- observium - lists.observium.org

Date Preset
by Stuart Dyer 13 Apr '22

13 Apr '22

Hi Everyone, Does anyone know how to change the default date present [cid:image001.png@01D84E76.FA5F0BB0] When viewing a graph I would like the default graph to be the last Calendar month e.g if it is march show April 1 to 30 Regards, Stuart Dyer IT Administrator Phone: +61 2 8020 2063 | E-mail: stuart.dyer(a)innovit.com<mailto:stuart.dyer@innovit.com> [innovit-logo (002) trans 2018] Bringing quality to Master Data MLC Centre, Level 56 19-29 Martin Place <https://goo.gl/maps/2yiiJ2YC4H9SBjYX6> Sydney NSW 2000<https://goo.gl/maps/2yiiJ2YC4H9SBjYX6> Tel: +612 8020 2000 Fax: +612 8020 2099 Web: www.innovit.com<http://www.innovit.com/> Australasia | North America | Europe Follow us on LinkedIn<https://www.linkedin.com/company/innovit-australia-pty-ltd?trk=public_profi…> This electronic mail is solely for the use of the addressee and may contain information, which is confidential or privileged. If you receive this electronic mail in error, please delete it from your system immediately and notify the sender by electronic mail or using any of the following contact details.

3 3

FW: Total Core Traffic
by Peter Derissen 12 Apr '22

12 Apr '22

Hello, We have a lot of core links in our network. The total graphs are show on top. [cid:image001.png@01D84A72.89424B20] When I click on 1 of the graphs I get an error. [cid:image002.png@01D84A72.89424B20] When I check the URL I see that its very long. Could that be the problem and is there a way I can fix that? https://10.230.11.81/graphs/type=multi-port_bits_separate/to=1649323537/id=… Met vriendelijke groet, Peter Derissen Eurofiber Nederland Network Engineer Safariweg 25-31 +31 (0)6 11587110 3605 MA Maarssen [cid:image003.png@01D84A72.89424B20]<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eurof…> Volg ons op Twitter<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.c…> | Linkedin<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linke…> | Facebook<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.faceb…> | Youtube<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtu…> Wilt u op de hoogte blijven van technische ontwikkelingen aan ons netwerk, nieuwe ICT ontwikkelingen en klantervaringen? Meld u dan aan voor onze maandelijkse nieuwsbrief<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmarketing…>. [cid:image004.jpg@01D84A72.89424B20]<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eurof…> ******** IMPORTANT NOTICE ******** This e-mail (including any attachments) may contain information that is confidential or otherwise protected from disclosure and it is intended only for the addressees. If you are not the intended recipient, please note that any copying, distribution or other use of information contained in this e-mail (and its attachments) is not allowed. If you have received this e-mail in error, kindly notify us immediately by telephone or e-mail and delete the message (including any attachments) from your system. Please note that e-mail messages may contain computer viruses or other defects, may not be accurately replicated on other systems, or may be subject of unauthorized interception or other interference without the knowledge of sender or recipient. Eurofiber only sends and receives e-mails on the basis that Eurofiber is not responsible for any such computer viruses, corruption or other interference or any consequences thereof. Eurofiber Nederland B.V. is registered in the Chamber of Commerce of Amsterdam with number 34134377, VAT number NL 8088.51.524 B01. Eurofiber N.V. has its registered office at Belgicastraat 5 bus 7, 1930 Zaventem and is registered under national number 0435.204.851. Eurofiber France has its registered office at 21 Avenue de la Cr?ativit?, 59650 Villeneuve d'Ascq and is registered under national number FR 83.822.249.074.

6 16

Monitoris MSSQL database size
by Rando Sui 12 Apr '22

12 Apr '22

Hello, How do you monitor MSSQL specific measures, I would like to monitor Database size, how do you do that? Could I add database size to my Apps SQL server charts list? [cid:image002.png@01D84E8D.80A79050] Is there any indirect method, I gather7inject data to observium mysql and just display data from database and issue alerts? Greetings, Rando.

1 0

Ubuntu LDAP
by Valerie Lim 11 Apr '22

11 Apr '22

Hi, We would like to check does installing Observium affect any LDAP Ubuntu settings as we are unable to access LDAP server after Observium is being installed. Appreciate share with us, to configure setting config.php file in Observium systems. Regards Valerie

1 0

Re: [Observium] need some help with an alert checker
by Tony Guadagno 07 Apr '22

07 Apr '22

Adam, thanks, I will give this a shot Tony From: Adam Armstrong via observium Sent: Thursday, April 7, 2022 4:04 PM To: 'Observium' Cc: Adam Armstrong Subject: Re: [Observium] need some help with an alert checker Hi Tony, https://docs.observium.org/entities/#status You want something like association status_descr equals Source of Output Power test conditions status_name notequals normal adam. From: observium <observium-bounces(a)observium.org> On Behalf Of Tony Guadagno via observium Sent: 07 April 2022 20:34 To: Adam Armstrong via observium <observium(a)observium.org> Cc: Tony Guadagno <tonyg(a)guadagno.org> Subject: [Observium] need some help with an alert checker Hi, I have been able to write some basic checks but I need a little help with this. I want to write a check to alert when my ups’ switch to battery. I think I can do that by checking if the “source of output power” is not normal, but I do not know how to translate that logic into conditions and associations..can someone help? Thanks BTW, is there an exchange where people post their checks for others to use? Tony

1 0

need some help with an alert checker
by Tony Guadagno 07 Apr '22

07 Apr '22

Hi, I have been able to write some basic checks but I need a little help with this. I want to write a check to alert when my ups’ switch to battery. I think I can do that by checking if the “source of output power” is not normal, but I do not know how to translate that logic into conditions and associations..can someone help? Thanks BTW, is there an exchange where people post their checks for others to use? Tony

2 1

Observium - how to encrypt data at rest with AES 256
by Ryan Tee 05 Apr '22

05 Apr '22

Hi. Would like to inquire followings : How to encrypt data at rest with AES256 in Observium systems ? We plan to use 256-bit AES encryption ensures data is secure at rest. Could share with us information if any. Thank you. Regards Ryan

