- observium - lists.observium.org

Ubiquity Serial Numbers / Wireless (WLAN) mac
by Lyndon Labuschagne 27 Apr '22

27 Apr '22

Hi A few years ago we were able to pull the Ubiquiti Radio MAC / Serial numbers from the Observium DB. I no longer see any serial numbers listed for Ubiquiti devices if I query the device table in the DB directly, and it’s not shown on the device screen in the Observium interface. When running a manual poller.php run the serial number field is <empty>, Is there something that changed on the Observium or Ubiquiti side or is the a module that I may need to enable? Any ideas or input would be welcome. Regards Lyndon

3 5

FW: Observium LDAP Integration
by Valerie Lim 27 Apr '22

27 Apr '22

From: Valerie Lim Sent: Wednesday, 27 April 2022 10:07 am To: Adam Thompson <athompson(a)merlin.mb.ca> Cc: Ryan Tee <ryan.tee(a)acclivis.com>; Nirmolak Singh Bajaj <nirmolak.singhbajaj(a)acclivis.com> Subject: RE: Observium LDAP Integration Hi Adam Thanks for your response. I am able to successfully execute an LDAP query via command-line. Also, I will try to configure my LDAP server according to your advice & see the changes. Meanwhile, could you elaborate a bit more on what needs to be done on the client side for Observium? Currently, I am running Ubuntu Desktop 20.04 & have only enabled the base PHP module required for Observium to read LDAP settings. & other than enabling LDAP service on the server itself, is there any additional settings that needs to be done to allow client to reach LDAP server? I have attached below the command I've used for the LDAP query & some user details I've got via the query. Best Regards Valerie Lim Command used: ldapsearch -x -b "dc=domain01,dc=com" -H ldap://192.168.1.234 -D "cn=Administrator,ou=acclivis,dc=domain01,dc=com" -W "objectclass=user" Results: # extended LDIF # # LDAPv3 # base <dc=domain01,dc=com> with scope subtree # filter: objectclass=user # requesting: ALL # # Administrator, acclivis, domain01.com dn: CN=Administrator,OU= acclivis,DC=domain01,DC=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: Administrator description: Built-in account for administering the computer/domain distinguishedName: CN=Administrator,OU= acclivis,DC=domain01,DC=com instanceType: 4 whenCreated: 20220413051658.0Z whenChanged: 20220427015103.0Z uSNCreated: 8196 memberOf: CN=Group Policy Creator Owners,CN=Users,DC=domain01,DC=com memberOf: CN=Domain Admins,CN=Users,DC=domain01,DC=com memberOf: CN=Enterprise Admins,CN=Users,DC=domain01,DC=com memberOf: CN=Schema Admins,CN=Users,DC=domain01,DC=com memberOf: CN=Administrators,CN=Builtin,DC=domain01,DC=com uSNChanged: 36881 name: Administrator objectGUID:: zY3U88tQd0CIs1ncaHNQ9A== userAccountControl: 66048 badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 0 lastLogoff: 0 lastLogon: 132949181574995316 pwdLastSet: 132942924570197446 primaryGroupID: 513 objectSid:: AQUAAAAAAAUVAAAAL/6g3LnZPK6eKnuJ9AEAAA== adminCount: 1 accountExpires: 9223372036854775807 logonCount: 22 sAMAccountName: Administrator sAMAccountType: 805306368 objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain01,DC=com isCriticalSystemObject: TRUE dSCorePropagationData: 20220420091258.0Z dSCorePropagationData: 20220413053253.0Z dSCorePropagationData: 20220413053253.0Z dSCorePropagationData: 20220413051743.0Z dSCorePropagationData: 16010714042016.0Z lastLogonTimestamp: 132954978631684796 # gt09, acclivis, domain01.com dn: CN=gt09,OU= acclivis,DC=domain01,DC=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: gt09 givenName: gt09 distinguishedName: CN=gt09,OU= acclivis,DC=domain01,DC=com instanceType: 4 whenCreated: 20220420085359.0Z whenChanged: 20220420090537.0Z displayName: gt09 uSNCreated: 32997 memberOf: CN=grouping,OU= acclivis,DC=domain01,DC=com uSNChanged: 33031 name: gt09 objectGUID:: Q06xdIEFa0iWmks3+zuUTQ== userAccountControl: 66048 badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 0 lastLogoff: 0 lastLogon: 0 pwdLastSet: 132949184398814009 primaryGroupID: 513 objectSid:: AQUAAAAAAAUVAAAAL/6g3LnZPK6eKnuJOggAAA== accountExpires: 9223372036854775807 logonCount: 0 sAMAccountName: gt09 sAMAccountType: 805306368 userPrincipalName: gt09(a)domain01.com<mailto:gt09@domain01.com> objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain01,DC=com dSCorePropagationData: 16010101000000.0Z mail: valerie.lim(a)acclivis.com<mailto:valerie.lim@acclivis.com> From: Adam Thompson <athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca>> Sent: Tuesday, 26 April 2022 9:29 pm To: Observium <observium(a)observium.org<mailto:observium@observium.org>> Cc: Valerie Lim <valerie.lim(a)acclivis.com<mailto:valerie.lim@acclivis.com>> Subject: RE: Observium LDAP Integration That's very similar to what we're doing here successfully. The differences I see are: $config['auth_ldap_attr']['uid'] = "UserPrincipalName"; $config['auth_ldap_attr']['dn'] = "distinguishedname"; $config['auth_ldap_objectclass'] = "person"; $config['auth_ldap_server'] = "ldaps://xx.xx.xx"; $config['auth_ldap_groups']['CN=xx,OU=xx,DC=xx,DC=xx']['level'] = 10; $config['auth_ldap_port'] = 636; This lets us log in with our full UPN, which happens to also be our email address. You may want to keep sAMAccountName if you want to log in with bare userids instead of UPNs. Not sure if the "dn" line is required or not, I don't remember what that does. Objectclass might also trip you up - "person" is the standard LDAP ObjectClass for an AD userid. Are you able to successfully execute an LDAP query from the command-line using "ldapsearch" (typically found in the "openldap-clients" package or similar)? I would start there, to prove your Observium server can actually reach your DC and run a query successfully, before trying to enable LDAP in Observium. You can't do a non-TLS LDAP bind on 389 by default, which is why we use 636 and ldaps. IIRC, something has to be done on the client (Observium) side to allow OpenLDAP to accept the internal AD-generated TLS certificate the AD server offers, but I can't find it right now. -Adam Adam Thompson Consultant, Infrastructure Services [MERLIN] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/> From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> On Behalf Of Valerie Lim via observium Sent: Monday, April 25, 2022 9:16 PM To: observium(a)observium.org<mailto:observium@observium.org> Cc: Valerie Lim <valerie.lim(a)acclivis.com<mailto:valerie.lim@acclivis.com>> Subject: [Observium] Observium LDAP Integration Hi I am currently using professional v22.4.11952 for Observium. I am unable to authenticate my Observium via my LDAP server (Windows Server 2019). When 'ldap' is applied, authentication doesn't work. php module required for Observium has already been installed. Below is my config.php configuration: // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please s> $config['auth_ldap_binddn'] = "cn=Administrator,cn=Users,dc=domain01,dc=com"; $config['auth_ldap_bindpw'] = "xxxxxxx"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_objectclass'] = "user"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "server01.domain01.com"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = ",ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_group'] = array("cn=grouping,ou=acclivis,DC=domain01,DC=com"); $config['auth_ldap_groupbase'] = "cn=grouping,ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_groupmembertype'] = "nondn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['test']['level'] = 10; Is there something I missing out on my LDAP configuration? Please advise. Thanks Best Regards Valerie Lim

