Nav-users

nav-users@lister.sikt.no

1376 discussions

Graphite on other machine
by Martin.Jaburek＠cah.cz 07 Apr '14

07 Apr '14

Hello, I tried to run graphite on another machine. I was able to redirect statistics collection, but I cannot see graph data: I have made changes in etc/graphite.conf: [carbon] # # NAV supports Carbon's UDP line receiver. Host and port information of # the backend can be configured in this section. # host = IP port = 2003 [graphiteweb] # # Where is the Graphite web interface located. NAV needs this to get graphs # and data from Graphite. # base=https://IP When I first started NAV, it was configured to use the graphite on the same machine as NAV. It worked. When I changed it and restarted NAV processes it sent statistics to the new IP (I confirmed it via graphite web fronted), but it still tries to access old graphiteweb for rendering graphs, not the one changed in grahpite.conf. Can there be a problém with certificate? (it is self signed one) Isn't it somehow cached in a database? Brgds Mat -----Original Message----- From: nav-users-request(a)uninett.no [mailto:nav-users-request@uninett.no] On Behalf Of Martin.Jaburek(a)cah.cz Sent: Friday, March 28, 2014 1:38 PM To: Morten Brekkevold Cc: nav-users(a)uninett.no Subject: RE: Problem retrieving port statistics I solved my problém with moving databases to memory - it reduces load on machine and now it is ok. But I am still experiencing gaps on some graphs. There is one device which suffers from it most - see attached graphs. (graphs are from 2 devices - one OK and the other with GAPS) Gaps are only in port metrics graphs - they are at exactly the same time on all ports on given device. Systém metrics are just fine on this device. I checked the 5min graph of ipdevpoll systém metrics and it shows 100 at peak times, what I assume are only nearly 2 minutes. I'm monitoring about 140 devices right now with nav. I think that it is much correlated to my yesterday upgrade to 4.0.0 (from 4.0b5). Since then I can also see attached errors. They were not there when I was on version 4.0b5. It happens only on cisco catalyst 4500/6500 and one type of 3560E. (I have many 3750 but, there is no problém at all) and causes inventory jobs to fail. Brgds Mat -----Original Message----- From: nav-users-request(a)uninett.no [mailto:nav-users-request@uninett.no] On Behalf Of Morten Brekkevold Sent: Friday, March 28, 2014 10:36 AM To: JABUREK Martin Cc: nav-users(a)uninett.no Subject: Re: Problem retrieving port statistics On Thu, 27 Mar 2014 08:37:51 +0000 "Martin.Jaburek(a)cah.cz" <Martin.Jaburek(a)cah.cz> wrote: > Now I am able to collect all information needed. > > But I still have a problém with collected data - there are very often > gaps in graphs. Which graphs have gaps? Port metrics? System metrics? All of them? How many devices are you monitoring, and what does the runtime of the various ipdevpoll jobs look like? If the 1minstats job is spending more than 1 minute to complete for any device, there may be gaps its graphs, 5 minutes for the 5minstats job. -- Morten Brekkevold UNINETT

2 5

NAV authentication with LDAP + MS AD
by Sjøholt Steinar Otto 04 Apr '14

04 Apr '14

Hi We are running NAV with LDAP-authentication against MS ActiveDirectory. This were working fine for a while, but then the issue with case sensitive usernames appeared (Bug#1207722) The fix seems to have broken LDAP authentication with AD completely. As we are a small group of nav-users here, it took a while (and a passwordchange) to discover this. What happens now is that authentication works (for existing users) as long as the user doesn't change his password. Any new passwords will not work (as the LDAP-query against AD keeps failing), BUT the old (cached?) password still works(!) I don't know if this is by design... But it seems a little flawed to me. Since the addition of ":caseExactMatch:" doesn't work with AD, a better solution to Bug#1207722 would be to have NAV check the output of the LDAP-query to get the actual username (with correct casing) and use this to create the user in the database instead of the actual userinput. Steinar Otto Sjøholt Aalesund University College