3 4

Observium - database Security Server and TCP database port uses TLS v1.2 or above for communications
by Ryan Tee 05 Apr '22

05 Apr '22

Hi , We would like to check followings in Observium systems. How to make sure that, in Observium systems, database Security Server and TCP database port uses TLS v1.2 or above for communications. This is to ensure communication is secured. Appreciate share with us, to configure setting config.php file in Observium systems. Regards Ryan [cid:image001.png@01D84810.72D22180]

3 4

questions about email alert notification formats
by Tony Guadagno 01 Apr '22

01 Apr '22

Hi, I have 2 questions about this. First, is it possible to attach a notification format per contact. We are sending out text alert notifications using number(a)vtext.com<mailto:number@vtext.com> and I think the format is too big for vtext.com to accept. Is it possible that on a contact, scale down the notification? Second, is it possible to change the format of the general "recover" email? thanks Tony

5 9

unix-agent for Proxmox
by walter＠onda.ch 01 Apr '22

01 Apr '22

Hello Adam Is it possible to collect also LXC with this script? Or maybe in the future? The command for do this ist: pvesh get /nodes/$(hostname)/lxc --output-format=json-pretty Regards Walter

3 3

Re: [Observium] Observium LDAP integration
by Nirmolak Singh Bajaj 31 Mar '22

31 Mar '22

Hi, I am having an integration problem with my LDAP server. This is my config for the LDAP. It is based on what the Observium website shows. Could you let me know where I am going wrong? Looking forward to your support. $config['auth_ldap_binddn'] = "CN=Administrator,CN=Users,DC=lab,DC=local"; $config['auth_ldap_bindpw'] = " "; $config['auth_ldap_attr']['uid'] = "sAMAccountName"; $config['auth_ldap_attr']['uidNumber'] = "objectSid"; $config['auth_ldap_attr']['cn'] = "name"; $config['auth_ldap_attr']['dn'] = "distinguishedname"; $config['auth_ldap_objectclass'] = "user"; $config['auth_ldap_version'] = 3; $config['auth_ldap_server'] = "lab.local"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_prefix'] = "CN="; $config['auth_ldap_suffix'] = ",OU=mvc,DC=lab,DC=local"; $config['auth_ldap_group'] = array("DC=lab,DC=local"); $config['auth_ldap_groupbase'] = "DC=lab,DC=local"; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_groupmembertype'] = "nodn"; $config['auth_ldap_groups']['mvc']['level'] = 10; [cid:image001.png@01D84552.881C71F0] [cid:image002.png@01D84552.881C71F0] Warmest Regards, Nirmolak Singh

2 1

What to do when all optimizations fails ...
by Graf Vincent 31 Mar '22

31 Mar '22

Hello, Although I double check every tuning guide from the website, I'm in trouble with my Observium installation. First of all, the size of the network is huge... From the Statistics on about page : - 1023 Devices - 57K Ports - 51K Sensors - 128 GB RRD - 20GB DB I run the latest version of Observium with PHP 7.3 on a Debian 10 physical server. It is a dual Intel Xeon 6248 2.5Ghz (20C/40T) equipped with 3 RAID groups : - RAID1 for the OS - RAID1 for the RRD files and Observium application - RAID5 for the database All the disks are SSD. The number of poller is set to 48 and the whole polling time has an average of 264s and a max of @334s (I just increase the poller to 60 today...). I do housekeeping every week to cut off the event log and other stuff older than 30 days. I also use fast userspace caching with php-apcu For the port discovery, some of ports are ignored like vlans, control plan, stack interface, voice-port, etc... The installation runs like a big diesel machine ... not so fast but very robust. My problem is that it takes more than 30 seconds to get the detail of simple 48 ports switch ... and much more when I try to load a detailed backbone with many more ports. Do you have any suggestion to improve the GUI responsiveness ? Thank you for your time Kind regards Vincent

2 4

Re: [Observium] Observium product evolution
by Adam Armstrong 30 Mar '22

30 Mar '22

Hi Nilesh, We don't really do the sales process thing, we don't have any sales staff at all, only developers. You can see most of the platform using the CE version. Thanks, Adam. From: observium <mailman-bounces(a)postman.memetic.org> On Behalf Of nilesh.patil(a)wwindia.com Sent: 30 March 2022 12:51 To: observium(a)observium.org; observium-owner(a)observium.org Cc: 'Gagan Gupta' <gagankumar.gupta(a)wwindia.com>; 'Mayur Pawar' <mayur.pawar(a)wwindia.com>; 'Rahul Galande' <rahul.galande(a)wwindia.com> Subject: RE: Observium product evolution ++++observium-owner(a)observium.org <mailto:++++observium-owner@observium.org> Regards, Nilesh Patil From: nilesh.patil(a)wwindia.com <mailto:nilesh.patil@wwindia.com> <nilesh.patil(a)wwindia.com <mailto:nilesh.patil@wwindia.com> > Sent: 30 March 2022 16:45 To: observium(a)observium.org <mailto:observium@observium.org> Cc: Gagan Gupta <gagankumar.gupta(a)wwindia.com <mailto:gagankumar.gupta@wwindia.com> >; Mayur Pawar <mayur.pawar(a)wwindia.com <mailto:mayur.pawar@wwindia.com> >; Rahul Galande <rahul.galande(a)wwindia.com <mailto:rahul.galande@wwindia.com> > Subject: Observium product evolution Dear Observium, This Nilesh Patil from Web Werks India Pvt. Ltd. We have been looking for this product for our network infra monitoring and for the billing purpose. For this product can we have the POC for enterprise level. It will also be appreciated if we can have call for initial engagement. Waiting for your prompt response and availability for the call. Thanks & Regards, Nilesh Patil. Manager, Network Web Werks India Pvt. Ltd. Contact : 86565 48433 Data Center Services | Hosted IT Infrastructure | Cloud Services Managed Services | Infrastructure Application | Network Services