1 0

Observium LDAP Integration
by Valerie Lim 26 Apr '22

26 Apr '22

Hi I am currently using professional v22.4.11952 for Observium. I am unable to authenticate my Observium via my LDAP server (Windows Server 2019). When 'ldap' is applied, authentication doesn't work. php module required for Observium has already been installed. Below is my config.php configuration: // Authentication Model $config['auth_mechanism'] = "ldap"; // default, other options: ldap, http-auth, please s> $config['auth_ldap_binddn'] = "cn=Administrator,cn=Users,dc=domain01,dc=com"; $config['auth_ldap_bindpw'] = "xxxxxxx"; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_objectclass'] = "user"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "server01.domain01.com"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = ",ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_group'] = array("cn=grouping,ou=acclivis,DC=domain01,DC=com"); $config['auth_ldap_groupbase'] = "cn=grouping,ou=acclivis,DC=domain01,DC=com"; $config['auth_ldap_groupmembertype'] = "nondn"; $config['auth_ldap_groupmemberattr'] = "member"; unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['test']['level'] = 10; Is there something I missing out on my LDAP configuration? Please advise. Thanks Best Regards Valerie Lim

2 1

Cloud networks monitoring option in Observium
by Jan Horacek 26 Apr '22

26 Apr '22

Good morning guys, I want to ask you if there is any development thread which will introduce cloud services monitoring into observium. I don`t mean the classic monitoring way of vhost via SNMP, but over API calls directly from the cloud tools. We are currently transferring our network capabilities from the standard setup to CloudWan and looking for the monitoring options and our vision is to concentrate monitoring features in observium dashboards. I appreciate any hints or tips. Thanks

