【1】nagios从零学习使用 - 软件安装

本节目标：学习使用nagios监控软件的安装

记录一下这几天监控软件nagios安装过程，测试拓扑图如下（二台vm虚拟机、一台win7物理机，都在vm8这个网中）：

nagios主要是安装nagios、cacti，使用nagios的数据，cacti做图。

dnsmail主要是装bind、sendmail、nrpe。

一、nagios安装

1、环境设置、依赖包。

cacti\cacti\所需要的所有包

yum install -y php-snmp net-snmp-utilsperl-Net-Daemon perl-PlRPC httpd mysql mysql-server  php php-mysql php-devel net-snmp gcc glibcglibc-common gd gd-devel xinetd openssl-devel rrdtool mysql-devel

若是官方有些包没法安装，手动建立dag.repo，定义非官方库：

vi /etc/yum.repos.d/dag.repo
[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag
gpgcheck=1
enabled=1
然后再导入非官方库的GPG：
rpm --import http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt

禁止防火墙与selinux

Chkconfig iptables off
Vi /etc/sysconfig/selinux
SELINUX=disabled

php安装后，报date()时区错误。

把/etc/php.ini中;date.timezone ;去掉，后面加上PRC

date.timezone = PRC

2、nagios、plugin、nrpe安装

useradd -m nagios
passwd nagios
groupadd nagcmd
usermod -a -G nagcmd nagios
usermod -a -G nagcmd apache
nagios安装
./configure --with-command-group=nagcmd
make all
make install
make install-init
make install-config
make install-commandmode
make install-webconf
添加nagiosadmin用户，pass:zerostudy
htpasswd -c /usr/local/nagios/etc/htpasswd.users nagiosadmin
vi /etc/httpd/conf/httpd.conf修改httpd.conf文件添加认证访问，最后面添加以下内容。
ScriptAlias /nagios/cgi-bin "/usr/local/nagios/sbin"
<Directory "/usr/local/nagios/sbin">
     AuthType Basic
     Options ExecCGI
     AllowOverride None
     Order allow,deny
     Allow from all
     AuthName "Nagios Access"
     AuthUserFile /usr/local/nagios/etc/htpasswd.users
     Require valid-user
</Directory>
Alias /nagios "/usr/local/nagios/share"
<Directory "/usr/local/nagios/share">
     AuthType Basic
     Options None
     AllowOverride None
     Order allow,deny
     Allow from all
     AuthName "nagios Access"
     AuthUserFile /usr/local/nagios/etc/htpasswd.users
     Require valid-user
</Directory>
修改cgi.cfg文件（/usr/local/nagios/etc）
default_user_name=nagiosadmin
authorized_for_system_information=nagiosadmin
authorized_for_configuration_information=nagiosadmin
authorized_for_system_commands=nagiosadmin
authorized_for_all_services=nagiosadmin
authorized_for_all_hosts=nagiosadmin
authorized_for_all_service_commands=nagiosadmin
authorized_for_all_host_commands=nagiosadmin
开机启动：
chkconfig nagios on
service nagios start
检测配置文件是否有问题
/usr/local/nagios/bin/nagios -v /usr/local/nagios/etc/nagios.cfg
安装插件 nagios-plugins-1.x
./configure --prefix=/usr/local/nagios
make && make install
监控主机只需要nrpe插件，安装方法如下：
./configure
make all
make install-plugin
检测客户机的nrpe插件是否正常（主机由于只需要插件，没有启动服务，所以检测本机是不成功的。完全安装也可以，需要xinted服务）
./check_nrpe -H 对方IP地址
若正常则会返回nrpe的版本

3、cacti安装

mv cacti-0.8.8b /var/www/html/cacti
mysql root的密码/usr/bin/mysqladmin-u root password 'zerostudy'
创建cacti数据库
mysql > create database cacti;
创建一个cactiuser用户密码:zerostudy
GRANT ALL ON cacti.* TO cactiuser@localhost IDENTIFIED BY 'zerostudy'
导入cacti.sql到cacti数据库
mysql>Use cacti
mysql>source /var/www/html/cacti/cacti.sql
修改config.php与global.php文件（/var/www/html/cacti/include目录下面）
config.php文件
/* make sure these values refect your actual database/host/user/password */
$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cactiuser";
$database_password = "zerostudy";
$database_port = "3306";
Global.php
/* Default database settings*/
$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cactiuser";
$database_password = "zerostudy";
$database_port = "3306";
$database_ssl = false;
添加计划任务
crontab –e
*/5 * * * * php/var/www/html/cacti/poller.php > /dev/null 2>&1

