read this report now!  http://p.sf.net/sfu/ibm-webcastpromo
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Web 2.0 UI code freeze

2011-04-11 Thread Alex Dean

On Apr 11, 2011, at 9:07 PM, Vladimir Vuksan wrote:

 I am not sure what the right approach is. We could provide optional 
 authentication but this may be better addressed by people implementing access 
 controls in Apache ie. adding Basic auth to particular URLs. You could 
 certainly easily disable writing by setting proper permissions on conf/ 
 directory. This may be a non-issue for lots of people who are behind 
 firewalls and do not want an extra level of authentication. Perhaps we should 
 just document some of these approaches instead of reinventing the 
 authentication.
 
 Thoughts ?

I agree about not wanting to overly complicate things.

If we had some is_writable() checks, and didn't display links to actions which 
required write access (like updating a view) when that access wasn't available, 
that would probably be enough to implement a basic level of security.  It seems 
a little clunky to have to chmod the filesystem, make some changes, and chmod 
it back, but it may be good enough for now.  If we go that route, I think our 
Makefile ought to set the conf/ directory as read-only by default.

I like the idea of using Apache's authentication mechanisms, but they may not 
be fine-grained enough in some cases.  For example, view.php is used both to 
display a view and to modify it.  How would you make it read-only for some 
users, but allow admins to edit views?  You might be able to use a 
LocationMatch directive, but that seems likely to become a mess in a hurry.

I think it would be pretty straightforward to take the concept already in 
auth.php, and add a distinction between 'view' (for private clusters) and 
'edit' (for actions which change config) permissions.  Collecting username  
password from the user could still be done via HTTP auth as is already done in 
auth.php, but you'd need to change the file to distinguish between those who 
can edit and those who can view.

This doesn't feel overly complex to me, but I'm interested in what others have 
to say.  I don't want to hold up a release if I'm the only one who's concerned. 
 Any other opinions out there?

alex
--
Forrester Wave Report - Recovery time is now measured in hours and minutes
not days. Key insights are discussed in the 2010 Forrester Wave Report as
part of an in-depth evaluation of disaster recovery service providers.
Forrester found the best-in-class provider in terms of services and vision.
Read this report now!  http://p.sf.net/sfu/ibm-webcastpromo
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Web 2.0 UI code freeze

2011-04-10 Thread Alex Dean

On Apr 6, 2011, at 1:34 PM, Bernard Li wrote:

 Hi all:
 
 On Wed, Apr 6, 2011 at 11:14 AM, Vladimir Vuksan vli...@veus.hr wrote:
 
 I spoke to Bernard and we are considering doing a code freeze of the Web
 2.0 UI. I'd like to release it by the end of month so that people can start
 using it.
 
 Yeah, let's try to get this out soon.
 
 From the TODO 
 https://sourceforge.net/apps/trac/ganglia/browser/branches/monitor-web-2.0/TODO,
 I'd like to get the following done before the code freeze:
 
 - Add back the Ganglia logo
 - Provide an easy method for user to add their organization's logo

In my opinion, the new UI features which write to the file system on the web 
server (to save view definitions, etc) should require some kind of 
authentication.  Allowing any random user to change the UI's configuration 
seems like a hole we should fill before releasing.

Does anyone use the 'private clusters' feature which is implemented in 
auth.php?  Seems like we could use this authentication mechanism, though I did 
have a few concerns.
 - The authentication database is a 'private_clusters' text file, stored in the 
same directory as auth.php.  That means I could take a look at 
http://site.com/ganglia/private_clusters via my web browser and download the 
whole list of cluster names  MD5 hashes.
 - I'm not a crypto guy, but I believe the MD5 algorithm is now widely 
considered to be insecure, and not something we should be relying on.  
http://en.wikipedia.org/wiki/MD5#Security

Before release, I suggest we:
 - Move the private_clusters file outside Apache's DocumentRoot.  Maybe 
@sysconfdir@/private_clusters?
 - Update auth.php to use a more secure (but still widely available) hashing 
algorithm.  SHA1 or otherwise?
 - Require authentication for actions which can change UI configuration, like 
creating/altering views, or for any other action which might write user data to 
the web server's filesystem.
 - Support a wildcard cluster name in private_clusters, or a 'root' user, so an 
admin would only need to define 1 password to be able to edit anything in any 
cluster.  Maybe that's what the 'control' context is for?

alex
--
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] $conf array

2011-02-26 Thread Alex Dean
Sounds great.  Thanks for the feedback!

alex

On Feb 25, 2011, at 2:26 PM, Vladimir Vuksan wrote:

 
 I see what you are saying. Sounds like a good plan. If you want to rename
 all $GLOBALS to $conf and user input to $user that would be cool :-).