3 11

Announcement: NAV 4.0.1 released
by Morten Brekkevold 03 Apr '14

03 Apr '14

Because of some critical bug fixes from the 3.15 series, we have also released version 4.0.1, the first maintenance release of the 4.0 series, today. The source code is available for download at Launchpad [1] and a new package for Debian Wheezy has been published in our APT repository [2]. Changes ======= The following reporte bugs have been fixed in the 3.15 series and are part of 4.0.1: * LP#1300117 (Fix for bug 1295092 causes ipdevpoll inventory jobs to crash for Cisco devices) * LP#1301251 (LDAP users with non-ASCII characters in their name cause login page to crash when user lookup method is 'search' (MS AD)) * LP#1301343 (CDP cache is never refreshed on devices that do not respond to CDP-MIB::cdpGlobalLastChange) * LP#1301349 (Module down alerts fail to mention the module's name) * LP#1301794 (LDAP group membership verification crashes with UnicodeDecodeError when username contains non-ASCII chars) A single issue affecting only the 4.0 series was fixed: * LP#1301260 (seeddb prefix edit does not display all fields) Because the 3.15 and 4.0 series are maintained in parallel, you may need to use the -o option if you are executing the `navsyncdb` program manually for schema upgrades. Happy NAVing everyone! Links ===== [1] https://launchpad.net/nav/4.0/4.0.1 [2] https://nav.uninett.no/nav_on_debian -- Morten Brekkevold UNINETT AS

1 0

Announcement: NAV 3.15.8 released
by Morten Brekkevold 03 Apr '14

03 Apr '14

The eighth maintenance release of the NAV 3.15 has been released today, version 3.15.8. The source code is available for download at Launchpad [1] and a new package for Debian Wheezy has been published in our APT repository [2]. Changes ======= The following reported bugs have been fixed (LP#1300117 is especially critical for those with Cisco devices under NAV 3.15.7): * LP#1300117 (Fix for bug 1295092 causes ipdevpoll inventory jobs to crash for Cisco devices) * LP#1301251 (LDAP users with non-ASCII characters in their name cause login page to crash when user lookup method is 'search' (MS AD)) * LP#1301343 (CDP cache is never refreshed on devices that do not respond to CDP-MIB::cdpGlobalLastChange) * LP#1301349 (Module down alerts fail to mention the module's name) * LP#1301794 (LDAP group membership verification crashes with UnicodeDecodeError when username contains non-ASCII chars) Happy NAVing everyone! Links ===== [1] https://launchpad.net/nav/3.15/3.15.8 [2] https://nav.uninett.no/nav_on_debian -- Morten Brekkevold UNINETT AS

1 0

Announcement: NAV 4.0.0 released
by Morten Brekkevold 27 Mar '14

27 Mar '14

We are proud to present the final NAV 4.0.0 release, now available for download at Launchpad: https://launchpad.net/nav/4.0/4.0.0 Changes ======= As announced when we released the first beta version, NAV 4.0 introduces two major changes. The two big changes are: 1. The complete replacement of Cricket as a 3rd party tool for statistics collection and graphing. NAV 4 collects the statistics using the already existing ipdevpoll SNMP collector, and uses Graphite as a 3rd party service for storing and graphing this data. This also means NAV no longer uses RRDtool for storing time-series data. 2. A full design overhaul of the web interface, using the Foundation CSS framework. The full release notes for this release can be read at [1]. You are also advised to read the updated installation docs at [2]. If you are upgrading from an existing 3.15 installation, you should avoid starting the new NAV version before migrating your old Cricket/RRD-based statistics to Graphite/Whisper. Instructions for this can found at [3]. If you want to upgrade from a 4.0 beta version, be advised that the polling interval for sensor statistics has been changed from 5 minutes to 1 minute. The updated example storage-schemas.conf reflects this. The whisper files under nav/devices/*/sensors/*.wsp must either be resized to include a new 1 minute resolution archive, or be deleted so that Carbon will re-create empty files from the new config. Debian packages =============== Debian packages have been uploaded to our repository, instructions for using the repository are still found at [4]. NAV's documentation does not cover installation of Graphite's Carbon daemon and the Graphite web interface, which are necessary dependencies in NAV 4.0; it only mentions configuration measures. We have backported a graphite-web package, as it is not provided by the Debian Wheezy distribution. This package does not automatically set up a Graphite web instance for you. We will write a guide suggesting how to do so, but it will be largely based on the shell script we use to automatically build our published virtual appliance. This shell script can be viewed at [5] (ca. lines 35-80). NAV 3.15 support ================ We will continue to support the 3.15 series at least until NAV 4.1 is released, but we recommend all new users to start with NAV 4. Happy NAVing everyone! Links ===== [1] https://nav.uninett.no/doc/4.0/release-notes.html [2] https://nav.uninett.no/doc/4.0/intro/install.html [3] https://nav.uninett.no/doc/4.0/howto/migrate-rrd-to-graphite.html [4] https://nav.uninett.no/nav_on_debian [5] http://bit.ly/1rFgrzz -- Morten Brekkevold UNINETT AS