界面初始化

http://192.168.198.254/cacti/  开始用户与密码:admin

因为使用nagios做报警，cacti做图，所以setting、thod插件不安装，只安装npc插件。

mv npc /var/www/html/cacti/plugins

进入cacti安装npc并设置

安装ndoutils插件（重要）

./configure --prefix=/usr/local/nagios LDFLAGS=-L/usr/lib --enable-mysql --with-ndo2db-user=nagios --with-ndo2db-group=nagios
make
make install

[root@nagios db]# ./installdb -ucactiuser -pzerostudy -h localhost -d cacti
DBD::mysql::db do failed: Table 'cacti.nagios_dbversion' doesn't exist at ./installdb line 51.
** Creating tables for version 1.5.2
     Using mysql.sql for installation...
** Updating table nagios_dbversion
Done!

#vi /usr/local/nagios/etc/nagios.cfg添加以下内容
check_external_commands=1
command_check_interval=-1
event_broker_options=-1
broker_module=/usr/local/nagios/bin/ndomod.o config_file=/usr/local/nagios/etc/ndomod.cfg
process_performance_data=1

cp config/ndomod.cfg-sample /usr/local/nagios/etc/ndomod.cfg
[root@cacti include]# cat /usr/local/nagios/etc/ndomod.cfg |grep -v '^#'|sed /^$/d
instance_name=default
output_type=tcpsocket
output=127.0.0.1
tcp_port=5668
use_ssl=0
output_buffer_items=5000
buffer_file=/usr/local/nagios/var/ndomod.tmp
file_rotation_interval=14400
file_rotation_timeout=60
reconnect_interval=15
reconnect_warning_interval=15
data_processing_options=-1
config_output_options=2
cp config/ndo2db.cfg-sample /usr/local/nagios/etc/ndo2db.cfg
[root@cacti config]# cat /usr/local/nagios/etc/ndo2db.cfg |grep -v '^#'|sed /^$/d
lock_file=/usr/local/nagios/var/ndo2db.lock
ndo2db_user=nagios
ndo2db_group=nagcmd
socket_type=tcp
socket_name=/usr/local/nagios/var/ndo.sock
tcp_port=5668
use_ssl=0
db_servertype=mysql
db_host=localhost
db_port=3306
db_name=cacti
db_prefix=npc_
db_user=cactiuser
db_pass=zerostudy
max_timedevents_age=1440
max_systemcommands_age=10080
max_servicechecks_age=10080
max_hostchecks_age=10080
max_eventhandlers_age=44640
max_externalcommands_age=44640
debug_level=-1
debug_verbosity=1
debug_file=/usr/local/nagios/var/ndo2db.debug
max_debug_file_size=1000000

重启nagios ndo2db

#!/bin/bash
kill -9 `cat /usr/local/nagios/var/ndo2db.lock`
rm -f /usr/local/nagios/var/ndo2db.lock
/usr/local/nagios/bin/ndo2db -c /usr/local/nagios/etc/ndo2db.cfg
service nagios restart

出现如下错误：

[1395231554] Caught SIGTERM, shutting down...
[1395231554] Successfully shutdown... (PID=1949)
[1395231555] Nagios 3.4.3 starting... (PID=9737)
[1395231555] Local time is Wed Mar 19 20:19:15 CST 2014
[1395231555] LOG VERSION: 2.0
[1395231555] ndomod: NDOMOD 1.5.2 (06-08-2012) Copyright (c) 2009 Nagios Core Development Team and Community Contributors
[1395231555] ndomod: Could not open data sink!  I'll keep trying, but some output may get lost...
[1395231555] Event broker module '/usr/local/nagios/bin/ndomod.o' initialized successfully.
[1395231555] Finished daemonizing... (New PID=9738)