--
Free Software Download: Index, Search  Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] $conf array

2011-02-25 Thread Alex Dean
I created http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=299.  
Added the conf-conversion script  patches for eval_config.php and graph.php.  
I'll continue to convert other scripts as time allows.

alex

On Feb 24, 2011, at 10:05 PM, Alex Dean wrote:

 I wrote a script to read in a conf.php file and convert it to use a $conf 
 array.  I don't think we have a place for utility scripts like this right 
 now.  Where   should it go?  
 https://github.com/alexdean/ganglia-stuff/blob/master/reformat_conf.php
 
 After you use this tool, but before all code is updated to use $conf, we can 
 maintain backwards-compatibility with existing code with something like this:
 https://gist.github.com/843349
 
 I've taken a quick tour through my local ganglia using a converted conf.php 
 and not seen any obvious problems, but of course the non-obvious ones are 
 probably there somewhere.
 
 alex
 
 On Feb 24, 2011, at 7:01 AM, Jesse Becker wrote:
 
 +1 to that too
 
 On Wed, Feb 23, 2011 at 23:49, Bernard Li bern...@vanhpc.org wrote:
 +1 from me as well.
 
 I guess we should probably check it into both monitor-web-2.0 and trunk.
 
 Cheers,
 
 Bernard
 
 On Wed, Feb 23, 2011 at 7:35 PM, Jesse Becker haw...@gmail.com wrote:
 +1
 
 On Wed, Feb 23, 2011 at 21:27, Alex Dean a...@crackpot.org wrote:
 One of my gripes with the current PHP frontend code is how hard it can be 
 to recall where which variables are configuration, which come from user 
 input, and which are just local variables.  As one step toward fixing 
 this issue, I think it would be nice to place all configuration values 
 (mainly in conf.php currently) into a $conf array.  The benefit is that 
 it's immediately clear in any code which uses these values that you're 
 dealing with configuration values.  There's no danger of name collisions 
 with other variables.
 
 I'm just wondering if others feel the same way, and would support a 
 change like this.  It's pretty straighforward to do, but would obviously 
 touch a lot of different code.  Before I go ahead with making all those 
 changes, I guess I'd just like to know if there are any huge objections 
 out there to this idea.  Take a look, let me know what you think.  I'd 
 like to do something similar for user input as well, maybe $user?
 
 http://pastie.org/1600587
 
 thanks,
 alex
 
 
 
 --
 Free Software Download: Index, Search  Analyze Logs and other IT data in
 Real-Time with Splunk. Collect, index and harness all the fast moving IT 
 data
 generated by your applications, servers and devices whether physical, 
 virtual
 or in the cloud. Deliver compliance at lower cost and gain new business
 insights. http://p.sf.net/sfu/splunk-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 
 
 --
 Jesse Becker
 
 --
 Free Software Download: Index, Search  Analyze Logs and other IT data in
 Real-Time with Splunk. Collect, index and harness all the fast moving IT 
 data
 generated by your applications, servers and devices whether physical, 
 virtual
 or in the cloud. Deliver compliance at lower cost and gain new business
 insights. http://p.sf.net/sfu/splunk-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 
 
 
 -- 
 Jesse Becker
 
 
 
 --
 Free Software Download: Index, Search  Analyze Logs and other IT data in 
 Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
 generated by your applications, servers and devices whether physical, virtual
 or in the cloud. Deliver compliance at lower cost and gain new business 
 insights. http://p.sf.net/sfu/splunk-dev2dev 
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 


--
Free Software Download: Index, Search  Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] $conf array

2011-02-25 Thread Alex Dean
Hi!

