Nav-users Juni 2004

nav-users@lister.sikt.no

71 participants
234 discussions

Public key for ssh-tilgang
by jmbredal＠netscape.net 17 Jun '04

17 Jun '04

Hei. I de tilfeller der vi har ?nske om tilgang til maskinen der nav er installert, har vi f?r brukt passord som autentiseringsmetode. Dette er ikke en optimal m?te ? gj?re ting p?, og vi har derfor bestemt oss for ? bruke public-keys i ssh (takk til hio for tipset). M?ten ? gi nav-utviklere tilgang ved hjelp av public keys er som f?lger: - opprett den brukeren som utviklerne skal bruke, husk ? gi brukeren medlemsskap i nav og nav-rcs gruppene. - i rota til brukeren, opprett katalogen .ssh (legg merke til punktumet foran ssh) med f?lgende kommando: mkdir .ssh - Sjekk at rettighetene p? .ssh-katalogen er satt slik at bare brukeren har noen rettigheter (chmod 700 .ssh) - g? inn i katalogen og lag filen authorized_keys - editer authorized_keys med en teksteditor og legg til v?r public key (se nedenfor) - NB! Det m? ikke v?re linjeskift i n?kkelen. Alt som st?r i n?kkelen skal v?re p? en linje. Dersom editoren din legger til linjeskift eller du ved en feiltakelse gj?r det selv, vil ikke autentiseringen virke. - send deretter beskjed til de som skal ha det om hvilken bruker som er opprettet p? hvilken maskin. - fordelen med dette er at man ikke trenger avtale passord hvis man ?nsker ? gi oss tilgang til nav-maskinen. Dette fungerer ogs? p? root-brukeren. ITEA's public ssh key: ssh-dss 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 navcron(a)bb.itea.ntnu.no -- John Magne Bredal Overingeni?r ved Nettgruppa, ITEA, NTNU Mail: bredal(a)itea.ntnu.no Tlf. arbeid : 73 59 02 50 Tlf. hjem : 73 93 22 13 Tlf. mob : 91 89 73 66 "Just because you're paranoid, doesn't mean they're not after you."

2 1

Cricket meldinger
by Odd.Hauge＠hiMolde.no 17 Jun '04

17 Jun '04

Hallo. I Molde sliter vi med v?r Catalyst 4506 som er en cL3-sw. Meldingene fra collect-subtrees normal er: Error and the lines leading up to it: [12-Mar-2003 09:30:02 ] Starting collector: Cricket version 1.0.3 (2001-11-06) [12-Mar-2003 09:30:03 ] Retrieved data for kristiansund-gw.uninett.no (): 0,1 [12-Mar-2003 09:30:03 ] Retrieved data for molde-gw.uninett.no (): 30,31,17076076,49684840 Use of uninitialized value in split at /home/navcron/cricket/cricket/collector line 270. [12-Mar-2003 09:30:03*] Could not find any datasources for target type cl3-sw. [12-Mar-2003 09:30:03*] No data retrieved. Skipping RRD update. I local type.txt har jeg: cisco:C4506:cL3-sw:Catalyst 4506 L3 switch:1.3.6.1.4.1.9.1.502:t:t Siden disse meldingene kommer hvert 5. mnutt blir de noe plagsomme i lengden. Gode r?d mottas med takk. - odd arne hauge

1 0

[Fwd: Feil rapportering av trunker på porter]
by edprp＠it.uib.no 17 Jun '04

17 Jun '04

Hei ! > V?r nav rapporterer om trunk p? port 1,5,18,20,21,22,23 + Gi0 port 1 og > 2. Mens port 24 som er uplink porten er markert med f. Tidlige utgaver av IOS for catalyst 2950 hadde en tendens til ? autoforhandle porter til Trunk, veldig typisk for 12.1.6EA1. Anbefaler en oppgradering av IOS, gjerne til 12.1.13EA1. -- Med vennlig hilsen / Regards; Roar Pettersen Universitetet i Bergen - The University of Bergen Nygardsgt. 5 - N-5020 BERGEN - Norway Tlf: +47 55 58 40 55 VIP: 81503 fax: +47 55 58 40 70 roar.pettersen(a)it.uib.no - IT-Avd, UiB - http://www.uib.no

