- observium - lists.observium.org

Observium: Pre-auth and security questions
by Nate Mellendorf 17 Jan '16

17 Jan '16

Good evening everyone, I've been trying to configure Observium with a forms based SSO solution. My reasoning for this, is that I'd like to minimize the attack surface for Observium when published to the Internet. As Observium supports groups, I thought it would be extremely beneficial for clients to view their throughput at anytime from anywhere. I was curious if anyone in the community is using pre-authentication, or if you're publishing Observium directly to the Internet. I'm not as familiar with Apache and PHP, so hardening the service through pre-auth seemed like a good first step. Unfortunately, I can't quite get pre-auth to work. Observium uses forms based authentication, which is hard to capture on the platform I'm using. Here's a link, if you're curious on how I'm trying to capture it: http://fritsesblog.blogspot.com/2015/04/link-to-netscaler-form-sso-kb.html If I could get Observium to use basic authentication, I think I could get it to work. Do we know if this is possible? A better question, is pre-auth even necessary here? Aside from HTTPS, iptables, firewalling, and locking down SSH/root, what other steps do you take to secure your Observium server? Do you think that allowing Internet access is unwise at this time? Thank you for any input on insight into this. This is a concern of mine that I'm trying to address. Your suggestions and opinions are very much appreciated. Regards, - NM

2 1

wiki typo
by Joey Stanford 16 Jan '16

16 Jan '16

Hi, I found a wiki typo. Housekeeping Cron job - /opt/observium/housekeeping.php -rptb the “b” should probably be a “y”

2 2

Strange issue with BGP sessions on Juniper MX104
by Duncan Mossop 16 Jan '16

16 Jan '16

Hello, We are running Observium professional 0.16.1.7407 and we have an issue with BGP session discovery on a Juniper MX104 (dual RE), running discovery against the device displays the fact there are numerous bgp sessions but not a single session appears under the device in the Observium WebUI. This is the output from Discovery: ##### Module Start: bgp-peers ##### o Local AS AS198313 o Caching BGP4-MIB BGP4-V2-MIB-JUNIPER o Try discovering host 91.233.128.253 through BGP o Try discovering host 91.233.128.254 through BGP +------------------------------------+----------+------------------------------------+--------------+------------------------------------+------------------------------------+ | Local IP | Peer: AS | IP | Family | rDNS | Remote Device | +------------------------------------+----------+------------------------------------+--------------+------------------------------------+------------------------------------+ | 91.233.128.244 | 198313 | 91.233.128.253 | ipv4.unicast | lo0-core4.lancs-ycr.systemhost.co. | core4.lancs-ycr.systemhost.uk | | | | | | uk | | | 91.233.128.244 | 198313 | 91.233.128.254 | ipv4.unicast | lo0-edge1.lancs-ycr.systemhost.co. | edge1.car1.systemhost.co.uk | | | | | | uk | | | 149.6.147.122 | 174 | 149.6.147.121 | ipv4.unicast | gi0-0-0-6.nr11.b015668-1.lon01.atl | ... | | | | | | as.cogentco.com | | | 195.66.226.239 | 6939 | 195.66.224.21 | ipv4.unicast | 40ge1-3.core1.lon2.he.net | ... | | 195.66.226.239 | 32787 | 195.66.224.31 | ipv4.unicast | blackhole.prolexic.com | ... | | 195.66.226.239 | 20940 | 195.66.224.168 | ipv4.unicast | linxnap.netarch.akamai.com | ... | | 195.66.226.239 | 5459 | 195.66.224.254 | ipv4.unicast | ge0-0.pr1.linx.net | ... | | 195.66.226.239 | 45014 | 195.66.225.55 | ipv4.unicast | ge-0-2.gw4.rtr.thn.lon.as45014.net | ... | | 195.66.226.239 | 29611 | 195.66.225.78 | ipv4.unicast | linx.a.elite.net.uk | ... | | 195.66.226.239 | 8714 | 195.66.225.230 | ipv4.unicast | rs1.rbs.linx.net | ... | | 195.66.226.239 | 42344 | 195.66.226.71 | ipv4.unicast | linx1.conceptcoders.com | ... | | 195.66.226.239 | 20940 | 195.66.226.81 | ipv4.unicast | | ... | | 195.66.226.239 | 20940 | 195.66.226.167 | ipv4.unicast | | ... | | 195.66.226.239 | 58226 | 195.66.226.197 | ipv4.unicast | | ... | | 217.68.244.122 | 29611 | 217.68.244.123 | ipv4.unicast | ae0.1129.core.a.thm.elite.net.uk | ... | | 2001:07f8:0004:0000:0000:0003:06a9 | 6939 | 2001:07f8:0004:0000:0000:0000:1b1b | ipv6.unicast | 40ge1-3.core1.lon2.he.net | ... | | :0001 | | :0001 | | | | | 2001:07f8:0004:0000:0000:0003:06a9 | 8714 | 2001:07f8:0004:0000:0000:0000:220a | | | ... | | :0001 | | :0001 | | | | | 2001:07f8:0004:0000:0000:0003:06a9 | 45014 | 2001:07f8:0004:0000:0000:0000:afd6 | ipv6.unicast | ge-0-2.gw4.rtr.thn.lon.as45014.net | ... | | :0001 | | :0001 | | | | | 2001:07f8:0004:0000:0000:0003:06a9 | 58226 | 2001:07f8:0004:0000:0000:0000:e372 | ipv6.unicast | | ... | | :0001 | | :0001 | | | | +------------------------------------+----------+------------------------------------+--------------+------------------------------------+------------------------------------+ o Changes 2 updated, 17 unchanged o Duration 3.5349s This issue seems to have appeared since fully enabling chassis Graceful Restart / Switchover. I have removed and re-added the device from Observium to no effect. Regards, Duncan Mossop • Operations Manager, SystemHOST Ltd ________________________________ dmossop(a)systemhost.co.uk [cid:image30bc94.PNG@047b1488.498f55d8] 01524 737414 systemhost.co.uk<http://www.systemhost.co.uk> [Twitter]<https://twitter.com/systemhost> Follow us on Twitter ________________________________ SystemHOST Ltd Registered office: Holmere Hall, Yealand Conyers, Carnforth, Lancs, LA5 9SN Registered in England No.05028996 VAT No. 927386490 This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. By opening this email or its attachments, you accept liability for any damage that may be caused to your computer hardware, software or data. ________________________________