I want the code to be clearer about which values are from configuration, which 
are from user input, and which are just local variables.  Using $GLOBALS on 
it's own doesn't really address that concern.  You could use something like 
$GLOBALS['conf']['ganglia_dir'], but it seems unnecessarily long.

We could make a convention like $GLOBALS is for configuration, which I think 
is the approach you've taken with your changes in conf.php so far.  My only 
objection to that is that I'd also like to set up something like $user to hold 
all the values which come from user input.  Again, that could be in 
$GLOBALS['user'], but I'd favor just a regular array.  It's shorter  more 
readable.

Most of what's currently going on in ganglia is in the top-level scope, so 
there isn't a lot of practical difference between 
$GLOBALS['conf']['ganglia_dir'] and $conf['ganglia_dir'], though I think the 
readability is better for $conf.  Inside functions, I'd like to see argument 
passing instead of globals, but that's really a separate issue.  (Passing $conf 
as an argument is also makes functions easier to test, and I do want to see us 
get some automated testing coverage on the functions we do have.)

Thoughts?

alex


On Feb 25, 2011, at 10:36 AM, Vladimir Vuksan wrote:

 
 Alex,
 
 I have been using the $GLOBALS array for global configuration options. I
 would recommend using that instead of $conf
 
 http://sourceforge.net/apps/trac/ganglia/browser/branches/monitor-web-2.0/conf.php.in?rev=2489#L8
 
 Thanks,
 Vladimir
 
 On Fri, 25 Feb 2011 09:51:17 -0600, Alex Dean a...@crackpot.org wrote:
 I created
 http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=299. 
 Added
 the conf-conversion script  patches for eval_config.php and graph.php. 
 I'll continue to convert other scripts as time allows.
 
 alex
 
 On Feb 24, 2011, at 10:05 PM, Alex Dean wrote:
 
 I wrote a script to read in a conf.php file and convert it to use a
 $conf array.  I don't think we have a place for utility scripts like
 this
 right now.  Where   should it go? 
 https://github.com/alexdean/ganglia-stuff/blob/master/reformat_conf.php
 
 After you use this tool, but before all code is updated to use $conf,
 we
 can maintain backwards-compatibility with existing code with something
 like this:
 https://gist.github.com/843349
 
 I've taken a quick tour through my local ganglia using a converted
 conf.php and not seen any obvious problems, but of course the
 non-obvious
 ones are probably there somewhere.
 
 alex
 
 On Feb 24, 2011, at 7:01 AM, Jesse Becker wrote:
 
 +1 to that too
 
 On Wed, Feb 23, 2011 at 23:49, Bernard Li bern...@vanhpc.org wrote:
 +1 from me as well.
 
 I guess we should probably check it into both monitor-web-2.0 and
 trunk.
 
 Cheers,
 
 Bernard
 
 On Wed, Feb 23, 2011 at 7:35 PM, Jesse Becker haw...@gmail.com
 wrote:
 +1
 
 On Wed, Feb 23, 2011 at 21:27, Alex Dean a...@crackpot.org wrote:
 One of my gripes with the current PHP frontend code is how hard it
 can be to recall where which variables are configuration, which
 come
 from user input, and which are just local variables.  As one step
 toward fixing this issue, I think it would be nice to place all
 configuration values (mainly in conf.php currently) into a $conf
 array.  The benefit is that it's immediately clear in any code
 which
 uses these values that you're dealing with configuration values. 
 There's no danger of name collisions with other variables.
 