1 1

Add peer-name to BGP notifications
by Steffen Klemer 29 Mar '22

29 Mar '22

Hey there, for some reasons not everyone of us is fluent with IPs and AS numbers so I'd like to propose to add some kind of descriptive info to the routing alerts. For us sth. like: /var/www/observium/includes/entities.inc.php:1789 $entity['entity_name'] = "AS".$entity['bgpPeerRemoteAs'] ." ". $addr ." ". $entity['reverse_dns']; would be a good enough/great solution. Merry Christmas for everyone celebrating it and/or some calm days from Göttingen, Germany. Steffen -- Steffen Klemer Arbeitsgruppe "Netze" Tel.: +49 551 39 30204, E-Mail: steffen.klemer(a)gwdg.de ------------------------------------------------------------------------- Gesellschaft für wissenschaftliche Datenverarbeitung mbH Göttingen (GWDG) Burckhardtweg 4, 37077 Göttingen, URL: https://gwdg.de Support: Tel.: +49 551 39-30 000, URL: https://gwdg.de/support Sekretariat: Tel.: +49 551 39-30 001, E-Mail: gwdg(a)gwdg.de Geschäftsführer: Prof. Dr. Ramin Yahyapour Aufsichtsratsvorsitzender: Prof. Dr. Norbert Lossau Sitz der Gesellschaft: Göttingen Registergericht: Göttingen, Handelsregister-Nr. B 598 Zertifiziert nach ISO 9001 -------------------------------------------------------------------------

3 5

Trying to not alert on an interface in monitoring mode
by Lars Joergensen 28 Mar '22

28 Mar '22

Hey all I'm trying to build an alert that will go off in an interface is operationally down but not disabled. A fringe case is a span port where the operational state is "monitoring". It still triggers on these conditions (both are required to be true): [cid:image001.png@01D8405C.2132B5D0] (It says "suppressed" because the previous definition of the alarm was "IfOperStatus notequals up" and we suppressed it at that time) Can anybody help me see through what's wrong in my definition? Best regards Lars ________________________________ Disclaimer: This e-mail, including any attachments, is for the intended recipient only. If you have received this e-mail by mistake please notify the sender immediately by return e-mail and delete this e-mail and any attachments, without opening the attachments, from your system. Access, disclosure, copying, distribution or reliance on any part of this e-mail by anyone else is prohibited. This e-mail is confidential and may be legally privileged. Chr. Hansen does not represent and/or warrant that the information sent and/or received by or with this e-mail is correct and does not accept any liability for damages related thereto. https://www.chr-hansen.com/en/legal-notice

2 5

vlan table cleanup?
by Adam Thompson 25 Mar '22

25 Mar '22

We’re noticing that the VLANs page (Ports-->VLANs) is less useful than it could be, because it seems to keep around every VLAN that has ever existed on every device that has ever existed. I also don’t see anything in …/includes/housekeeping/* that would address this. It’s so bad/useless at this point that 1701 records are from devices that don’t even exist anymore (vs. 4409 where the parent device at least still exists, even if the VLAN doesn’t). A similar problem exists in vlans_fdb. Is there some housekeeping mechanism that is supposed to take care of this, that I can go troubleshoot? Or is it just an oversight/omission? And if not, can I just do a “DELETE FROM vlans WHERE NOT EXISTS ( <query on ‘device’> )” (and something similar on vlans_fdb) to clean it up? Thanks, -Adam Adam Thompson Consultant, Infrastructure Services [MERLIN] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

1 0

New Buffalo terastations do now discover as Storage, they show up as linux servers
by Tony Guadagno 24 Mar '22

24 Mar '22

Hi, I opened this Jira, can you take a look? Thanks [OBS-4064] New Buffalo Terastation classified as linux server, not storage like older models - Observium<https://jira.observium.org/browse/OBS-4064> Tony

1 0

IPMI discrete unit sensors
by Karl-André Skevik 22 Mar '22

22 Mar '22

Hello, We have several machines with IPMI configured in observium. Some of these machines have had hardware failures, such as power supply or disk failures, and we can see the failure status when polling the machines via ipmitool, but there are no warnings reported by observium. The unit of these sensor values is "discrete". Does observium support this type of sensor, and if so, is it possible to configure observium to warn about failures in these sensors? Regards,

2 2

Rancid + Observium Integration
by Njoroge, Joyce (Stadt Ulm) 21 Mar '22

21 Mar '22

Hallo, I have Rancid integrated into Observium but as it is, not all the devices have the config tab. Additionally, those with the config tab do not update the configs as set. I'd appreciate your help. I followed the documentation below: RANCID Integration - Observium<https://docs.observium.org/rancid/> Regards, Joyce

2 1

restarting snmp service on windows server flags the server as down in observium
by Tony Guadagno 21 Mar '22

21 Mar '22

Hi, I have an alert that says if the device_uptime is less than 360, alert that the server was down. I happened to restart the snmp service on several of my servers and was surprised to find the alert triggered. I am guessing that when snmp restarts, the uptime counter goes to zero? Is there any way to get a true read of the uptime? I am trying to alert if the server rebooted within the poling window. thanks Tony

2 3

Alert for summarized sensors value
by Laszlo Nemeth 21 Mar '22

21 Mar '22

Hello, i have a lot alert checks witch can alert for a sensors, and these are working great. But now i would like to create an alert like this: I would like to receive an alert if the PDU hostname match PDU-*-1, and BANK1 + BANK2 + BANK 3 value greather than 10. So if the summarized BANKs value is greather than 10. So my question is Observium support this alert type where the multiple sensor's summarized value is the condition? Thanks Br Laszlo

2 1

Full support for FS Switch's.
by Kevin Riahi 18 Mar '22

18 Mar '22

Hey Adam, I like to Request full SNMP support for FS.com switches. Currently a lot of info in left out. Such as Temps, Fans, Power Supply status Etc. Specifically S5860-20SQ. https://www.fs.com/products/108710.html MIB Files: [ https://img-en.fs.com/file/user_manual/s5860-series-swithes-snmp-mib-files.… | https://img-en.fs.com/file/user_manual/s5860-series-swithes-snmp-mib-files.… ] Additional info that may be helpful: https://img-en.fs.com/file/user_manual/s5860-series-switches-snmp-template-… Thank you Kevin Riahi kevin.riahi(a)envoi.com https://www.envoi.com

