laura1024 发表于 2016-11-22 11:14:35

smokeping主从配置,从主机启动时报错,

smokeping主从配置,从主机启动时报错,请问问题出在哪里
# /usr/local/smokeping/bin/smokeping --master-url=http://192.168.1.170/smokeping/smokeping.fcgi --cache-dir=/usr/local/smokeping/cache --shared-secret=/usr/local/smokeping/etc/smokeping_secrets.dist --slave-name=host1
WARNING Master said 401 Unauthorized
ERROR: we did not get config from the master. Maybe we are not configured as a slave for any of the targets on the master ?


laura1024 发表于 2016-11-23 09:32:35

问题已经解决,见http://www.cnblogs.com/icecrystal/p/5851631.html
我采用的是第1,2两种方法。

处理主从验证

问题

如果在master的站点配置账号密码验证,smokeping slave端就无法访问master的URL。

启动slave会得到报错

WARNING Master said 401 Unauthorized
ERROR: we did not get config from the master. Maybe we are not configured as a slave for any of the targets on the master ?
master端的日志也会有报错

2016/09/05 02:05:36 7667#0: *1774986 no user/password was provided for basic authentication, client: 192.168.X.X, server: xxx.com, request: "POST /smokeping.fcgi HTTP/1.1", host: "xxx.com"
从两端的日志可以得出结论:

master端的web服务器收到来自slave端的连接请求时,要求使用账号密码登录,而slave的请求不带账号密码,所有web服务器拒绝了本次访问

slave由于连不上master,获取不到master上的smokeping配置信息,就判断master上并没有配置该slave,并退出结束进程

处理

从smaleping的启动脚本参数看,让slave带上账号密码去访问master的cgi是没什么希望的了,人家没这功能

只能去掉网站验证的环节了

有几种去掉验证的方式:

1.完全去掉smakeping页面的登录验证
2.去掉smakeping页面的登录验证,用iptables限制允许访问的IP
3.在nginx vhost配置上做IP白名单,使slave服务器访问URL时不用登录验证;非白名单IP访问时依然需要验证账号密码

laura1024 发表于 2016-11-23 09:37:50

第一种方法,允许所有的用户访问,此方法不安全,配置如下:
<Directory "/usr/local/smokeping">
AllowOverride None
Options All
AddHandler cgi-script .fcgi .cgi
AllowOverride AuthConfig
Require all granted
#Order allow,deny
#Allow from all
#AuthName "Smokeping"
#AuthType Basic
#AuthUserFile /usr/local/smokeping/htdocs/htpasswd
#Require valid-user
DirectoryIndex smokeping.fcgi
</Directory>

第二种方法,禁止所有的用户访问,只允许指定IP访问,此方法安全,配置如下:
<Directory "/usr/local/smokeping">
AllowOverride None
Options All
AddHandler cgi-script .fcgi .cgi
AllowOverride AuthConfig
Require all denied
Require ip 192.168.1.138
Require ip 192.168.1.111
#Require all granted
#Order allow,deny
#Allow from all
#AuthName "Smokeping"
#AuthType Basic
#AuthUserFile /usr/local/smokeping/htdocs/htpasswd
#Require valid-user
DirectoryIndex smokeping.fcgi
</Directory>
页: [1]
查看完整版本: smokeping主从配置,从主机启动时报错,