原因是/usr/local/nagios/etc/ndomod.cfg ndo2db.cfg 二个文件的权限问题，把他加上777权限即可。

tailf /var/log/messages报错没有long_output字段

原因表不完整。解决方法如下：

use cacti;
ALTER TABLE `npc_hostchecks` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
ALTER TABLE `npc_hoststatus` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
ALTER TABLE `npc_servicechecks` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
ALTER TABLE `npc_servicestatus` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
ALTER TABLE `npc_statehistory` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
ALTER TABLE `npc_eventhandlers` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
ALTER TABLE `npc_systemcommands` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
ALTER TABLE `npc_notifications` ADD COLUMN `long_output` varchar(8192) NOT NULL default '' AFTER `output`;
exit;

二、dnsmail机的dns设置

cat /etc/named.conf

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        recursion yes;
        dnssec-enable yes;
        dnssec-validation yes;
        dnssec-lookaside auto;
        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";
        managed-keys-directory "/var/named/dynamic";
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
zone "." IN {
        type hint;
        file "named.ca";
};
//include "/etc/named.rfc1912.zones";
//include "/etc/named.root.key";
zone "onepc.com" IN {
        type master;
        file "onepc.com.zone";
        allow-update{none;};
};
zone "198.168.192.in-addr.arpa" IN {
        type master;
        file "192.168.198.0";
        allow-update { none; };
};

区域是onepc.com

/var/named/onepc.cmo.zone

$TTL 1D
@       IN SOA  dnsmail.onepc.com. root.onepc.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        IN      NS      dnsmail.onepc.com.
        IN      MX      10      mail.onepc.com.
@       IN      A       192.168.198.253
dnsmail IN      A       192.168.198.253
www     IN      CNAME   dnsmail
ftp     IN      CNAME   dnsmail
mail    IN      A       192.168.198.253
nagios  IN      A       192.168.198.254

$TTL 1D
@       IN SOA  dnsmail.onepc.com. root.onepc.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        IN      NS      dnsmail.onepc.com.
253     IN      PTR     dnsmail.onepc.com.
254     IN      PTR     nagios.onepc.com.
253     IN      PTR     mail.onepc.com
253     IN      PTR     www.onepc.com

dns配置完成

安装sendmail

sendmail-8.14.4-8.el6.x86_64
sendmail-cf-8.14.4-8.el6.noarch
dovecot-2.0.9-2.el6_1.1.x86_64
更改/etc/mail/sendmail.mc
DAEMON_OPTIONS(`Port=smtp,Addr=192.168.198.253, Name=MTA')dnl
生成cf文件
m4 sendmail.mc > sendmail.cf
vi /etc/dovecot/dovecot.conf 把protocols前面的#去掉
protocols = imap pop3 lmtp
 vi /etc/dovecot/conf.d/10-auth.conf
disable_plaintext_auth = no
vi /etc/dovecot/conf.d/10-mail.conf
mail_location = mbox:~/mail:INBOX=/var/mail/%u
vi /etc/mail/access
Connect:localhost.localdomain           RELAY
Connect:localhost                       RELAY
Connect:127.0.0.1                       RELAY
connect:192.168.198.0                   RELAY
makemap hash /etc/mail/access < /etc/mail/access
vi /etc/mail/local-host-names
mail.onepc.com
dnsmail.onepc.com
onepc.com

安装nrpe

客户机安装nrpe插件：（需要gcc、openssl-devel、xinetd）
添加nagios用户
Useradd nagios
Passwd nagios
编译nagios-plugins：
# ./configure --prefix=/usr/local/nagios
# make && make install
更改权限
# chown nagios.nagios /usr/local/nagios
# chown -R nagios.nagios /usr/local/nagios/libexec
编译nrpe软件：
./configure
make all
make install-plugin
make install-daemon
make install-daemon-config
make install-xinetd
修改/etc/xinetd.d/nrpe文件
# description: NRPE (Nagios Remote Plugin Executor)
service nrpe
{
        flags           = REUSE
        socket_type     = stream
        port            = 5666
        wait            = no
        user            = nagios
        group           = nagios
        server          = /usr/local/nagios/bin/nrpe
        server_args     = -c /usr/local/nagios/etc/nrpe.cfg --inetd
        log_on_failure  += USERID
        disable         = no
        only_from       = 127.0.0.1 192.168.198.254
}
在only_from 后增加监控主机的IP地址。
编辑/etc/services 文件，在最后面增加NRPE服务
nrpe   5666/tcp   #nrpe

转载于:https://blog.51cto.com/hxw168/1379586