2 2

Question BGP peers in VRF
by Sandoiu Mihai 18 Mar '22

18 Mar '22

Hi I am evaluating Observium for reading the number of received bgp routes on ASR9000 routers. I have successfully discovered one of our testrouters and I can see the bgp peers in the liste. However it only detects the vpnv4/vpnv6 bgp peers. It does not detect the bgp peers inside vrfs. Is there any possibility to do so? Apparently they should be read in CISCO-BGP4-MIB Regards Mihai

2 1

Huawei CPU Graph is not showing
by Farshid Abediny 17 Mar '22

17 Mar '22

Hello, I have a huawei 6851-48S6Q and i added this to my observium, but i could not see the CPU Graph, Can somebody help me to solve this problem? Thank you. Regards

1 0

Migration to new server
by Thodoris Lakiotis 16 Mar '22

16 Mar '22

Hi I try today to migrate my installation to newer OS - Ubuntu 20 RRDs transferred ok DB transferred ok, devices all OK But the weirdest thing is that I couldn’t login with any of my logins when I was trying via URL I only was able to login by using the IP. Cross checked that the IP any URL is the same Any ideas ? -- __________________________________________ *Thodoris Lakiotis* P : *+30 210 8100112 <%2B30%20210%208100112>* M: *+30 695 8462642*E: tlak(a)synapsecom.gr www.synapsecom.gr *Synapsecom Telecoms S.A*14th VIO.PA <https://www.google.com/maps/place/SYNAPSECOM+TELECOMS+%CE%91.%CE%95./@38.07…>., No3 133 41 Athens Greece This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. *P* please don't print this e-mail unless you really need to

2 3

Event log to remote syslog (or local)
by Pieter De Wit 16 Mar '22

16 Mar '22

Hi, My Google fu is failing today - Can Observium send it’s event log to a remote syslog ? Or even a local syslog Thanks !

1 0

Dashboard assigned to user
by Arnoldo Vidal Bravo 14 Mar '22

14 Mar '22

Hi, Is it possible? how? -- Saluda cordialmente

2 1

Alert reminder
by Toky ANDRIANASOLO 12 Mar '22

12 Mar '22

Hello, Is possible to disable the "Alert reminder" or change the setting to 01 week for example Thank you and Regards, Toky

2 1

VLANs UI question
by Adam Thompson 08 Mar '22

08 Mar '22

I’m using the top-level VLANs view to help identify VLANs we can remove, and it’s remarkably helpful, at least as a starting point. This view identifies that I have, for example, 2 untagged ports on VLAN 6… which is great, but how do I see *which ports* those are? I haven’t been able to find anything I can click on that reveals the port names/numbers, or even which device they’re on. Beyond that, how is it possible to have 2 untagged ports on 0 (zero) devices, in the first place? While we’re at it, in <hostname>/vlan/vlan_id=XYZ/ page, why are the labels “Devices”, “Tagged Ports”, “Untagged Ports” and “MACs” in the banner clickable if they don’t do anything? Help? I’m assuming I’m missing something here. -Adam Adam Thompson Consultant, Infrastructure Services [MERLIN] 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

1 0

Not finding an agent-script called 'os'
by Noah 07 Mar '22

07 Mar '22

Installing observium for the first time. :/opt/observium$ cat VERSION Observium CE 21.10.1 I am following the instructions to install the linux agent: https://docs.observium.org/unix_agent/ I am not finding an agent-script called 'os'. Where can I find the agent-script called 'os' ? # ls -1 /usr/lib/observium_agent/scripts-available apache areca-hw asterisk bind ceph crashplan dhcpkit dmi dovecot dpkg drbd edac exim-mailqueue-extended.pl exim-mailqueue.sh exim_stats_process.pl freeradius freeradius.conf.sample freeradius.sh hdarray hddtemp icecast icecast.conf.default ioping ioping.cnf ipmitool-sensor jvm-over-jmx kamailio ksm lighttpd lmsensors lvs_stats memcached mongodb munin munin-scripts mysql mysql.cnf nfs nfsd nginx nsd ntpd nvidia-smi openvpn postfix_mailgraph postfix_qshape postgresql.conf postgresql.pl powerdns powerdns-recursor proxmox-qemu raspberrypi README rpm sabnzbd-qstatus shoutcast shoutcast.conf shoutcast.default.conf temperature unbound varnish virt-what vmwaretools zimbra zyxel-nas326

1 0

User device permissions cleared after upgrade?
by Stempien, Dave 02 Mar '22

02 Mar '22

I can’t say for certain but I recently upgraded from 21.12.11831 (stable) -> 22.2.11898 (stable) and all of our user accounts that had specific device permissions seem to have lost those entries. Is there anything in the upgrade that may have overwritten or otherwise caused those permissions to disappear?

2 1

Any changes to Mikrotik's MIB ?
by Pieter De Wit 27 Feb '22

27 Feb '22

Hi Guys, About 8 hours ago an auto update was applied to a Observium box and following this the CPU graph is gone: This is the only change that I can think of so can someone please confirm this ? A rediscover of the host does “run” the Mikrotik MIB against it but it still fails to find the CPU oids Thanks !

2 4

Change base_url listening port
by Gordon Cheng (gocheng) 24 Feb '22

24 Feb '22

Hi Observium team: We are trying to follow the “Config Option” under: https://docs.observium.org/config_options/ to change the Observium GUI port from default 80 to 8000, by updating “config.php” to: // Change web interface port setting $config['base_url'] = "http://".$_SERVER["observium.abc.com"].":".$_SERVER["8000"]; But it doesn’t work even after reloading apache2. Any suggestion how to make it right? Thanks. - Gordon

3 2

Auto-authenticate for display graph in Weathermap
by Sébastien 65 20 Feb '22

20 Feb '22

Hello, I use PHP WeatherMAP and use graph display via "/graph.php?height=100&width=512&id=1053&type=port_bits&legend=no" The problem is that I have to be authenticated on Observium to display the content of the graph... How to auto-authenticate ? Thanks for your help.