 I'm just wondering if others feel the same way, and would support a
 change like this.  It's pretty straighforward to do, but would
 obviously touch a lot of different code.  Before I go ahead with
 making all those changes, I guess I'd just like to know if there
 are
 any huge objections out there to this idea.  Take a look, let me
 know
 what you think.  I'd like to do something similar for user input as
 well, maybe $user?
 
 http://pastie.org/1600587
 
 thanks,
 alex
 
 
 
 
 --
 Free Software Download: Index, Search  Analyze Logs and other IT
 data in
 Real-Time with Splunk. Collect, index and harness all the fast
 moving IT data
 generated by your applications, servers and devices whether
 physical, virtual
 or in the cloud. Deliver compliance at lower cost and gain new
 business
 insights. http://p.sf.net/sfu/splunk-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 
 
 --
 Jesse Becker
 
 
 --
 Free Software Download: Index, Search  Analyze Logs and other IT
 data in
 Real-Time with Splunk. Collect, index and harness all the fast
 moving
 IT data
 generated by your applications, servers and devices whether
 physical,
 virtual
 or in the cloud. Deliver compliance at lower cost and gain new
 business

Re: [Ganglia-developers] $conf array

2011-02-24 Thread Alex Dean
I wrote a script to read in a conf.php file and convert it to use a $conf 
array.  I don't think we have a place for utility scripts like this right now.  
Where   should it go?  
https://github.com/alexdean/ganglia-stuff/blob/master/reformat_conf.php

After you use this tool, but before all code is updated to use $conf, we can 
maintain backwards-compatibility with existing code with something like this:
https://gist.github.com/843349

I've taken a quick tour through my local ganglia using a converted conf.php and 
not seen any obvious problems, but of course the non-obvious ones are probably 
there somewhere.

alex

On Feb 24, 2011, at 7:01 AM, Jesse Becker wrote:

 +1 to that too
 
 On Wed, Feb 23, 2011 at 23:49, Bernard Li bern...@vanhpc.org wrote:
 +1 from me as well.
 
 I guess we should probably check it into both monitor-web-2.0 and trunk.
 
 Cheers,
 
 Bernard
 
 On Wed, Feb 23, 2011 at 7:35 PM, Jesse Becker haw...@gmail.com wrote:
 +1
 
 On Wed, Feb 23, 2011 at 21:27, Alex Dean a...@crackpot.org wrote:
 One of my gripes with the current PHP frontend code is how hard it can be 
 to recall where which variables are configuration, which come from user 
 input, and which are just local variables.  As one step toward fixing this 
 issue, I think it would be nice to place all configuration values (mainly 
 in conf.php currently) into a $conf array.  The benefit is that it's 
 immediately clear in any code which uses these values that you're dealing 
 with configuration values.  There's no danger of name collisions with 
 other variables.
 
 I'm just wondering if others feel the same way, and would support a change 
 like this.  It's pretty straighforward to do, but would obviously touch a 
 lot of different code.  Before I go ahead with making all those changes, I 
 guess I'd just like to know if there are any huge objections out there to 
 this idea.  Take a look, let me know what you think.  I'd like to do 
 something similar for user input as well, maybe $user?
 
 http://pastie.org/1600587
 
 thanks,
 alex
 
 
 
 --
 Free Software Download: Index, Search  Analyze Logs and other IT data in
 Real-Time with Splunk. Collect, index and harness all the fast moving IT 
 data
 generated by your applications, servers and devices whether physical, 
 virtual
 or in the cloud. Deliver compliance at lower cost and gain new business
 insights. http://p.sf.net/sfu/splunk-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 
 
 --
 Jesse Becker
 
 --
 Free Software Download: Index, Search  Analyze Logs and other IT data in
 Real-Time with Splunk. Collect, index and harness all the fast moving IT 
 data
 generated by your applications, servers and devices whether physical, 
 virtual
 or in the cloud. Deliver compliance at lower cost and gain new business
 insights. http://p.sf.net/sfu/splunk-dev2dev
 ___
 Ganglia-developers mailing list
 Ganglia-developers@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/ganglia-developers
 
 
 
 
 
 -- 
 Jesse Becker
 


--
Free Software Download: Index, Search  Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] [PATCH] Fix libmetrics build on Mac OS X 10.5 and newer

2010-04-15 Thread Alex Dean


On Apr 14, 2010, at 11:37 AM, Ryan Pavlik wrote:


Hello all!