1 0

NAV 2.1.5 er sluppet
by morten.vold＠itea.ntnu.no 17 Jun '04

17 Jun '04

Da har vi sluppet NAV v2.1.5. Som vanlig er det ? kj?re 'navin.sh -upgrade' for ? komme opp til siste versjon. Changelog for 2.1.5 er som f?lger: 2.1.5: Mon 10 Mar 2003 - Bugfix/feature release - Trapdetect: * When editing entries, the chosen events would not be updated in the database. This has been fixed. * Much of the code has been rewritten (for the better...) - NAVLog: * Origin, category and type are now sorted in natural order (i.e. the text 'abc10' sorts after 'abc9'). - Cricket-related: * Port descriptions in andre-switch-ports are now set to the value of boksbak if portname is not set. * Browseable configuration paths are now available in the Cricket web interface. * Added OID's for SNMP-v2. They are not used in NAV at the moment because there are too many units that do not support v2, but for local additions you may now use them. They are named ifHC(In|Out)Octets and use 64-bit counters, if present on the units. They have been tested on NTNU, and should work properly. * Added OID's for computers running the NET-SNMP agent, allowing for these systems to be Cricket targets in NAV. - Collector scripts: * Organization names no longer need to be specified in lowercase. * When a box is down during the night, the nightly cron fyll_db.pl would delete and reinsert the box. This causes a problem in terms of statusmonitoring (live), the box will be reported as down (again). The bug is now fixed. * Module numbers and ports would not be collected correctly for some cgsw's. This was due to usage of wrong OID's for the cgsw type, and has now been fixed. - vlanPlot / net-map related: * A couple of bugs contributed to vlanPlot displaying some links with a permanent zero-load. These bugs have been fixed. * A bug that would sometimes cause the vPServer to stop was fixed. - Web: * The login link on the web pages should be more visible now. - Administrative: * Typegroup ogw (other routers) was added. * All Cisco type names were altered according to OID names, as suggested by UiO. * All types have been sorted by ascending OID's in type.txt. - Ragen: * Can now generate a list of locally defined reports. * Removes empty or duplicate parameters from URL's. * Fixed a security issue where restricted users could potentially access the secret version of a report. * A bug would sometimes cause column titles to begin with the word 'DISTINCT', this has been fixed. - Alert system: * When adding users to the alert system, the existing NAV users are listed in a dropdown box, disabling the possibility of creating a non-NAV user profile. * Even with admin privileges, you can no longer delete your own alert user. * Admin page was restructured a little. * The user profile page now displays your username. * When trying to add a user profile for someone not registered with an organization, you would previously receive a cryptic PHP error message. Now you receive a friendly error message stating the nature of the problem. - Threshold: * The messages from hysterese now more accurately describe what type of threshold that has been exceeded. * hystereseOff-traps now also display the last load that was found when sending the off-alert. * hystereseOff could in some special cases check the load on the wrong unit when trying to calculate if load had returned to normal. This has been fixed. - Tracing: * arp_sok.php will now order results from combined MAC/CAM-searches by date (ascending). - SMS overview: * SMS messages that were never sent will no longer show up in your overview. Lykke til! -- Morten

4 3

Kopling mellom Mac-adresse og produsent
by kjetil.olsen＠usit.uio.no 17 Jun '04

17 Jun '04

I mange tilfeller kunne det v?rt kjekt ? f? en pekepinn om produsenten av utstyret n?r man gj?r s?k p? MAC-adresse i NAV. Regner med at det kan gj?res forholdsvis enkelt, f.eks. ved ? laste ned http://standards.ieee.org/regauth/oui/oui.txt hver natt (eller en gang i uka eller...) og gj?re et oppslag der n?r et MAC-s?k gj?res. --Kjetil

