Yaim Based Installation of Nagios & NCG

NCG Overview

The manual install of NCG is described at GridMonitoringNcg. This document describes an automated installation based on YAIM and yum.

Configuring the repositories

In order to install via Yaim, you need to add some yuum repositories. These are:
  • lcg-CA
  • dag
  • glite-UI - this is to get the base yaim packages and glite-version only
  • egee-SA1 repository - In order to install the egee-SA1 repository,. create a file with the following contents in /etc/yum.repos.d/egee-SA1.repo.

name=EGEE SA1 software


You need
  • a host certificate in order to secure the Nagios web portal.
  • Access to the SAM Portal - In order to generate Nagios configuration for your site and run remote probes against central SAM service, you need to request access to SAM PI from your Nagios host. Details on enabling access are maintained by the SAM team here. In the request you should provide the machine address(es) and simply specify that you require access under the "EGEE-SA1 Monitoring Profile".

Installing packages

Once this is done, you can install by doing yum install egee-NAGIOS lcg-CA.

The configuration requires you to set the following variables in the YAIM site-info.def file:

Variable Description Example
INSTALL_ROOT Location of grid middleware. /opt
SITE_NAME the site you wish to monitor MY-SITE
PX_HOST MyProxy Server to retrieve a certificate to run local tests under myproxy.example.org
SITE_BDII_HOST The site BDII for the monitored site, SITE_NAME site-bdii.example.org
VOS A list of VOs who can view the nagios information. "ops dteam alice"
VO_<VONAME>_VOMS_SERVERS URI for the VOMS service. https://voms.cern.ch:8443/voms/ops/?ops/
NAGIOS_ADMIN_DNS comma separated list of local admin DNs that can perform actions via the nagios web interface "/DC=ch/OU=Users/CN=Dr Kildare,/DC=ch/OU=User/CN=Dr Who"

The following variables have defaults but you may well want to change them.

Variable Default Description
NAGIOS_HTTPD_ENABLE_CONFIG false Set true to update apache configuration for X509 auth. Will overwrite /etc/httpd/conf.d/nagios.conf and ssl.conf. If you don't do this you will have to configuare apache by hand for X509 certificate authenticaton

The following variables have defaults, and can be changed if you have a non-standard installation of nagios or httpd.

Variable Default Description
NCG_MAIN_DB_FILE /opt/lcg/etc/ncg/ncg.localdb location of your local configurations for NCG
NCG_TEMPLATES_DIR /opt/lcg/share/grid-monitoring/config-gen/nagios the location of NCG configuration templates
NCG_OUTPUT_DIR /etc/nagios/wlcg.d Where the nagios configuration files for the server will be generated
NCG_NRPE_OUTPUT_DIR /etc/nagios/nrpe/ Where NRPE configuration files will be generated
NCG_PROBES_TYPE remote,native By default remote and native (i.e. not local)
NAGIOS_HTPASSWD_FILE /etc/nagios/htpasswd.users Location of allowed users for nagios web portal
NCG_VO dteam VO the tests should run as. The person running the tests must be a member.


To configure, you just need to run yaim, installing the node type glite-NAGIOS
/opt/glite/yaim/bin/yaim -s /root/site-info.def -c -n glite-NAGIOS

This will configure all components related to Nagios, including generating a configuration file using NCG. Once this is completed successfully, you should be able to browser the Nagios web portal at https://SERVER_NAME/nagios/.


If using local probes then these require a valid proxy certificate. This is obtained from a MyProxy service. Assuming that PATCH:2184 which we hope to have soon has been deployed then allow the host running the local probes to retrieve a valid proxy. i.e it should have a YAIM configuration of at least. If PATCH:2184 has not been released install a glite-PX meta package and then these 4 packages: glite-yaim-myproxy-4.0.3-1.noarch.rpm, glite-info-provider-service-1.0.1-3.noarch.rpm, glite-info-provider-release-1.0.0-5.noarch.rpm and myproxy-config-2.0.1-1.noarch.rpm.

Needs more documenting shortly but for now.

$ myproxy-init -c 336 -k NagiosRetreive -s myproxy.cern.ch -l nagios -x -Z "/DC=ch/OU=computers/CN=nrpe-ui.example.ch"

Edit | Attach | Watch | Print version | History: r67 | r10 < r9 < r8 < r7 | Backlinks | Raw View | Raw edit | More topic actions...
Topic revision: r8 - 2008-09-12 - SteveTraylen
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    EGEE All webs login

This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright & by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Ask a support question or Send feedback