Just getting started using Ganglia - I first tried to compile it on my
Mac and ran into a compile issue which I was able to fix.   
Apparently in

10.5 and above, the kvm.h header and the /dev node it accesses have
been removed.  I added a configure check for the header (rather than  
the

OS version directly) and modified the code accordingly.  I've put the
patch up on the bugzilla, but I wanted to email as well just to make
sure it didn't get missed.

http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=258


Hi Ryan.  Bug 258 looks like a duplicate of bug 168, which was created  
for this same issue back in 2008.  I've been able to get ganglia 3.1.2  
running on OSX 10.5 following the workaround described in #168.  I  
haven't upgraded to 10.6 yet, so I'm not sure what ganglia's status is  
there.


http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=168
http://www.deanspot.org/content/compiling-ganglia-gmond-and-gmetad-osx-105



I've also made formulas for the Homebrew package manager for the  
Mac:

see http://mxcl.github.com/homebrew/ for info on the tool (similar in
goals as MacPorts, but different philosophy: doesn't duplicate system
libraries, and is very lightweight - don't need to write a package
description to have it help manage that package.)  My fork that  
includes

the ganglia package can be found at
http://www.github.com/rpavlik/homebrew - if you start with a standard
homebrew setup, add my repo as a remote and merge it in, you can  
install

Ganglia with just one command:

homebrew install ganglia


I hadn't heart of homebrew before.  Thanks for the tip!

alex


PGP.sig
Description: This is a digitally signed message part
--
Download Intel#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] [Ganglia-general] ganglia using ports 1024?

2010-03-24 Thread Alex Dean


On Mar 24, 2010, at 3:40 PM, Brad Nicholes wrote:


[Moved to the dev list]


On 3/22/2010 at 7:49 AM, in message
alpine.lrh.2.00.1003221347360.18...@beaker.phy.bris.ac.uk, Winnie  
Lacesso

winnie.lace...@bristol.ac.uk wrote:


Dear All,

I'm new to ganglia, but it looks wonderful.
Platform is Scientific Linux 4  5.
Due to no firewall  1024 it might be more prudent for ganglia to use
ports  1024 - I'm nervous to have anything php-related listening on
unfirewalled network. Am trying to configure ganglia using ports 849,
851 for xml  852 for interactive.
Since gmetad  gmond run as user ganglia, I think this is the  
problem - it

can't create ports  1024?
Errors are
tcp_listen() on xml_port failed: Permission denied

I can't seem to find any example where ganglia is used with ports   
1024.

Impossible?
Pointers gratefully deferenced



The problem here is that the socket creation is happening after  
gmond has dropped root.  Therefore unless the runas user has  
sufficient rights to create a port 1024 you will run into problems  
trying to use ports 1024.


I know there was a lot of discussion several months ago about when  
to daemonize and when to setuid.  Can somebody who is more familiar  
with the discussion respond with what the outcome was?  Carlo,  
Daniel  maybe??


Can we just move the calls to setup_listen_channels_pollset and  
Ganglia_udp_send_channels_create before the call to  
setid_if_necessary?  It would still be happening after the call to  
daemonize_if_necessary.


There's nothing written in PHP listening anywhere is there?  No daemon  
processes written in PHP.  PHP is run as an Apache module, so it will  
be on whatever port Apache is listening on and (presumably) will be  
running as an unprivileged user.


alex


PGP.sig
Description: This is a digitally signed message part
--
Download Intel#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] 3.0.7 release

2008-02-12 Thread Alex Dean
Jesse Becker wrote:
 On Feb 12, 2008 7:57 PM, Bernard Li [EMAIL PROTECTED] wrote:
 Guys:

 I plan to check-in the following patch and release 3.0.7:
 
 -GANGLIA_RELEASE_NAME=Foss
 +GANGLIA_RELEASE_NAME=Fossett
 
 Nice touch.
 
 The following issues are fixed:

 1) (now 0.00)
 2) Show Hosts toggle stopped working
 
 Both look fixed.
 

Yep, works for me.

alex

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Semi-serious bug in 3.0.6

2008-02-09 Thread Alex Dean
Bernard Li wrote:
 Hi Jesse:
 
 On 2/8/08, Jesse Becker [EMAIL PROTECTED] wrote:
 
 Slightly different approaches.  The r926 patch adds a new subroutine
 in functions.php.  The one I just posted fixes an existing one.  Take
 your pick.