1 0

Announcement: NAV 3.15.7 released
by Morten Brekkevold 27 Mar '14

27 Mar '14

For those of you who wish to continue running NAV 3.15 for while, the seventh maintenance release of this series is now available for download at Launchpad: https://launchpad.net/nav/3.15/3.15.7 This release fixes 12 reported issues: * LP#1251211 (portadmin wishlist: option to reset active interface whene changing vlan) * LP#1285601 (Switch ports on non-existant VLANs on Cisco switches don't appear as switch ports in NAV) * LP#1287700 (SeedDB will readily accept serial numbers with trailing spaces) * LP#1289219 (affected displays no information on nodes not in topology) * LP#1289320 (Submitting invalid alert subscription forms cause crash instead of error message) * LP#1291956 (LDAP auth against MS AD broken since NAV 3.14.1592653) * LP#1291978 (User supplied login name is not escaped in LDAP search filters, causing possible injection vulnerabilities) * LP#1292513 (sysname/reverse dns lookups are inconsistent or lacking after a bulk import) * LP#1293621 (missing cascade in table accounttool) * LP#1295092 (Only modules and power supplies on first member are collected from stacked HP 2920) * LP#1297200 (powersupplywatch crashes when there are more than ~1024 devices to poll) * LP#1297767 (Django exposes sensitive data like: username/password) Please report further bugs at https://launchpad.net/nav/+filebug A binary package for Debian Wheezy has been made available in our APT repository, as usual. Happy NAVing everyone! -- Morten Brekkevold UNINETT AS

1 0

pynetsnmp exception (too many values to unpack)
by Martin.Jaburek＠cah.cz 26 Mar '14

26 Mar '14

Hi, I just checked my ipdevpoll.log and found exception listed bellow. It is a Cisco 3750 two members stack. This error was reported only two times today. I checked job statuses (all green) and ipdevpoll failure graphs and there are just a few of them. Is it normal? 2014-03-26 08:34:26,933 [ERROR jobs.jobhandler] [1minstats IP] Plugin nav.ipdevpoll.plugins.statsystem.StatSystem(IP') reported an unhandled failure Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 391, in errback self._startRunCallbacks(fail) File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 458, in _startRunCallbacks self._runCallbacks() File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 545, in _runCallbacks current.result = callback(current.result, *args, **kw) File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 1095, in gotResult _inlineCallbacks(r, g, deferred) --- <exception caught here> --- File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 1037, in _inlineCallbacks result = result.throwExceptionIntoGenerator(g) File "/usr/lib/python2.7/dist-packages/twisted/python/failure.py", line 382, in throwExceptionIntoGenerator return g.throw(self.type, self.value, self.tb) File "/usr/local/nav/lib/python/nav/ipdevpoll/plugins/statsystem.py", line 69, in handle cpu = yield self._collect_cpu() File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 1037, in _inlineCallbacks result = result.throwExceptionIntoGenerator(g) File "/usr/lib/python2.7/dist-packages/twisted/python/failure.py", line 382, in throwExceptionIntoGenerator return g.throw(self.type, self.value, self.tb) File "/usr/local/nav/lib/python/nav/ipdevpoll/plugins/statsystem.py", line 118, in _collect_cpu load = yield self._get_cpu_loadavg(mib) File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 1037, in _inlineCallbacks result = result.throwExceptionIntoGenerator(g) File "/usr/lib/python2.7/dist-packages/twisted/python/failure.py", line 382, in throwExceptionIntoGenerator return g.throw(self.type, self.value, self.tb) File "/usr/local/nav/lib/python/nav/ipdevpoll/plugins/statsystem.py", line 129, in _get_cpu_loadavg load = yield mib.get_cpu_loadavg() File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 1037, in _inlineCallbacks result = result.throwExceptionIntoGenerator(g) File "/usr/lib/python2.7/dist-packages/twisted/python/failure.py", line 382, in throwExceptionIntoGenerator return g.throw(self.type, self.value, self.tb) File "/usr/local/nav/lib/python/nav/mibs/cisco_process_mib.py", line 34, in get_cpu_loadavg TOTAL_1_MIN_REV, File "/usr/lib/python2.7/dist-packages/twisted/internet/defer.py", line 545, in _runCallbacks current.result = callback(current.result, *args, **kw) File "/usr/lib/pymodules/python2.7/pynetsnmp/tableretriever.py", line 59, in saveResults for oid, value in values: exceptions.ValueError: too many values to unpack 2014-03-26 08:34:26,950 [ERROR jobs.jobhandler] [1minstats IP] Job '1minstats' for IP aborted: Job aborted due to plugin failure (cause=ValueError('too many values to unpack',))

