- observium - lists.observium.org

Re: [Observium] Setting up LDAP Auth
by Sandy Breeze 07 Jul '16

07 Jul '16

We use the below. Substitute ‘MyCompany’ with $YourCompany and look at the sample structure // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please see documentation for config help // LDAP Auth $config['auth_ldap_binddn'] = "CN=Bind Observium,OU=Bind Accounts,OU=Service Accounts,OU=MyCompany,OU=MyCompany Group,DC=MyCompany,DC=local"; $config['auth_ldap_bindpw'] = "thepassword"; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_objectclass'] = "person"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "127.0.0.1"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_suffix'] = ",OU=MyCompany Group,DC=MyCompany,DC=local"; $config['auth_ldap_group'] = array("CN=MyCompany-Application-Observium_Admin Users,OU=Observium,OU=Application Groups,OU=Domain Local,OU=Security Groups,OU=MyCompany,OU=MyCompany Group,DC=MyCompany,DC=local"); $config['auth_ldap_groupbase'] = "OU=Observium,OU=Application Groups,OU=Domain Local,OU=Security Groups,OU=MyCompany,OU=MyCompany Group,DC=MyCompany,DC=local"; $config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['MyCompany-Application-Observium_Admin Users']['level'] = 10; $config['auth_ldap_groups']['MyCompany-Application-Observium_Users']['level'] = 1; On 07/07/2016, 22:36, "observium on behalf of Adam Armstrong" <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org> on behalf of adama(a)memetic.org<mailto:adama@memetic.org>> wrote: That would be useful to a lot of people I think. AD is a common question! Adam. Sent from BlueMail<http://www.bluemail.me/r> On 7 Jul 2016, at 22:33, Richard Franks <richardfranks152(a)gmail.com<mailto:richardfranks152@gmail.com>> wrote: I can probably put together some bits tomorrow. I've got it working against AD. On 7 Jul 2016, at 22:31, Adam Armstrong <adama(a)memetic.org<mailto:adama@memetic.org>> wrote: Would someone who knows what they're talking about like to write some kinda of instructions on this? None of us do AD, so... :) Adam. Sent from BlueMail<http://www.bluemail.me/r> On 7 Jul 2016, at 22:28, Sam Jones <jonesamu(a)isu.edu<mailto:jonesamu@isu.edu>> wrote: My biggest hurdle was finding and using the Full DN of the accounts and groups being used. Here is our scrubbed configuration we are using: $config['auth_mechanism'] = "ldap"; // LDAP Authentication // Full DN of BIND ACCOUNT $config['auth_ldap_binddn'] = "CN=BIND_ACCOUNT,OU=GROUP1,DC=DOMAIN,DC=COM"; $config['auth_ldap_bindpw'] = "PASSWORD"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_attr']['dn'] = "distinguishedname"; $config['auth_ldap_objectclass'] = "person"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "AD_SERVER.DOMAIN.COM<http://AD_SERVER.DOMAIN.COM>"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = TRUE; // Full DN of account used to Login $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",OU=GROUP2,DC=DOMAIN,DC=COM"; // Full DN of group to allow access $config['auth_ldap_group'] = array("CN=Observium Admins,OU=GROUPS,DC=DOMAIN,DC=COM"); $config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); // Full DN of Group to assign access level $config['auth_ldap_groups']['CN=Observium Admins,OU=GROUPS,DC=DOMAIN,DC=COM']['level'] = 10; Sam On Thu, Jul 7, 2016 at 2:49 PM, Dano, Leo <ldano(a)qualcomm.com<mailto:ldano@qualcomm.com>> wrote: Active Directory Thanks, ----------------------- Leo Dano From: observium [mailto:observium-bounces@observium.org<mailto:observium-bounces@observium.org>] On Behalf Of Sam Jones Sent: Thursday, July 07, 2016 1:29 PM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Setting up LDAP Auth Have you tried looking at the http://{Your_Observium_Server}/debug<http://%7bYour_Observium_Server%7d/debug>. What type of Directory Server are you connecting to? Sam On Thu, Jul 7, 2016 at 1:53 PM, Dano, Leo <ldano(a)qualcomm.com<mailto:ldano@qualcomm.com>> wrote: Hello all, Tried Maartens entries in the conf file. Put all our ldap info but no worky. Was trying to tail the log files but I can’t find the right one to tail. auth is not updating as I put in incorrect login details. Any suggestions? Thanks, ----------------------- Leo Dano From: observium [mailto:observium-bounces@observium.org<mailto:observium-bounces@observium.org>] On Behalf Of Dano, Leo Sent: Thursday, June 30, 2016 8:49 AM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Setting up LDAP Auth Thanks Maarten! This will help me get in the right direction. Thanks, ----------------------- Leo Dano From: observium [mailto:observium-bounces@observium.org] On Behalf Of Moerman, Maarten Sent: Thursday, June 30, 2016 6:41 AM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Setting up LDAP Auth Ow , euh, replace BLAgroup and BLAcompany with your group and company (from your ldap params), forgot to fix one line in below example :) From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of "Moerman, Maarten" <mmoerman(a)ebay.com<mailto:mmoerman@ebay.com>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Thursday, June 30, 2016 at 3:39 PM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Setting up LDAP Auth This is ours: // LDAP Authentication $config['auth_mechanism'] = "ldap"; $config['auth_ldap_group'] = array(); $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = “<ldap-server-hostname>"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_objectclass'] = "posixAccount"; $config['auth_ldap_prefix'] = "uid="; $config['auth_ldap_suffix'] = ",ou=People,ou=BLAgroup,o=BLAcompany"; $config['auth_ldap_attr']['uid'] = "uid"; $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; $config['auth_ldap_attr']['cn'] = "cn"; $config['auth_ldap_groupmemberattr'] = "memberUid"; $config['auth_ldap_groupbase'] = "ou=group,ou=<yourgroup>,o=<yourcompany>"; $config['auth_ldap_groups']['nw']['level'] = 10; From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Ximena Cardinali <ximenacardinali(a)gmail.com<mailto:ximenacardinali@gmail.com>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Thursday, June 30, 2016 at 3:17 PM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: Re: [Observium] Setting up LDAP Auth I couldn't make it work either. If you find a solution that works, I'll appreciate your feedback. On 29 June 2016 at 17:52, Dano, Leo <ldano(a)qualcomm.com<mailto:ldano@qualcomm.com>> wrote: Hello all, Anyone care to share your config settings? I am having a hard time setting this up. Please remove your domain info in the reply. /opt/observium/config.php Thanks, ----------------------- Leo Dano _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium(a)observium.org<mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

