nagios ＆＆ nagios

arongsoft

--------------1.install the packages for support nagios----------------------------------


#yum insatll httpd php
#touch /var/www/html/index.php && echo '' > /var/www/html/index.php && elinks
http://localip/index.php\\don't forget added the index.php type!
#yum install zlib gd libpng libjpeg


--------------2.download nagios and plugins from http://www.nagios.org/download/----------
#nagios && nagios-plugins && nrpe


--------------3.install nagios and plugins----------------------------------------
#groupadd nagcmd
#useradd -G nagcmd -d /usr/local/nagios -s /sbin/nologin nagios
#usermod -G nagcmd apache


#tar xvf nagios-version.tar.bz2
#cd nagios-version
#./configure --prefix=/usr/local/nagios --with-nagios-user=nagios --with-group-group=nagios --with-command-group=nagcmd
#make all
#make install
#make install-init
#make install-commandmod
#make install-config
#make install-webconf\\nagios.conf in /etc/httpd/conf.d/
#edit cgi.cfg >> use_authentication=0


#tar xvf nagios-plugins-version.tar.bz2
#cd nagios-plugins-version
#./configure --with-nagios-user=nagios --with-nagios-group=nagios --prefix=/usr/local/nagios --with-mysql=/usr/mysql
#make && make install


#chwon -R nagios.nagios /usr/local/nagios
#vi /usr/local/nagios/etc/onjects/contacts.cfg\\change the email add to yours!
#/usr/local/nagios/bin/nagios -v /usr/lcoal/nagios/etc/nagios.cfg  \\just a test!


htpasswd –c /usr/local/nagios/etc/.htpasswd nagios


-------------4.install nrpe-------------------------------------------------------
##server
#tar xvf nrpe-version.tar.bz2
#cd nrpe-version
#./configure --prefix=/usr/local/nagios
#make all
#make install-plugin
#make install-daemon
#make install-daemon-config


#vi nrpe.cfg >> allowed_host=CLIENT_ADD && vi hosts.allow>>nrpe:cliendadd


#/usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -d
#echo '/usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -d' >> /etc/rc.local
{options:-d daemon && -i service && -n without ssl}


#ps -aux|grep nrpe |awk '{print $2}' |xargs kill -9 {}\; && /usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -d\\reset the nrpe service


##client
#./configure --prefix=/usr/local/nagios
#make all
#make install-plugin\\it is ok for nrpe client now!
#/usr/local/nagios/libexec/check_nrpe -H SERVER_ADD
{options:-n without ssl}


\\make sure the firewall and selinux allow the 5666 port!!!


-------------5.edit commands-------------------------------------------------------
#vi commands.cfg \\define the check_nrpe command
-------------------------------------------------------------------------------
# ‘check_nrep’ command definition
define command{
command_name check_nrpe
command_line /usr/local/nagios/libexec/check_nrpe -H $HOSTADDRESS$ -c $ARG1$
}
-------------------------------------------------------------------------------
##\\here is the example!
#check_command      check_nrpe!check_disk!20%!10%
#../libexec/check_by_ssh -H 192.168.1.108 -C “/app/nagios/libexec/check_disk -
w 10% -c 5% -p /”
#\\options: -u username


-------------6.set selinux to Permisssive------------------------------------------
#setenforce 0


-------------7.start the service--------------------------------------------------
#chkconfig --add nagios && chkconfig nagios on
#service httpd start
#service nagios start
#elinks http://localip/nagios/






----------------------------SECURITY----------------------------------------------
1.edit the apache Directory

Options：ExecCGI
AllowOverride：None
Order allow：deny
Allow from：192.168.4.  \\don't allow from all!
AuthName："Nagios Access"
AuthType：Digest\\ Basic:clear text | Digest use MD5
AuthDigestFile：/usr/local/nagios/etc/htpasswd.users
Require：valid-user

#htdigest -c /usr/local/nagios/etc/htpasswd.users realm username
#echo 'nrpe:192.168.0.108' >> /etc/hosts.allow
####part of /nagios/etc/nrpe.cfg
#nrpe_user=nagios
#nrpe_group=nagios\\never use root
#dont_blame_nrpe=0\\deny command arguments


2.enable ssl
---create keys--
# openssl genrsa -des3 -out server.3des-key 1024
# openssl rsa -in server.3des-key -out server.key
# openssl req -new -key server.key -x509 -out server.crt -days 365
# chmod 600 server.key
# rm server.3des-key
# mv server.crt /etc/ssl/
# mv server.key /etc/ssl/private/
###edit Directory###

Options：ExecCGI
SSLRequireSSL          \\enable ssl
AllowOverride：None
Order allow：deny
Allow from：192.168.4.  \\don't allow from all!
AuthName："Nagios Access"
AuthType：Digest\\ Basic:clear text | Digest use MD5
AuthDigestFile：/usr/local/nagios/etc/htpasswd.users
Require：valid-user



3.update nagios!!!