2 1

Nav Django exposing Username/Password in error case
by Mischa Diehm 26 Mar '14

26 Mar '14

Hi, I was playing around with ldap/AD integration and got this errorreport mailed to our NOC-Group (see below) - this mail leaks my username/password in cleartext. I think this should really be avoided for any case happening! I don't have a clue about django but a quick search showed me this: https://docs.djangoproject.com/en/dev/howto/error-reporting/ Especially interesting might be this part: ... Filtering sensitive information <https://docs.djangoproject.com/en/dev/howto/error-reporting/#filtering-sens itive-information> Error reports are really helpful for debugging errors, so it is generally useful to record as much relevant information about those errors as possible. For example, by default Django records the full traceback <http://en.wikipedia.org/wiki/Stack_trace> for the exception raised, each traceback frame <http://en.wikipedia.org/wiki/Stack_frame> ¹s local variables, and the HttpRequest <https://docs.djangoproject.com/en/dev/ref/request-response/#django.http.Htt pRequest> ¹s attributes <https://docs.djangoproject.com/en/dev/ref/request-response/#httprequest-att ributes> . However, sometimes certain types of information may be too sensitive and thus may not be appropriate to be kept track of, for example a user¹s password or credit card number. So Django offers a set of function decorators to help you control which information should be filtered out of error reports in a production environment (that is, where DEBUG <https://docs.djangoproject.com/en/dev/ref/settings/#std:setting-DEBUG> is set to False): sensitive_variables() <https://docs.djangoproject.com/en/dev/howto/error-reporting/#django.views.d ecorators.debug.sensitive_variables> and sensitive_post_parameters() <https://docs.djangoproject.com/en/dev/howto/error-reporting/#django.views.d ecorators.debug.sensitive_post_parameters> . ... I wonder if than can be integrated for NAV or if there is another way to get around exposure like that? Mischa Original mail we became for django error: ---- Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", line 111, in get_response response = callback(request, *callback_args, **callback_kwargs) File "/usr/lib/pymodules/python2.7/nav/web/webfront/views.py", line 89, in login return do_login(request) File "/usr/lib/pymodules/python2.7/nav/web/webfront/views.py", line 122, in do_login account = auth.authenticate(username, password) File "/usr/lib/pymodules/python2.7/nav/web/auth.py", line 95, in authenticate auth = ldapauth.authenticate(username, password) File "/usr/lib/pymodules/python2.7/nav/web/ldapauth.py", line 120, in authenticate lconn = open_ldap() File "/usr/lib/pymodules/python2.7/nav/web/ldapauth.py", line 76, in open_ldap server = _config.get('ldap', 'server') File "/usr/lib/python2.7/ConfigParser.py", line 618, in get raise NoOptionError(option, section) NoOptionError: No option 'server' in section: 'ldap' <WSGIRequest path:/index/login/, GET:<QueryDict: {}>, POST:<QueryDict: {u'origin': [u''], u'username': [u'diehm-adm'], u'password': [u'godDamnitDjango']}>, COOKIES:{'sessionid': 'd660941ae6b821799dbb47ed41d47009'}, META:{'CONTENT_LENGTH': '52', 'CONTENT_TYPE': 'application/x-www-form-urlencoded', 'DOCUMENT_ROOT': '/usr/share/nav/htdocs', 'GATEWAY_INTERFACE': 'CGI/1.1', 'HTTPS': '1', 'HTTP_ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'HTTP_ACCEPT_ENCODING': 'gzip, deflate', 'HTTP_ACCEPT_LANGUAGE': 'de,en-us;q=0.7,en;q=0.3', 'HTTP_CONNECTION': 'keep-alive', 'HTTP_COOKIE': 'sessionid=d660941ae6b821799dbb47ed41d47009', 'HTTP_DNT': '1', 'HTTP_HOST': 'urz-nav-pet.urz.unibas.ch', 'HTTP_REFERER': 'https://urz-nav-pet.urz.unibas.ch/index/login/', 'HTTP_USER_AGENT': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:28.0) Gecko/20100101 Firefox/28.0', 'PATH_INFO': u'/index/login/', 'PATH_TRANSLATED': '/usr/share/pyshared/nav/wsgi.py/index/login/', 'QUERY_STRING': '', 'REMOTE_ADDR': '131.152.2.16', 'REMOTE_PORT': '59503', 'REQUEST_METHOD': 'POST', 'REQUEST_URI': '/index/login/', 'SCRIPT_FILENAME': '/usr/share/pyshared/nav/wsgi.py', 'SCRIPT_NAME': u'', 'SERVER_ADDR': '131.152.2.216', 'SERVER_ADMIN': 'webmaster@localhost', 'SERVER_NAME': 'urz-nav-pet.urz.unibas.ch', 'SERVER_PORT': '443', 'SERVER_PROTOCOL': 'HTTP/1.1', 'SERVER_SIGNATURE': '<address>Apache/2.2.22 (Debian) Server at urz-nav-pet.urz.unibas.ch Port 443</address>\n', 'SERVER_SOFTWARE': 'Apache/2.2.22 (Debian)', 'SSL_TLS_SNI': 'urz-nav-pet.urz.unibas.ch', 'mod_wsgi.application_group': 'urz-nav-pet.urz.unibas.ch|', 'mod_wsgi.callable_object': 'application', 'mod_wsgi.handler_script': '', 'mod_wsgi.input_chunked': '0', 'mod_wsgi.listener_host': '', 'mod_wsgi.listener_port': '443', 'mod_wsgi.process_group': 'NAV', 'mod_wsgi.request_handler': 'wsgi-script', 'mod_wsgi.script_reloading': '1', 'mod_wsgi.version': (3, 3), 'wsgi.errors': <mod_wsgi.Log object at 0x7fa322859430>, 'wsgi.file_wrapper': <built-in method file_wrapper of mod_wsgi.Adapter object at 0x7fa3228655d0>, 'wsgi.input': <mod_wsgi.Input object at 0x7fa3210d6eb0>, 'wsgi.multiprocess': True, 'wsgi.multithread': True, 'wsgi.run_once': False, 'wsgi.url_scheme': 'https', 'wsgi.version': (1, 1)}> -- Mischa Diehm | Network Operations Center (NOC) UniBasel | UniRechenZentrum (URZ) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | http://urz.unibas.ch