3 3

Ceragon in r7954.
by Eduardo Schoedler 07 Jul '16

07 Jul '16

Hi, Thank you for adding support for Ceragon P2P Radios! \o/ I tested here, but there is no sensors... =/ If I can help, some oids you have to monitor: RX Signal = .1.3.6.1.4.1.2281.10.5.1.1.2 Input Voltage = .1.3.6.1.4.1.2281.10.1.1.10 Regards, -- Eduardo Schoedler

2 1

Re: [Observium] Problems getting Interface stats (IF-MIB)
by Andre Geißler 07 Jul '16

07 Jul '16

Hi Mike Log is attached. Thanks Andre Hi, please show/attach poller debug output for this device: ./poller.php -d -m ports -h <device> On 05.07.16 11:16, Andre Geißler wrote: > Hi > For some reason getting interface statistics stopped about 3 weeks ago > for some devices. > I'm updating observium every day so problem exists for several versions. > > Affected are only 2 of around a dozen Cisco ASAs. I cannot see this > problem on other device types. > > Under device' MIB properties I can see request timeouts for " > *ifInMulticastPkts.18 ifOutMulticastPkts.18 ifInBroadcastPkts.18 > ifOutBroadcastPkts.18 ifHCInOctets.18 ifHCOutOctets.18 > ifHCInUcastPkts.18 ifHCOutUcastPkts.18 ifHCInMulticastPkts.18 > ifHCOutMulticastPkts.18 ifHCInBroadcastPkts.18 ifHCOutBroadcastPkts.18 > ifInOctets.18 ifOutOctets.18 ifInUcastPkts.18 ifOutUcastPkts.18 > ifInNUcastPkts.18 ifOutNUcastPkts.18 ifInDiscards.18 ifOutDiscards.18 > ifInErrors.18 ifOutErrors.18 ifInUnknownProtos.18 ifMtu.18 ifSpeed.18 > ifPhysAddress.18 ifAdminStatus.18 ifLastChange.18 ifPromiscuousMode.18 > ifConnectorPresent.18" > > All other values can be read without any problem.* > When doing snmpget manually there is also no problem. > > No difference when using snmp v2c or v3. > > Any idea or advice? > > Thanks, > Andre > ** >

2 1

poller-wrapper.py does not run, but poller.php does
by Chrys Thorsen 07 Jul '16

07 Jul '16

Hi Guys, Newbie here. I just installed the latest version of Observium (subscription) onto Ubuntu 14. It discovered my Cisco router, 15 Cisco switches, and 4 Microsoft servers no problem. HOWEVER, poller-wrapper.py does not run. Days later, still no polling. I have this line in /etc/cron.d/observium: */5 * * * * root /opt/observium/poller-wrapper.py 16 >> /dev/null 2>&1 If I manually run /opt/observium/poller-wrapper.py I get this error: "ERROR: Could not load or parse observium configuration, are PATHs correct?" If I manually run poller.php, all the devices get polled just fine. I don't have a PATH statement in crontab. I can add one, but I'm not sure exactly what to add. I also notice that Joe Snijder's post says the syntax should have the word "python" after "root". Does that make a difference? Please help! Thanks, Chrys -- Chrys Thorsen Director of Technology and Training