1 0

Ny c3550-type
by Borge.Brunes＠cc.uit.no 17 Jun '04

17 Jun '04

cisco:C3550L3:cgsw:Catalyst 3550-48T svitsj:1.3.6.1.4.1.9.1.367:t:t B?rge

1 0

TrapDetect og terskelverdier i cricket
by bredal＠itea.ntnu.no 17 Jun '04

17 Jun '04

Hei. Det er i praksis dette hystereseAlarm skal gj?re. Grunnen til at vi ikke bruker Cricket sin egen m?te ? gj?re dette p? er at vi ville ha mer kontroll p? hva som ble sjekket. Om dette var en suksess eller ikke kan man jo diskutere. Dersom dere likevel vil konfigurere TrapDetect til ? ta i mot slike traps, er dette fullt mulig. Jeg er en smule usikker p? de ulike oid'ene, men etter ? ha sett litt i Monitor.pm, som er modulen Cricket bruker for ? detektere og sende threshold-traps, vil konfigureringen av /usr/local/nav/local/etc/conf/TrapDetect.conf bli ca. slik: kat2 - : Thresholdtraps generert av Cricket, indikerer h?y last. .1.3.6.1.4.1.2595.1.1.0.4 thresholdUp .1.3.6.1.4.1.2595.1.1.0.5 thresholdDown # alt p? en linje takk :) .1.3.6.1.4.1.2595.1.3.3 name - Dere m? deretter kj?re /usr/local/nav/navme/cron/TD_convert_conf_to_database. Tok en kjapp test p? dette. Dere m? konfigurere defaults-innslaget i cricket-config_defaults der dere skal ha varsel slik: trap-address = <ip til nav-maskin> monitor-thresholds = "<ds> : value : <min> : <max> : SNMP" En liten utskrift fra trap-loggen gir dette: .1.3.6.1.4.1.2595.1.3.1 "value" .1.3.6.1.4.1.2595.1.3.2 "ifInOctets : value : n : 100000 : SNMP" .1.3.6.1.4.1.2595.1.3.3 "/giga-switch-ports/mts-sw/7_7" .1.3.6.1.4.1.2595.1.3.4 "ifInOctets" .1.3.6.1.4.1.2595.1.3.5 "navcron" .1.3.6.1.4.1.2595.1.3.8 "cricket" S? ser dere selv hva dere vil ha med, jeg tok bare med rrd-fila (2595.1.3.3) siden den gir den informasjonen man trenger. 1.3.2 kan jo ogs? vurderes siden den sier hvilken terskel som ble brukt. Hvis det er noen spm. s? bare sp?r. Jeg har ikke gjort dette mye, og det er lenge siden, men jeg vet litt i alle fall. Ingeborg Hellemo wrote: > Er det noen som har konfigurert TrapDetect til ? ta imot traps generert av > "monitor-thresholds" i cricket? > > > --Ingeborg > -- John Magne Bredal Overingeni?r ved Nettgruppa, ITEA, NTNU Mail: bredal(a)itea.ntnu.no Tlf. arbeid : 73 59 02 50 Tlf. hjem : 73 93 22 13 Tlf. mob : 91 89 73 66 "Just because you're paranoid, doesn't mean they're not after you."

1 0

NAV v2.1.4 er sluppet
by morten.vold＠itea.ntnu.no 17 Jun '04

17 Jun '04

Godt nytt ?r, alle sammen! NAV 2.1.4 var klar like f?r jul, men av hensyn til julefreden slipper vi den n? f?rst ;-) Oppgradering skjer ved "navin.sh -upgrade" som vanlig. Her f?lger changelog for oppgraderingen: ======================================== 2.1.4: Fri 3 Jan 2003 - Bugfix release - Cricket-related: * Added targetType for spes-sw. * Fixed bug in makecricketconfig that prevented creation of config-files for swports on GSW's where speed was not set to 1000. * Existing routers with no interfaces will no longer have its own config-tree subdirectory for router-interfaces (makecricketconfig). - Collector scripts: * Will no longer add vlan info for swports unless both swportid and vlan is known. * No longer attempts to match vlan numbers that are not present in vlan.txt. * If an SNMP query to a box times out, bokser.pl no longer claims that the box type has changed. - NAVLog: * Web interface was broken, now shows data again. * Now makes raw copies of log files in addition to dumping them into the database (for the benefit of _real_ UNIX sysadmins ;-) ) - live.pl would always write abort messages to 'avbrutt.log', regardless of whether it actually aborted its run, this has been fixed. - Threshold (hysterese) scripts: * Now supports interfaces with ':' in their names. * Database errors no longer show up in the hysterese log. * More problems with sysname case were fixed. - Some improvement of the internal Java database library. - NAV start/stop system (nav command): * Will no longer accept unknown subsystem commands. * Now understands the "restart" command; it is passed directly to daemon init scripts, while crontab chunks are reloaded from disk. * Recipient of cron mail is no longer specified directly from navme/etc/crontab_navcron.nav, it is read from the ADMIN_MAIL setting in nav.conf. - Ragen: * Now shows sums in white, prepending a sum (sigma) sign. * Altered some SQL syntax to comply with PostgreSQL 7.3's stricter SQL parser. - Camlogger: * Would not log MAC addresses on a port where nettel.txt specified a server behind the port; fixed. * New function will report when specified MAC addresses are seen on the network. These MAC addresses are listed in the new config file watchMacs.conf. Can be used to register MAC addresses of stolen machines. - New types, typegroups and vendors were added (most of these were posted to nav-users(a)itea.ntnu.no) - Some more database text fields were extended. - Trapdetect (web) admins can now see other users' SMS messages. -- Morten

