Monitoring FreeRADIUS using Icinga (Nagios clon)
Hi everybody, Anybody could suggest me some script to monitor FreeRADIUS (Service status and autentication). I have checked FreeRADIUS in http://exchange.nagios.org but I have my doubts ... Thanks in advance. Regards, Antonio.
Am Montag, 21. Oktober 2013, 18:55:48 schrieb Antonio Fernández Pérez:
Hi everybody,
Anybody could suggest me some script to monitor FreeRADIUS (Service status and autentication).
I have checked FreeRADIUS in http://exchange.nagios.org but I have my doubts ...
Thanks in advance.
Regards,
Antonio.
You can use the check_snmp to gather any data from nearly any devices. Native SNMP support ist broken since FreeRADIUS version 2. But you can use the extend feature of net-snmp to transport the SNMP data over the network. See: http://wiki.freeradius.org/guide/SNMP-HOWTO BTW: Any volunteers to (help me to) implement a new SNMP subagent for FreeRADIUS? Greetings, -- Mit freundlichen Grüßen, Michael Schwartzkopff -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Michael Schwartzkopff wrote:
BTW: Any volunteers to (help me to) implement a new SNMP subagent for FreeRADIUS?
Net-snmp used to have "pass" and "pass-persist" subagents. It appears to be poorly documented now. The idea would be for the SNMP daemon to contact FreeRADIUS on a TCP port. FreeRADIUS would then be able to listen for SNMP queries, and return SNMP answers. This is best to do in 3.0. See proto_dhcp for examples of adding a new protocol. The goal for 3.1 is to re-arrange the socket code to simplify the addition of new protocols. That might help, too. Alan DeKok.
Am Montag, 21. Oktober 2013, 14:44:11 schrieben Sie:
Michael Schwartzkopff wrote:
BTW: Any volunteers to (help me to) implement a new SNMP subagent for FreeRADIUS?
Net-snmp used to have "pass" and "pass-persist" subagents. It appears to be poorly documented now.
My idea is to write a stand alone SNMP subagent that uses the AgentX interface of the master agent.
The idea would be for the SNMP daemon to contact FreeRADIUS on a TCP port. FreeRADIUS would then be able to listen for SNMP queries, and return SNMP answers.
Perhaps yes. But perhaps it is also possible to implement the whole logic into the agent that just requests the performance data from FreeRADIUS.
This is best to do in 3.0. See proto_dhcp for examples of adding a new protocol.
No new protocol. Just use FR's existing hooks to gather performance data. The master agent (net-snmp) speaks SNMP and the subagent has the instrumentation to get the data from FR. net-snmp offers a nice frame to implement subagents. Mit freundlichen Grüßen, Michael Schwartzkopff -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Michael Schwartzkopff wrote:
My idea is to write a stand alone SNMP subagent that uses the AgentX interface of the master agent.
OK.
No new protocol. Just use FR's existing hooks to gather performance data.
How? As part of the server core? Or as a separate process using radmin, or Status-Server packets? Either way seems fine, if a little higher overhead than integration into the server core. Alan DeKok.
Am Montag, 21. Oktober 2013, 19:49:34 schrieb Alan DeKok:
Michael Schwartzkopff wrote:
My idea is to write a stand alone SNMP subagent that uses the AgentX interface of the master agent.
OK.
No new protocol. Just use FR's existing hooks to gather performance data.
How? As part of the server core? Or as a separate process using radmin, or Status-Server packets?
Sending requests to the Status Server should work. I think this is a straight forward design and should be easy to program. I thought about it since FR version 2, but I did not find the time to do it. I also have to admit it was not too high on my todo list. Mit freundlichen Grüßen, Michael Schwartzkopff -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
participants (3)
-
Alan DeKok -
Antonio Fernández Pérez -
Michael Schwartzkopff