2 1

Re: [Observium] cli to rebuilt alert checkers
by Tony Guadagno 19 Feb '22

19 Feb '22

Ok, clicking the “rebuild” button on the alert checker interface is not really necessary? It will rebuild every 5 min? Tony From: Adam Armstrong via observium<mailto:observium@observium.org> Sent: Saturday, February 19, 2022 11:38 AM To: Observium<mailto:observium@observium.org> Cc: Adam Armstrong<mailto:adama@observium.org> Subject: Re: [Observium] cli to rebuilt alert checkers It’s done automatically at the end of poller/discovery. Adam. Sent from my iPhone On 19 Feb 2022, at 16:32, Tony Guadagno via observium <observium(a)observium.org> wrote: Hi is there a command to rebuild the alert checkers or can it only be done in the gui? thanks Tony _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

1 0

cli to rebuilt alert checkers
by Tony Guadagno 19 Feb '22

19 Feb '22

Hi is there a command to rebuild the alert checkers or can it only be done in the gui? thanks Tony

2 1

monitor by ICMP
by Toky ANDRIANASOLO 18 Feb '22

18 Feb '22

Hello, Is it possible to monitor devices by ICMP, we want to have IP availability of a devices that have no snmp activated Thank you and Regards, Toky

3 4

Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert
by Tony Guadagno 17 Feb '22

17 Feb '22

Adam, I finally got this working. I have written up a quick guide to making this work, would it be possible for you to put this in your documentation page for LDAP Authentication? I am sure I will loose it if it is not somewhere obvious Directions for enabling LDAP with TLS when connecting to an LDAP server with a self signed certificate or a CA that the Observium server does not recognize Assumptions: you have already enabled SSL/TLS for ldap on your Microsoft Domain Controller (or other LDAP server) Observium is installed on a Fedora flavor of Linux version 7 or 8 (this might work with Ubuntu but i am not sure the commands are the same) Observium is configured for LDAP AND TLS per the authentication documentation page On the Observium server: yum install php-ldap vim /etc/openldap/ldap.conf make sure these 2 config options are commented out #TLS_CACERTDIR /etc/openldap/certs #TLS_CACERT /etc/openldap/certs/cert.crt Add/Change this config option to either hard or allow TLS_REQCERT hard “hard” means that the LDAP server MUST present a cert and the cert must be trustworthy OR in the trusted cert store (this is the more secure method) “allow” mean that the LDAP server MUST present a cert and the cert can be anything...valid or invalid setting to “hard” is better because it prevents an imposter from stealing the ip address of the LDAP server and intercepting the messages from Observium If you are setting TLS_REQCERT to “hard” then take these additional steps: export the LDAP server cert in b64 format with NO KEY place cert of LDAP server in ‘/etc/pki/ca-trust/source/anchors’ folder run ‘update-ca-trust’ as root Tony From: Adam Armstrong via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 7:29 PM To: 'Observium'<mailto:observium@observium.org> Cc: Adam Armstrong<mailto:adama@observium.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert I’ve never used LDAP, so I’m not really sure how this should be done. You can put the putenv stuff in config.php. So long as the variable is set before LDAP tries to start the connection that should be sufficient. Observium doesn’t have any configuration related to this itself. You just need to coax whatever conglomeration of PHP and OpenLDAP code exists into talking to your LDAP server. You might be able to turn of the cert checking by putting “TLS_REQCERT never” into ldap.conf, probably /etc/openldap/ldap.conf or somewhere similar. Adam. From: Tony Guadagno <tonyg(a)guadagno.org> Sent: 16 February 2022 23:55 To: Observium <observium(a)observium.org> Cc: Adam Armstrong <adama(a)observium.org> Subject: RE: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Adam, I have the cert for my AD server, as I said, I am pretty familiar with this process as I use ldap often for application authentication….what I am not very familiar with is php. Other apps have config options to set the paths for the certs etc. What I need help with is where (specifically) to put the config so that Observium will use it. I have the certs, I just need the syntax You mentioned putenv…where would I put that? It must be somewhere in Observium? Thanks for your help Tony From: Adam Armstrong via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 6:42 PM To: 'Observium'<mailto:observium@observium.org> Cc: Adam Armstrong<mailto:adama@observium.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Whoops: putenv(‘LDAPTLS_CACERT=/path/to/rootca.pem’); Note that this seems to want the CA’s cert, not your server’s cert. Our code doesn’t have any consideration for TLS at all as far as I can see, it should all be transparent to Observium if you get PHP/LDAP into the situation where it accepts your cert. Adam. From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> On Behalf Of Adam Armstrong via observium Sent: 16 February 2022 23:36 To: 'Observium' <observium(a)observium.org<mailto:observium@observium.org>> Cc: Adam Armstrong <adama(a)observium.org<mailto:adama@observium.org>> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Presumably you need to extract your certs in the correct format and direct the commands to them. The LDAP connection is done by PHP’s LDAP module. You just need to work out how to do it with PHP’s module. It’s probably that you could override this globally with the php.ini rather than putting it in the config.php, too. There seems to be half a dozen solutions for making this work, which isn’t uncommon with infrequently used PHP features. There’s also this: putenv('/path/to/rootca.pem'); Adam. From: Tony Guadagno <tonyg(a)guadagno.org<mailto:tonyg@guadagno.org>> Sent: 16 February 2022 21:57 To: Observium <observium(a)observium.org<mailto:observium@observium.org>> Cc: Adam Armstrong <adama(a)observium.org<mailto:adama@observium.org>> Subject: RE: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Adam, sorry for being dense, but do I just add these two lines directly (as is) to the config.php? ldap_set_option(null, LDAP_OPT_X_TLS_CACERTDIR, '/path/to'); ldap_set_option(null, LDAP_OPT_X_TLS_CACERTFILE, '/path/to/cert.pem'); I tried this with the paths to my certs and it had no affect. Do I need to wrap those command in some other syntax? thanks Tony From: Adam Armstrong via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 4:25 PM To: 'Observium'<mailto:observium@observium.org> Cc: Adam Armstrong<mailto:adama@observium.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert https://andreas.heigl.org/2020/01/31/handle-self-signed-certificates-with-p… I’d assume that getting your cert and putting the two ldap_set_option() commands into config.php should suffice. This seems like a better solution that turning off cert verification. Adam. From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> On Behalf Of Tony Guadagno via observium Sent: 16 February 2022 21:03 To: Observium <observium(a)observium.org<mailto:observium@observium.org>>; Brandon Lund <brandon(a)kansas.net<mailto:brandon@kansas.net>> Cc: Tony Guadagno <tonyg(a)guadagno.org<mailto:tonyg@guadagno.org>> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert I made a packet capture on the Observium server trying to login and if you look, you will see that it is indeed a self signed issue. How do I tell Observium to either trust the cert OR ignore the fact that it is self signed?? [cid:image002.png@01D8240F.9412F790] Tony From: Tony Guadagno via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 3:27 PM To: Brandon Lund<mailto:brandon@kansas.net>; Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Sorry, I should have been more specific…I already have other apps using ldap with tls hitting the server and they work…so I am confident my AD server is properly configured. I work a lot with ldap and I often find that some apps that integrate with ldap and tls get picky about the cert..thats why I think it might be the fact that I am using a self signed cert (which is common on AD servers). Usually, there is a way to tell the application “ignore the fact that it is self signed, accept it anyway” Tony From: Brandon Lund<mailto:brandon@kansas.net> Sent: Wednesday, February 16, 2022 3:08 PM To: Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: LDAP auth to MS AD with TLS Self Signed Cert looks like you need to enable tls for ad to start listing for ldaps no experience just a quick search. https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl… [Image removed by sender.]<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) - Windows Server | Microsoft Docs<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> docs.microsoft.com Describes how to enable LDAP over SSL with a third-party certification authority. Thanks Brandon Lund KansasNet Internet Services 785-776-1452 From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Tony Guadagno via observium <observium(a)observium.org<mailto:observium@observium.org>> Sent: Wednesday, February 16, 2022 1:49 PM To: Tony Guadagno via observium Cc: Tony Guadagno Subject: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Hi, I have ldap auth working mostly, if I set tls to false, I can authenticate. However, I want to be secure and when I enable tls, I get a debug error that says: Error binding to LDAP server: servername.local: Can’t contact LDAP server I am guessing the issue is the self signed cert that my server is using. My question is…how do I configure Observium to accept self signed certs for ldap? thanks Tony