 I actually think that using is_numeric() is a better solution, rather
 than using a regex.
 
 Okay, you guys work out the best approach and fire me a patch.  Better
 yet, file a bug in bugzilla and put it there (feel free to assign me
 to it).  Please supply patches for both branch and trunk.
 
 With the number of patches that have been showing up in the list
 lately, some are bound to be lost if not tracked properly.
 
 Thanks,
 
 Bernard

I filed 2 bugs and assigned them to you.  First to remove some debugging 
code from conf.php in trunk.  Second to fix the input filtering 
functions - I attached patches for both trunk and 30-beta.  They use 
is_numeric() rather than ctype_digit() or preg_match().

http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=177
http://bugzilla.ganglia.info/cgi-bin/bugzilla/show_bug.cgi?id=178

alex

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


[Ganglia-developers] 3 quick patches, no more dependency on php-ctype

2008-02-08 Thread Alex Dean

...based on revision 940.

1. trunk-conf.patch

* Some debugging code got left in conf.php from adding input filtering 
in revision 905.  This patch removes that code.


2. trunk-float.patch

* Change clean_float() to an is_numeric() call rather than a regular 
expression.  Equivalent behavior with small performance gain.

* Remove clean_number() function from functions.php.
* Change all calls to clean_number() to use clean_float().

This remove the dependency on the ctype extension.

3. 30-beta-float.patch

* Add the clean_float() function, which was not present in this branch. 
 Identical to clean_float() in trunk.

* Change all clean_number() calls to clean_float() calls.
* Remove clean_number() function from functions.php.
Index: graph.php
===
--- graph.php   (revision 940)
+++ graph.php   (working copy)
@@ -19,17 +19,17 @@
 $self = isset($_GET[me]) ?
escapeshellcmd( clean_string( rawurldecode($_GET[me] ) ) ) : NULL;
 $max = isset($_GET[x]) ? 
-   clean_number( rawurldecode($_GET[x] ) ) : NULL;
+   clean_float( rawurldecode($_GET[x] ) ) : NULL;
 $min = isset($_GET[n]) ?
-   clean_number( rawurldecode($_GET[n] ) ) : NULL;
+   clean_float( rawurldecode($_GET[n] ) ) : NULL;
 $value = isset($_GET[v]) ?
-   clean_number( rawurldecode( $_GET[v] ) ) : NULL;
+   clean_float( rawurldecode( $_GET[v] ) ) : NULL;
 $load_color = isset($_GET[l])  is_valid_hex_color( rawurldecode( $_GET[ 
'l' ] ) ) ?
escapeshellcmd( rawurldecode( $_GET[l] ) ) : NULL;
 $vlabel = isset($_GET[vl]) ?
escapeshellcmd( clean_string( rawurldecode( $_GET[vl] ) ) ) : NULL;
 $sourcetime = isset($_GET[st]) ?
-   clean_number( $_GET[st] ) : NULL;
+   clean_float( $_GET[st] ) : NULL;
 
 # RFM - Define these variables to avoid Undefined variable errors being 
 # reported in ssl_error_log.
Index: functions.php
===
--- functions.php   (revision 940)
+++ functions.php   (working copy)
@@ -421,14 +421,10 @@
 }
 
 
#---
-# If arg is entirely numeric, return it.  Otherwise, return null.
-function clean_number( $digit )
+# If arg is a valid floating point number, return it.  Otherwise, return null.
+function clean_float( $value ) 
 {
-  $return_value = null;
-  if( ctype_digit( $digit ) ) {
-$return_value = $digit;
-  }
-  return $return_value;
+  return is_numeric( $value ) ? $value : null;
 }
 