4 8

ID of graph changes and "jumps" between storage on server
by Henrik Cednert (Filmlance) 06 Jul '16

06 Jul '16

Hello I have an issue that bugs the heck out of me. Not sure exactly what's going on but in short: First of all, when I write ID I mean the ID in the url when looking at the graph for a storage attached to a server. Like "....//graphs/to=1467822524/id=219/type=storage_usage/from=1467736124/" where the ID is 219. The storage I monitor on this OSX server is connected via iSCSI, NFS, SNFS and Avid ISIS. What happens is that when rebooting or if a storage is disconnected and reconnected the above mentioned ID changes. Not alway but very often and it gives some odd subsequent errors like alert checkers being triggered for the wrong storage. Which I don't know how it's even possible since I assume they're not based on ID in the background? But on these two screenshots an alert was triggered for a storage not in the alert checker. https://www.dropbox.com/s/9ttr7b86hv28pnp/alertChecker01.png https://www.dropbox.com/s/th7rqel88pntpvl/alertChecker02.png It also messes with the minigraphs on the front page since they're hardcoded to an ID. An ID that can have gone missing or changed... It also seems messes with the graphs since in some situations looks like it can get stuck in a mode where wrong storage are monitored and graphed into another storages graph. Real odd and not sure that's really whats going on or if it's snmpd on the server that reports wrong. But it's timed with reboot and or the other isses above. https://www.dropbox.com/s/rdrhetew8nod09o/graphID01.png Have any one had similar issues? Cheers and thanks -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ]

2 2

Problems getting Interface stats (IF-MIB)
by Andre Geißler 06 Jul '16

06 Jul '16

Hi For some reason getting interface statistics stopped about 3 weeks ago for some devices. I'm updating observium every day so problem exists for several versions. Affected are only 2 of around a dozen Cisco ASAs. I cannot see this problem on other device types. Under device' MIB properties I can see request timeouts for " *ifInMulticastPkts.18 ifOutMulticastPkts.18 ifInBroadcastPkts.18 ifOutBroadcastPkts.18 ifHCInOctets.18 ifHCOutOctets.18 ifHCInUcastPkts.18 ifHCOutUcastPkts.18 ifHCInMulticastPkts.18 ifHCOutMulticastPkts.18 ifHCInBroadcastPkts.18 ifHCOutBroadcastPkts.18 ifInOctets.18 ifOutOctets.18 ifInUcastPkts.18 ifOutUcastPkts.18 ifInNUcastPkts.18 ifOutNUcastPkts.18 ifInDiscards.18 ifOutDiscards.18 ifInErrors.18 ifOutErrors.18 ifInUnknownProtos.18 ifMtu.18 ifSpeed.18 ifPhysAddress.18 ifAdminStatus.18 ifLastChange.18 ifPromiscuousMode.18 ifConnectorPresent.18" All other values can be read without any problem.* When doing snmpget manually there is also no problem. No difference when using snmp v2c or v3. Any idea or advice? Thanks, Andre **

2 1

Get values from RRD
by MTiVi＠google 06 Jul '16

06 Jul '16

Hello! I want to get a values from RRD (like values in legend) in my Observium. I don't work with rrdtool before. How I can get a max bps IN,OUT for last 2 days or for last week via CLI?

3 3

How to give permissions to view a device
by Tobias Vlasblom 05 Jul '16

05 Jul '16

Hello, I want to give access to a specific device to a specific observium user. This user should not see the other devices that are being monitored by observium. I have created the new user as a normal user (level 1). As expected, when I log into observium this user has access to nothing. My question: where do I configure what devices that this user should have access to? Or where in the device configuration do I configure what users may access the device? I apologize if the answer to this question is obvious and I missed it while googling. Thanks in advance, Tobias

3 2

Alert check on custom IOD / Customers and L2TP
by Grégory TRAN 05 Jul '16

05 Jul '16

Hello, Observium is a great tool and I'm still getting my hands on it. I've encountered the following issues and hope somebody can help me : 1) I'm trying to do an alert check on custom IOD but haven't found how to specify this in the check conditions. Is there's any way to do this ? 2) I activate the Customers and L2TP in the config.php file and I'm trying to make it work. Do you have any more informations about how to configure my equipments ? I manage to configure Transit by specifying "transit" on the port and it works great. A colleague of mine told me that there used to be a wiki page about this before but it seems it's not online anymore. Thank you for taking the time to help me. -- Greg

2 3

Adding SNMPv3 host xxxx.xxx. port 161
by Dasitha Karunajeewa 04 Jul '16

04 Jul '16

Hi Team, When I try to add server it says Adding SNMPv3 host services.digin.io. port 161 but I can't seen any server. Thanks & best regards*,* Dasitha Karunajeewa *Duo Software (Pvt.) Ltd*.

1 0