2 2

DB error after Ubuntu/MySQL forced update
by Jason Vanlandingham 17 Feb '22

17 Feb '22

I'm getting the following error when trying to connect to my Observium page: DB not connected, please check database connection configuration. DB Error 2002: No such file or directory I found this post about it, but the fixes suggested here don't seem to work for me. https://www.turnkeylinux.org/forum/support/thu-20181129-0834/db-error-2002-… Has anyone else hit this problem and managed to fix it?

2 1

Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert
by Tony Guadagno 17 Feb '22

17 Feb '22

Adam, I have the cert for my AD server, as I said, I am pretty familiar with this process as I use ldap often for application authentication….what I am not very familiar with is php. Other apps have config options to set the paths for the certs etc. What I need help with is where (specifically) to put the config so that Observium will use it. I have the certs, I just need the syntax You mentioned putenv…where would I put that? It must be somewhere in Observium? Thanks for your help Tony From: Adam Armstrong via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 6:42 PM To: 'Observium'<mailto:observium@observium.org> Cc: Adam Armstrong<mailto:adama@observium.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Whoops: putenv(‘LDAPTLS_CACERT=/path/to/rootca.pem’); Note that this seems to want the CA’s cert, not your server’s cert. Our code doesn’t have any consideration for TLS at all as far as I can see, it should all be transparent to Observium if you get PHP/LDAP into the situation where it accepts your cert. Adam. From: observium <observium-bounces(a)observium.org> On Behalf Of Adam Armstrong via observium Sent: 16 February 2022 23:36 To: 'Observium' <observium(a)observium.org> Cc: Adam Armstrong <adama(a)observium.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Presumably you need to extract your certs in the correct format and direct the commands to them. The LDAP connection is done by PHP’s LDAP module. You just need to work out how to do it with PHP’s module. It’s probably that you could override this globally with the php.ini rather than putting it in the config.php, too. There seems to be half a dozen solutions for making this work, which isn’t uncommon with infrequently used PHP features. There’s also this: putenv('/path/to/rootca.pem'); Adam. From: Tony Guadagno <tonyg(a)guadagno.org<mailto:tonyg@guadagno.org>> Sent: 16 February 2022 21:57 To: Observium <observium(a)observium.org<mailto:observium@observium.org>> Cc: Adam Armstrong <adama(a)observium.org<mailto:adama@observium.org>> Subject: RE: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Adam, sorry for being dense, but do I just add these two lines directly (as is) to the config.php? ldap_set_option(null, LDAP_OPT_X_TLS_CACERTDIR, '/path/to'); ldap_set_option(null, LDAP_OPT_X_TLS_CACERTFILE, '/path/to/cert.pem'); I tried this with the paths to my certs and it had no affect. Do I need to wrap those command in some other syntax? thanks Tony From: Adam Armstrong via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 4:25 PM To: 'Observium'<mailto:observium@observium.org> Cc: Adam Armstrong<mailto:adama@observium.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert https://andreas.heigl.org/2020/01/31/handle-self-signed-certificates-with-p… I’d assume that getting your cert and putting the two ldap_set_option() commands into config.php should suffice. This seems like a better solution that turning off cert verification. Adam. From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> On Behalf Of Tony Guadagno via observium Sent: 16 February 2022 21:03 To: Observium <observium(a)observium.org<mailto:observium@observium.org>>; Brandon Lund <brandon(a)kansas.net<mailto:brandon@kansas.net>> Cc: Tony Guadagno <tonyg(a)guadagno.org<mailto:tonyg@guadagno.org>> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert I made a packet capture on the Observium server trying to login and if you look, you will see that it is indeed a self signed issue. How do I tell Observium to either trust the cert OR ignore the fact that it is self signed?? [cid:image002.png@01D82366.ADE67E70] Tony From: Tony Guadagno via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 3:27 PM To: Brandon Lund<mailto:brandon@kansas.net>; Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Sorry, I should have been more specific…I already have other apps using ldap with tls hitting the server and they work…so I am confident my AD server is properly configured. I work a lot with ldap and I often find that some apps that integrate with ldap and tls get picky about the cert..thats why I think it might be the fact that I am using a self signed cert (which is common on AD servers). Usually, there is a way to tell the application “ignore the fact that it is self signed, accept it anyway” Tony From: Brandon Lund<mailto:brandon@kansas.net> Sent: Wednesday, February 16, 2022 3:08 PM To: Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: LDAP auth to MS AD with TLS Self Signed Cert looks like you need to enable tls for ad to start listing for ldaps no experience just a quick search. https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl… [Image removed by sender.]<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) - Windows Server | Microsoft Docs<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> docs.microsoft.com Describes how to enable LDAP over SSL with a third-party certification authority. Thanks Brandon Lund KansasNet Internet Services 785-776-1452 From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Tony Guadagno via observium <observium(a)observium.org<mailto:observium@observium.org>> Sent: Wednesday, February 16, 2022 1:49 PM To: Tony Guadagno via observium Cc: Tony Guadagno Subject: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Hi, I have ldap auth working mostly, if I set tls to false, I can authenticate. However, I want to be secure and when I enable tls, I get a debug error that says: Error binding to LDAP server: servername.local: Can’t contact LDAP server I am guessing the issue is the self signed cert that my server is using. My question is…how do I configure Observium to accept self signed certs for ldap? thanks Tony