 
#---
Index: get_context.php
===
--- get_context.php (revision 940)
+++ get_context.php (working copy)
@@ -18,22 +18,22 @@
 $sort = isset($_GET[s]) ?
escapeshellcmd( clean_string( rawurldecode($_GET[s]) ) ) : NULL;
 $controlroom = isset($_GET[cr]) ?
-   clean_number( rawurldecode($_GET[cr]) ) : NULL;
+   clean_float( rawurldecode($_GET[cr]) ) : NULL;
 $hostcols = isset($_GET[hc]) ?
-   clean_number( $_GET[hc] ) : NULL;
+   clean_float( $_GET[hc] ) : NULL;
 # Flag, whether or not to show a list of hosts
 $showhosts = isset($_GET[sh]) ? 1 : NULL;
 # The 'p' variable specifies the verbosity level in the physical view.
 $physical = isset($_GET[p]) ?
-   clean_number( $_GET[p] ) : NULL;
+   clean_float( $_GET[p] ) : NULL;
 $tree = isset($_GET[t]) ?
escapeshellcmd($_GET[t] ) : NULL;
 # A custom range value for job graphs, in -sec.
 $jobrange = isset($_GET[jr]) ?
-   clean_number( $_GET[jr] ) : NULL;
+   clean_float( $_GET[jr] ) : NULL;
 # A red vertical line for various events. Value specifies the event time.
 $jobstart = isset($_GET[js]) ?
-   clean_number( $_GET[js] ) : NULL;
+   clean_float( $_GET[js] ) : NULL;
 # The direction we are travelling in the grid tree
 $gridwalk = isset($_GET[gw]) ?
escapeshellcmd( clean_string( $_GET[gw] ) ) : NULL;
Index: conf.php
===
--- conf.php(revision 940)
+++ conf.php(working copy)
@@ -5,11 +5,6 @@
 #
 include_once ./version.php;
 
-$get = print_r( $_GET, 1 );
-$fp = fopen( '/tmp/ganglia_vars.txt', 'a+' );
-fwrite( $fp, $_SERVER[ 'PHP_SELF'] . \n . $get . \n\n );
-fclose( $fp );
-
 #
 # The name of the directory in ./templates which contains the
 # templates that you want to use. Templates are like a skin for the
Index: graph.php
===
--- graph.php   (revision 940)
+++ graph.php   (working copy)
@@ -19,9 +19,9 @@
 $self = isset($_GET[me]) ?
escapeshellcmd( clean_string( rawurldecode($_GET[me] ) ) ) : NULL;
 $max = isset($_GET[x]) ? 
-   clean_number( rawurldecode($_GET[x] ) ) : NULL;
+   clean_float( rawurldecode($_GET[x] ) ) : NULL;
 $min = isset($_GET[n]) ?
-   clean_number( rawurldecode($_GET[n] ) 

Re: [Ganglia-developers] 3 quick patches, no more dependency on php-ctype

2008-02-08 Thread Alex Dean

[EMAIL PROTECTED] wrote:

Quoting Bernard Li [EMAIL PROTECTED]:


Hi Alex:




Not sure if GMail is to blame here, but I can't tell which patch is
which since they're inlined.  Perhaps you can send them in as
attachments?  Alternatively, send them in as separate threads.


Wow.  Sorry about that.  I did compose the message w/ the patches as  
attachments, and when I received a copy of my message they were  
displayed inline (but were also available as attachments as well).   
I'm using Thunderbird for mail.


I'll tar/gzip and resend when I get home tonight.  That should keep  
the MUA from trying any more tricks.


alex



Here they are.  Second try.

BTW : I apologize for the goofup in 3.0.6 which is prompting a 3.0.7 
release.  I was in a big rush to get the XSS fixes out the door, and I 
guess it shows in the quality of the code.


alex


ganglia-patches.tar.gz
Description: GNU Zip compressed data
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] Semi-serious bug in 3.0.6

2008-02-08 Thread Alex Dean
Jesse Becker wrote:
 Here is a small patch against version 3.0.6 (*NOT* against trunk) that
 should fix the now 0.00 problem.  It is simple enough:
 
 cut here-
 --- functions.php.orig   Fri Dec 14 18:42:42 2007
 +++ functions.php  Fri Feb  8 22:47:39 2008
 @@ -422,13 +422,8 @@
 
  
 #---
  # If arg is entirely numeric, return it.  Otherwise, return null.
 -function clean_number( $digit )
 -{
 -  $return_value = null;
 -  if( ctype_digit( $digit ) ) {
 -$return_value = $digit;
 -  }
 -  return $return_value;
 +function clean_number( $digit ) {
 +  return is_numeric($digit) ? $digit : null;
  }
 
  
 #---
 -cut here--
 
 
 The original problem is that ctype_digit is literal in what it checks
 for:  digits.   So 4 would get passed, but 4.0 would not, since
 that pesky non-digit . character is there.  We actually want valid
 numbers, not just digits.  is_numeric should work here, or some fancy
 regex (but that's probably slower and not needed).
 