1 0

Aborted connection xxxxxx to db
by Ross [Eve IT] 21 Apr '22

21 Apr '22

Hello peoples, Hope you are all well! I know this is not specifically an observium issue, but was hoping someone could shed some light on the problem if they have also experienced it. This is on a new build, fresh install; Debian 11 using the automated observium script; Every time the cron job triggers, every 5 minutes, I get this warning. bservium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:35:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:35:01 15776 [Warning] Aborted connection 15776 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:40:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:40:01 15880 [Warning] Aborted connection 15880 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:45:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:45:01 15985 [Warning] Aborted connection 15985 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:50:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:50:01 16090 [Warning] Aborted connection 16090 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 09:55:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 9:55:01 16194 [Warning] Aborted connection 16194 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 10:00:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 10:00:01 16300 [Warning] Aborted connection 16300 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 10:05:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 10:05:01 16404 [Warning] Aborted connection 16404 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) Apr 21 10:10:01 SoMuchForSubtlety mariadbd[13023]: 2022-04-21 10:10:01 16509 [Warning] Aborted connection 16509 to db: 'observium' user: 'observium' host: 'localhost' (Got an error reading communication packets) It doesn't seem to be affecting the application, Observium is graphing and monitoring just fine. Has anyone solved this issue? Kind regards, Ross.

2 1

relative times/dates
by David Milton 20 Apr '22

20 Apr '22

Hello, When trying to document events it’s more useful (at least to me) to see that something happened at 01:55 than it is to see it happened 9:23 hours ago. That doesn’t mean it’s not useful to know how long ago an event happened but it seems recently, knowing when the event happened is more important that knowing how long ago that was. Is there any way to disable temporarily or permanently the “relative” times in the event log and syslog? Thanks, Dave.

2 1

how does "ignore until" under device/alert settings work?...looking for a "in maintenance" mode for a device
by Tony Guadagno 20 Apr '22

20 Apr '22

Sorry if this is an obvious question but I have been playing with this and it does not behave the way I am expecting... under device properties/alerts there is an "ignore until" option as well as a "disable notifications" toggle.... [cid:image003.jpg@01D8530A.33555B80] If I set the "ignore until" to sometime in the future and I (for example) restart the device...I still get alerted. If I toggle the "disable notifications" , I do not get the notifications anymore...however, it stays disabled past the "ignore until" time How is this feature supposed to work? I am looking for a way to put a device in "maintenance mode" so that if I am upgrading etc...no alerts are generated and no notifications are sent.

5 11

add-on?
by McGranahan, Jamen (VU) 18 Apr '22

18 Apr '22

Is there an add-on or a separate module that will provide the DNS entries for each server? We have various servers running multiple websites and it would help us if we had one interface that contained this data along with everything else that Observium provides. Jamen McGranahan Associate Director of Library Technology & Digital Services Jean and Alexander Heard Libraries, Vanderbilt University 615-343-1614 | jamen.mcgranahan(a)vanderbilt.edu<mailto:jamen.mcgranahan@vanderbilt.edu> he/his/him [cid:image001.png@01D8531B.9A603B90]

1 0

Observium running in Ubuntu Server / How to ensure data at REST encrypted with AES256 / data encryption at rest
by Ryan Tee 18 Apr '22

18 Apr '22

Hi , Subject - Data encryption at REST ( AES256 ) How to verify and ensure data at REST encrypted with AES256 Observium running in Ubuntu Server. When at rest, data can be subject to malicious threats such as data theft or data corruption by obtaining physical access to the storage hardware. Do share us information if any comments for this. Thank you Regards Ryan **************************************** There are three states for digital data: data in use, data in transit and data at rest. * Data in use refers to active data stored in non-persistent volumes, typically RAM or CPU caches. * Data in transit is the state where data is transferred over a network, either private or public. * Data at rest means inactive data that is stored physically on persistent storage, i.e. disks, databases, data warehouses, mobile devices, archives, etc.

2 2

Observium @ Ubuntu - - TLS v1.2 and TLS v1.3 is for communications between webservers and database servers ( different systems and machines )
by Ryan Tee 14 Apr '22

14 Apr '22

Hi We are concerned security between Observium that running in Ubuntu systems ( 18.04 and 20.04 ) How to check and confirm TLS v1.2 or above had been configured as default , for communications between webservers and database servers ( different systems and machines ) Do share us information if any comments. Thank you. Regards Ryan

1 0