2 2

Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert
by Tony Guadagno 17 Feb '22

17 Feb '22

Adam, sorry for being dense, but do I just add these two lines directly (as is) to the config.php? ldap_set_option(null, LDAP_OPT_X_TLS_CACERTDIR, '/path/to'); ldap_set_option(null, LDAP_OPT_X_TLS_CACERTFILE, '/path/to/cert.pem'); I tried this with the paths to my certs and it had no affect. Do I need to wrap those command in some other syntax? thanks Tony From: Adam Armstrong via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 4:25 PM To: 'Observium'<mailto:observium@observium.org> Cc: Adam Armstrong<mailto:adama@observium.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert https://andreas.heigl.org/2020/01/31/handle-self-signed-certificates-with-p… I’d assume that getting your cert and putting the two ldap_set_option() commands into config.php should suffice. This seems like a better solution that turning off cert verification. Adam. From: observium <observium-bounces(a)observium.org> On Behalf Of Tony Guadagno via observium Sent: 16 February 2022 21:03 To: Observium <observium(a)observium.org>; Brandon Lund <brandon(a)kansas.net> Cc: Tony Guadagno <tonyg(a)guadagno.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert I made a packet capture on the Observium server trying to login and if you look, you will see that it is indeed a self signed issue. How do I tell Observium to either trust the cert OR ignore the fact that it is self signed?? [cid:image002.png@01D82356.3DB8A3E0] Tony From: Tony Guadagno via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 3:27 PM To: Brandon Lund<mailto:brandon@kansas.net>; Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Sorry, I should have been more specific…I already have other apps using ldap with tls hitting the server and they work…so I am confident my AD server is properly configured. I work a lot with ldap and I often find that some apps that integrate with ldap and tls get picky about the cert..thats why I think it might be the fact that I am using a self signed cert (which is common on AD servers). Usually, there is a way to tell the application “ignore the fact that it is self signed, accept it anyway” Tony From: Brandon Lund<mailto:brandon@kansas.net> Sent: Wednesday, February 16, 2022 3:08 PM To: Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: LDAP auth to MS AD with TLS Self Signed Cert looks like you need to enable tls for ad to start listing for ldaps no experience just a quick search. https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl… [Image removed by sender.]<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) - Windows Server | Microsoft Docs<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> docs.microsoft.com Describes how to enable LDAP over SSL with a third-party certification authority. Thanks Brandon Lund KansasNet Internet Services 785-776-1452 From: observium <observium-bounces(a)observium.org> on behalf of Tony Guadagno via observium <observium(a)observium.org> Sent: Wednesday, February 16, 2022 1:49 PM To: Tony Guadagno via observium Cc: Tony Guadagno Subject: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Hi, I have ldap auth working mostly, if I set tls to false, I can authenticate. However, I want to be secure and when I enable tls, I get a debug error that says: Error binding to LDAP server: servername.local: Can’t contact LDAP server I am guessing the issue is the self signed cert that my server is using. My question is…how do I configure Observium to accept self signed certs for ldap? thanks Tony

3 3

Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert
by Tony Guadagno 16 Feb '22

16 Feb '22

I made a packet capture on the Observium server trying to login and if you look, you will see that it is indeed a self signed issue. How do I tell Observium to either trust the cert OR ignore the fact that it is self signed?? [cid:image003.png@01D8234E.A5CB3950] Tony From: Tony Guadagno via observium<mailto:observium@observium.org> Sent: Wednesday, February 16, 2022 3:27 PM To: Brandon Lund<mailto:brandon@kansas.net>; Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Sorry, I should have been more specific…I already have other apps using ldap with tls hitting the server and they work…so I am confident my AD server is properly configured. I work a lot with ldap and I often find that some apps that integrate with ldap and tls get picky about the cert..thats why I think it might be the fact that I am using a self signed cert (which is common on AD servers). Usually, there is a way to tell the application “ignore the fact that it is self signed, accept it anyway” Tony From: Brandon Lund<mailto:brandon@kansas.net> Sent: Wednesday, February 16, 2022 3:08 PM To: Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: LDAP auth to MS AD with TLS Self Signed Cert looks like you need to enable tls for ad to start listing for ldaps no experience just a quick search. https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl… [https://docs.microsoft.com/en-us/media/logos/logo-ms-social.png]<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) - Windows Server | Microsoft Docs<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> docs.microsoft.com Describes how to enable LDAP over SSL with a third-party certification authority. Thanks Brandon Lund KansasNet Internet Services 785-776-1452 From: observium <observium-bounces(a)observium.org> on behalf of Tony Guadagno via observium <observium(a)observium.org> Sent: Wednesday, February 16, 2022 1:49 PM To: Tony Guadagno via observium Cc: Tony Guadagno Subject: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Hi, I have ldap auth working mostly, if I set tls to false, I can authenticate. However, I want to be secure and when I enable tls, I get a debug error that says: Error binding to LDAP server: servername.local: Can’t contact LDAP server I am guessing the issue is the self signed cert that my server is using. My question is…how do I configure Observium to accept self signed certs for ldap? thanks Tony