5 9

Feil ved varslingsregistrering
by reierr＠notes.uio.no 17 Jun '04

17 Jun '04

Jeg har pr?vd ? endre varslingsprofil, men jeg f?r da f?lgende feilmelding etter oppdatering til NAV 2.1.4 . >>>>>>>> Velkommen til varslingsregistrering. Dette er en 3-stegsprosess der du m? gjennom f?lgende punkter: Steg 1: Valg av hendelse for varsling Steg 2: Valg av eventuelle enheter. Steg 3: Valg av varslingstype STEG 1 AV 3 Her er alle hendelser du har tilgang til med reierr sin organisasjonstilh?righet. Velg hendelse du vil abonnere p? og trykk g? videre. Warning: PostgreSQL query failed: ERROR: parser: parse error at or near "and" in /usr/local/nav/navme/apache/shtdocs/res/varsel/meldingssystem.php on line 99 Warning: Supplied argument is not a valid PostgreSQL result resource in /usr/local/nav/navme/apache/shtdocs/res/varsel/meldingssystem.php on line 100 Du kan ikke abonnere p? noen hendelser. Ta kontakt med en administrator for hjelp med dette. <<<<<<<<<<<<<<<<<< Noe som kan hjelpe til ? fikse dette? Mvh. <reierr>

3 2

metanav.ntnu.no
by sender＠coolstats.com 17 Jun '04

17 Jun '04

Hi, I thought you might be interested in getting in-depth knowledge about your web audience and web traffic patterns in a reliable and cost-effective way. Stop Guessing - Start Knowing! - CoolStats measures web site traffic and online behavior of your visitors. - CoolStats will help you understand how to optimize your site to meet the needs of your visitors. - You get access to detailed, real-time statistical analysis of your web pages - 24 hours a day. Click at http://www.coolstats.com/viewdemo/index.html to view Online Demo. - CoolStats is the ultimate real-time tracking solution for small and mid-sized businesses. - 100% accuracy by measuring activity at the client, not via server based log files. - The fee of $24.95 is minimal compared to what it would cost you to run a tracking service yourself! Why CoolStats? - no programming to do - no servers to maintain - no software applications to install Click at http://p1j2m3a4.pdhost.com/pdsvr/www/r?1000025734.1403.15.6MqMr+4j$ZF3cK to Sign Up now! "We needed to make business sense out of our web visitor behavior - CoolStats delivers first-class graphical reports that help us continuously improve and optimize our website to match the requirements of our target audience." BRYAN KASHILIN, BOSTON Click at http://www.coolstats.com/product/customerref.html to check what other customers say about us! For more information about our website tracking services, please visit our website or contact me directly at the below email. I look forward to hearing from you soon. Best regards, Helen Baker CoolStats Support Email: helen_baker(a)coolstats.com Http://www.coolstats.com Don't be the last one to know! ----------------------------------------------------------------------- This message has been brought to nav-users(a)itea.ntnu.no. If you do not wish to receive anymore emails, please follow the opt-out instruction below. We apologize for any inconvenience.

1 0

← Newer
1
...
11
12
13
14
15
16
17
...
24
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users Juni 2004