 
 

Similar fix is included in the set of patches I sent a few hours ago. 
Only difference is I removed clean_number() in preference for the more 
precise clean_float().

I changed the existing clean_float() to use is_numeric() rather that the 
regex in Jesse's previous patch since it was a bit faster in some simple 
benchmarks.

alex

-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


Re: [Ganglia-developers] XDR packet refactoring and additional metric metadata...

2007-12-08 Thread Alex Dean
Brad Nicholes wrote:
 On 12/5/2007 at 11:33 AM, in message
 [EMAIL PROTECTED], Paul Millar
 [EMAIL PROTECTED] wrote:
 On Thursday 29 November 2007 00:09:20 Brad Nicholes wrote:
 [...]
 METRIC NAME=swap_free VAL=188 TYPE=uint32 UNITS=KB
 TN=81296 TMAX=180 DMAX=0 SLOPE=both SOURCE=gmond
 EXTRA_DATA DESC=Amount of available swap memory/
 EXTRA_DATA TITLE=swap_free/
 By default the EXTRA_DATA TITLE is the same as the metric name.  However
 if you add a Title=blah to any Metric{} block in gmond.conf file, that
 title is reflected in the EXTRA_DATA TITLE tag.
 Why not simply omit the EXTRA_DATA_TITLE if the user doesn't supply it?

 If, under these circumstances, it's always going to be the metric name, why 
 not have gmetad infer this.  Not including redundant information may save (a 

 bit) on transfer time.

 
 We could.  I just thought that it might be easier for the web frontend if it 
 didn't have to worry about whether the TITLE existed or not and could just 
 count on it being there.  I am guessing that moving forward an alternate user 
 friendly title will probably be the norm rather than the exception.  At the 
 moment since the code is in kind of a transition state is seems more like the 
 exception.
 
 Brad

I'd prefer to see more distinctive tag names, and less done with attributes.

METRIC
   DESCAmount of available swap memory/DESC
   TITLEswap_free/TITLE
/METRIC

is preferable to

METRIC
   EXTRA_DATA DESC=Amount of available swap memory /
   EXTRA_DATA TITLE=swap_free /
/METRIC

in my opinion.  It's just a personal preference, though, and I think as 
a consumer (from the web frontend) I could work with either.

Here's a few reasons I prefer the second scheme:
*  It uses a tag name that more closely describes the data it's 
containing.  True, it is 'extra data', but it's more specifically a 
'title' or a 'description' of the metric.
* It allows further nesting of tags, if such a thing becomes desirable.
* It gives you more options for validation, since 'desc' and 'title' and 
other items may have different ranges of valid values, data types, etc. 
  If they're all 'extra data', you can't validate it much at all.

I know that attribute vs. tag is a longstanding argument, and it's a 
matter that draws out pretty strong opinions.   Just thought I'd throw 
this out as a possibility.

alex

-
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers


[Ganglia-developers] questions on metrics as python modules

2007-11-05 Thread Alex Dean
I've been following the discussion about moving all metrics to Python 
modules, and ceasing to use gmetric for custom metrics.

I'm curious about what these metric modules will look like, and how 
gmond will expect them to be structured.  (If that's been decided yet.) 
  Are there any examples of a Python gmetric modules out there for perusal?

Is there an expectation that there will be 1 module per metric?  I 
currently have a few gmetric scripts that report lots of metrics each 
time they run, and splitting those out into 1 module for each metric 
would be really inefficient.

Just curious what this will look like.

thanks,
alex

-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now  http://get.splunk.com/
___
Ganglia-developers mailing list
Ganglia-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ganglia-developers