3 3

Re: [Observium] LDAP auth to MS AD with TLS Self Signed Cert
by Tony Guadagno 16 Feb '22

16 Feb '22

Sorry, I should have been more specific…I already have other apps using ldap with tls hitting the server and they work…so I am confident my AD server is properly configured. I work a lot with ldap and I often find that some apps that integrate with ldap and tls get picky about the cert..thats why I think it might be the fact that I am using a self signed cert (which is common on AD servers). Usually, there is a way to tell the application “ignore the fact that it is self signed, accept it anyway” Tony From: Brandon Lund<mailto:brandon@kansas.net> Sent: Wednesday, February 16, 2022 3:08 PM To: Observium<mailto:observium@observium.org> Cc: Tony Guadagno<mailto:tonyg@guadagno.org> Subject: Re: LDAP auth to MS AD with TLS Self Signed Cert looks like you need to enable tls for ad to start listing for ldaps no experience just a quick search. https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl… [https://docs.microsoft.com/en-us/media/logos/logo-ms-social.png]<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) - Windows Server | Microsoft Docs<https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enabl…> docs.microsoft.com Describes how to enable LDAP over SSL with a third-party certification authority. Thanks Brandon Lund KansasNet Internet Services 785-776-1452 From: observium <observium-bounces(a)observium.org> on behalf of Tony Guadagno via observium <observium(a)observium.org> Sent: Wednesday, February 16, 2022 1:49 PM To: Tony Guadagno via observium Cc: Tony Guadagno Subject: [Observium] LDAP auth to MS AD with TLS Self Signed Cert Hi, I have ldap auth working mostly, if I set tls to false, I can authenticate. However, I want to be secure and when I enable tls, I get a debug error that says: Error binding to LDAP server: servername.local: Can’t contact LDAP server I am guessing the issue is the self signed cert that my server is using. My question is…how do I configure Observium to accept self signed certs for ldap? thanks Tony

1 0

LDAP auth to MS AD with TLS Self Signed Cert
by Tony Guadagno 16 Feb '22

16 Feb '22

Hi, I have ldap auth working mostly, if I set tls to false, I can authenticate. However, I want to be secure and when I enable tls, I get a debug error that says: Error binding to LDAP server: servername.local: Can’t contact LDAP server I am guessing the issue is the self signed cert that my server is using. My question is…how do I configure Observium to accept self signed certs for ldap? thanks Tony

2 1

Hosts
by Jacek.Dabrowski＠selgros.pl 16 Feb '22

16 Feb '22

Hello, I have a question Is it possible to export a list of all hosts in Observium to txt/csv file ? Regards Jacek Dąbrowski

4 4

Alert dependency
by Toky ANDRIANASOLO 09 Feb '22

09 Feb '22

Hello, Is it possible to set an alert dependency on observium? for example if there are 04 devices on the network: 01 router and 03 cascading switches.. If the router goes down, we do not need the 03 switches sending an alert anymore as they depends on the router. This will save us from flooding alert and make the alerting system more efficient. Thank You and Regards, Toky,

2 1

alert sensibility setting
by Toky ANDRIANASOLO 09 Feb '22

09 Feb '22

Hello, we are setting an alert based on device status metric, so if the device status is 0 (down), an alert will be sent to a group of mail destination.. Now we want to adjust the alert sensibility of observium in order to sent the mail if the device is down for 10 mn, in other words, if the device is down then up after 8mn for example, we don't want to be alerted. Thank you and Regads, Toky

2 2

poller overwrites manual sensor limits
by Joey Stanford 05 Feb '22

05 Feb '22

Hi, We’ve disabled service discovery in order to zero in on why custom sensor limits are being overwritten. As far as we can ascertain, it appears that the poller is doing this but we’re not sure when/how since it doesn’t reset on every poll. It’s so transient that we’re finding it very difficult to identify the actual culprit. Can anyone offer tips on how we can debug this further? Thanks, Joey

1 0

Sending device status to external status page
by Joey Stanford 30 Jan '22

30 Jan '22

Hi, Ideas wanted. As a service provider, I want to expose basic up/down status to my consumers, So they can self-discover if a portion of the network in their area is affected. In my case, I have emergency communication systems and I would love to make some of these visible in an up/down fashion to people. A status page or uptime robot basic presentation. Any ideas on how I might do this? Joey

2 1

Abort during initial installation
by marco＠gallux.de 26 Jan '22

26 Jan '22

I have the following problem. On a freshly installed Debian11 system I get the following error message. It doesn't matter whether I do the installation via script or manually. #### ERROR #### root@netservice:/opt/observium# ./discovery.php -u PHP Fatal error: Uncaught mysqli_sql_exception: Table 'observium.observium_attribs' doesn't exist in /opt/observium/includes/db/mysqli.inc.php:315 Stack trace: #0 /opt/observium/includes/db/mysqli.inc.php(315): mysqli_query() #1 /opt/observium/includes/db.inc.php(224): dbCallQuery() #2 /opt/observium/includes/db/mysqli.inc.php(426): dbQuery() #3 /opt/observium/includes/common.inc.php(170): dbFetchRow() #4 /opt/observium/includes/sql-config.inc.php(100): get_obs_attrib() #5 /opt/observium/discovery.php(19): include('...') #6 {main} thrown in /opt/observium/includes/db/mysqli.inc.php on line 315 ######## what am I doing wrong? I knit according to the instructions.

2 1