2 16

[ALERT-CHECKER] Alert to pick up on physical failure of disk.
by Henrik Cednert (Filmlance) 16 Jan '16

16 Jan '16

Hi there Have gotten some hints at IRC but can't really wrap my head around on how to set it up. Yeah, I know I'm probably stupid. But I can't find a complete list of all commands available and it doesn't complain if I feed it something invalid. So it's really a guessing game. =/ So the checker needs to do something like: if status of physical_class('storage' or 'hrDeviceDiskStorage') != 1 send alert Possible? Please give detailed instructions if possible. Would be sweet if all different possible combinations of alert checkers was added to the demo instance so once can look there for guidance. =) Cheers and thanks -- Henrik Cednert cto | td | compositor Filmlance International Direct + 46 (0)704 71 89 54

3 15

Monitor DHCP pools
by Anders Alavik 16 Jan '16

16 Jan '16

Is there any may to monitor DHCP pools in observium? Best Med Vänliga Hälsningar Anders Alavik anders(a)bogalnet.se <mailto:anders@bogalnet.se> / 0322 - 64 24 71 BogalNet AB Alvhemsgatan 3 447 30 Vårgårda http://www.bogalnet.se <http://www.bogalnet.se/>

2 1

r7497
by Eduardo Schoedler 15 Jan '16

15 Jan '16

Big chances in r7497, huh? :) -- Eduardo Schoedler

2 1

memory showing 0B/0B (0%)
by Simon Smith 15 Jan '16

15 Jan '16

Hi All, not sure if its a bug ive found or something ive done? all our memory sections are showing 0B/0B (0%) however the graphs is actually being populated with data every 5mins ? attached a screenshot showing a mikrotik switch we monitor also attached is a windows machine we monitor, i it showing the same for its physical memory any ideas? simon

2 1

System Running Very Slow
by Eddie Worthington 15 Jan '16

15 Jan '16

Hi, Since upgrading to the latest release with the new interface, the system is running extremely slowly. Installed on Ubuntu 14.04 with 12 vCPU's & 4GB RAM. It worked like a dream before but can now take up to 30 seconds to load a page. Upgraded with SVN. What have I done wrong? Many Thanks, Eddie

2 3

Device Bits Graphing error message
by Joey Stanford 15 Jan '16

15 Jan '16

Howdy, I’m running the community edition on Ubuntu. All the graphs work except the traffic graphs (bits). I get the standard “Draw error”. I don’t get any errors polling (other than a MIB not being supported for engineID). The devices are all Mikrotik routers. I put an &debug=1 on the traffic graph URL and discovered an error all the way at the bottom: “command returned 1 (ERROR: Unused Arguments “” in command : AREA:inbits0#B6D14B:ether1-wan Rx: )" The full text is here: http://pastebin.ubuntu.com/14490188/ It’s unclear to me if this is actually causing this one graph (on all my systems) to fail but so far there is a trend from spot checking. Any thoughts on how to debug this further? Thanks, Joey

2 2

Re: [Observium] Radius authentication not work
by ChanTy 15 Jan '16

15 Jan '16

Any comment ? From: observium <observium-bounces(a)observium.org> on behalf of apple <ty.chan(a)corp.mekongnet.com.kh> Reply-To: Observium Network Observation System <observium(a)observium.org> Date: Tuesday, January 5, 2016 at 1:57 PM To: Observium Network Observation System <observium(a)observium.org> Subject: [Observium] Radius authentication not work I am following this http://www.observium.org/docs/authentication to do Radius authentication for user to login to Observium. Radius already allow Observium to connect to Php-radius already install Configuration on Observium is done as the guideline But Login still failed using user from Radius Any comment? _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

5 7