2 1

New to nav system
by martin.jaburek＠cah.cz 26 Mar '14

26 Mar '14

Hello, I just installed nav system from source, so I have 4.0b5 up and running. I tried so far only few Cisco boxes of these two types - Catalyst 6504 - Catalyst 4506 Even on these I'm unable to obtain software version, modules etc. It shows serial numbers and ports (but not switch ports or router ports) I tried to find out, how to troubhleshoot the proces, but nothing was usefull. Can you please advise me, what can I do to make it work? brgds Mat

4 10

navcron powersupplywatch.py
by Mischa Diehm 25 Mar '14

25 Mar '14

Hi, I have a problem with /usr/lib/nav/powersupplywatch.py: I get the following error runninng this script as user navcron: [2014-03-24 18:11:51,243] [DEBUG] Allocate SNMP-handle for cat-XXX-vl-742.pz.p.unibas.ch [2014-03-24 18:11:51,244] [DEBUG] Polling cat-XXX-vl-742.pz.p.unibas.ch: WS-C2960G-8TC-L - Power Supply 0 [2014-03-24 18:11:51,244] [DEBUG] Stored state = Unknown; polled state = Unknown [2014-03-24 18:11:51,247] [DEBUG] Allocate SNMP-handle for cat-XXX-vl-742.pz.p.unibas.ch snmp_open: Unknown host (10.XX.XX.186:161) [2014-03-24 18:11:51,247] [ERROR] snmp_open: Unknown host (10.XX.XX.186:161) Traceback (most recent call last): File "/usr/lib/nav/powersupplywatch.py", line 390, in <module> File "/usr/lib/nav/powersupplywatch.py", line 174, in main File "/usr/lib/nav/powersupplywatch.py", line 244, in check_psus_and_fans File "/usr/lib/nav/powersupplywatch.py", line 275, in get_snmp_handle File "/usr/lib/pymodules/python2.7/nav/Snmp/pynetsnmp.py", line 66, in __init__ File "/usr/lib/pymodules/python2.7/pynetsnmp/netsnmp.py", line 421, in open pynetsnmp.netsnmp.SnmpError: snmp_open NAV can actually poll the device with snmp. When I delete the device, the next device in the list will fail. It's always device No. 1020 (see below) root@urz-nav-pet:~# sudo -u navcron /usr/lib/nav/powersupplywatch.py -v -d 2>&1| grep Alloc | wc -l 1020 We run Debian 7.4 with root@urz-nav-pet:~# dpkg -l | grep nav ii nav 2+3.15.6-2 all Network Administration Visualized any ideas? -- Mischa Diehm | Network Operations Center (NOC) UniBasel | UniRechenZentrum (URZ) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | http://urz.unibas.ch

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users