- Nav-users - lister.unit.no

Suse 9.1 apache/conf.d/nav.conf ?
by magnus＠ntnu.no 09 Sep '05

09 Sep '05

Pete Hoffswell: > Does anyone have an example apache config snippet for nav? http://svn.nav.ntnu.no/nav/navme/trunk/doc/apache/httpd2.conf.example is no longer available Sorry about that. Try http://svn.itea.ntnu.no/repos/nav/navme/trunk/doc/apache/httpd2.conf.example We moved our svn repository some weeks ago. I have updated the link at metanav.ntnu.no now. HTH -- Magnus Nordseth echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc >From Pete.Hoffswell at davenport.edu Fri Sep 9 09:45:18 2005 From: Pete.Hoffswell at davenport.edu (Pete Hoffswell) Date: Fri Sep 9 14:46:19 2005 Subject: [Nav-users] Suse 9.1 apache/conf.d/nav.conf ? Message-ID: <s3214bcf.015(a)dugwia1.davenport.edu> I manage my SuSE apache2 implementation through the /etc/apache2/conf.d directory. This is a standard httpd.conf include directory in the SuSE file layout. Unfortunately, I do not use a virutal server setup, so I don't get a direct correlation to what is seen in http://svn.itea.ntnu.no/repos/nav/navme/trunk/doc/apache/httpd2.conf.example I would like to configure my Apache2 server to run NAV off a directory, and not as a virutal server. Sorry, I'm not a apache wizard! Currently, a call to http://myserver.com/nav seems to redirect to http://myserver.com/index/login?origin=/nav I seem to be missing a rewrite rule or something. I don't see it in httpd2.conf.example, and suspect it has somethign to do with the document root that is provided by a virtual server, maybe? Anyone have an idea on how to configure apache2 to run nav off a directory, and not as a virtual server? Thanks! Pete Hoffswell 616-732-1101 (Grand Rapids, x1101) University LAN/WAN Coordinator 616-510-1198 (Mobile) IT Services pete.hoffswell(a)davenport.edu Davenport University http://www.davenport.edu Davenport University. It's working. >>> Magnus Nordseth <magnus(a)ntnu.no> 9/8/2005 5:00 PM >>> Pete Hoffswell: > Does anyone have an example apache config snippet for nav? http://svn.nav.ntnu.no/nav/navme/trunk/doc/apache/httpd2.conf.example is no longer available Sorry about that. Try http://svn.itea.ntnu.no/repos/nav/navme/trunk/doc/apache/httpd2.conf.example We moved our svn repository some weeks ago. I have updated the link at metanav.ntnu.no now. HTH -- Magnus Nordseth echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc

1 0

NAV 3 RC2 - cannot import name v1
by morten.vold＠ntnu.no 01 Sep '05

01 Sep '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/08/2005 16:24, Carlton Houston uttered: > When I go to the edit database toolbox, I get the following error > output. Can anyone tell me what this means? [...] > File "/usr/local/nav/lib/python/nav/Snmp.py", line 23, in ? > from pysnmp.proto import v1, v2c > > ImportError: cannot import name v1 I think your problem might be the same as Matt Hall's. As Roar Pettersen suggested to him, EditDB is unfortunately very picky about the version of the pysnmp library. It requires pysnmp-3.3.5. The 3.3 line of pysnmp had a very unstable API, unfortunately noone discovered this when EditDB was developed using version 3.3.5. - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFsanXxIl0kpcOkQRAqrVAJ468d0elUPV5q+bbTPStlZLTXozTQCdEH2H /Poxxbvuv0AnOlmAg6y0qXg= =JI4X -----END PGP SIGNATURE----- >From morten.vold at ntnu.no Thu Sep 1 14:11:01 2005 From: morten.vold at ntnu.no (Morten Vold) Date: Thu Sep 1 13:12:13 2005 Subject: [Nav-users] AlertProfiles problem In-Reply-To: <42F869E6.8090506(a)hsh.no> References: <42F869E6.8090506(a)hsh.no> Message-ID: <4316E1C5.9060007(a)ntnu.no> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/08/2005 10:31, Roger Aas uttered: > if VFFSL(SL,"user.preferences.hidelogo",1): > NameMapper.NotFound: cannot find 'preferences' while searching for > 'user.preferences.hidelogo' > > Also in the lower left corner I get this message both with FireFox and IE: > > StyleSheets > Your Internet browser do not support style sheets. We reccomend using a > browser which support style sheets with Alert Profiles. > > Someone know why I get this error? This is in RC2, I did not get this in > RC1. This bug was reported by Bulent Sarinc the same day RC2 came out. It was fixed in the Subversion repository on July 27th (r3314). The fix will be part of the next release. (Peder Magne Sefland also reported the same bug the day after you did). - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFuHFXxIl0kpcOkQRAmeIAJ4jG+guLSNzs2bvwo1LYqwS/ov0swCfVUX5 K7YE8SjDeVVF5IVjYDOc5S4= =w3T1 -----END PGP SIGNATURE----- >From morten.vold at ntnu.no Thu Sep 1 14:25:41 2005 From: morten.vold at ntnu.no (Morten Vold) Date: Thu Sep 1 13:26:05 2005 Subject: [Nav-users] - ImportError: cannot import name Account In-Reply-To: <s300784e.030(a)pop.davenport.edu> References: <s300784e.030(a)pop.davenport.edu> Message-ID: <4316E535.3020607(a)ntnu.no> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 15/08/2005 17:10, Pete Hoffswell uttered: >>>>from nav.db.navprofiles import Account > > Traceback (most recent call last): > File "<stdin>", line 1, in ? > ImportError: cannot import name Account Eek.. strangeness. Right now it looks like Python doesn't find the NAV libraries (but I could be wrong). What's the output of this Python script (entered at the interactive Python prompt)? import sys print sys.path import nav import nav.db.navprofiles Did you set your PYTHONPATH variable, or did you symlink the NAV Python libraries to Python's systemwide library directories? > Aditya Rajgarhia <arajgarh(a)iwu.edu> did mention software versions. > Do you have any suggestions as to which packages I should maybe look > at? I'm not sure what you're getting at here. I don't think your problem is in any way related to the version numbers of any of your software. - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFuU1XxIl0kpcOkQRAjE9AKDmCJe84eJ5zkLu6SG7oJ/5UuiQmACfZvxq lPyoby/d4XxEgELK9R1tbvg= =m9Ql -----END PGP SIGNATURE----- >From morten.vold at ntnu.no Thu Sep 1 14:35:39 2005 From: morten.vold at ntnu.no (Morten Vold) Date: Thu Sep 1 13:35:44 2005 Subject: [Nav-users] vlanPlot - Looks very messy In-Reply-To: <b4c110fd0508191045305d5f0e(a)mail.gmail.com> References: <4304B180.7060603(a)iwu.edu> <b4c110fd05081810484e86ccf(a)mail.gmail.com> <4304D2A8.2000303(a)iwu.edu> <b4c110fd050818161060ade9d(a)mail.gmail.com> <4305EDA4.10101(a)iwu.edu> <b4c110fd0508191045305d5f0e(a)mail.gmail.com> Message-ID: <4316E78B.30204(a)ntnu.no> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 19/08/2005 19:45, Kristian Eide uttered: > After entering the above SQL statement you should be able to log in as > user 'admin' with password 'XXX' (given that the user admin already > exists). Actually, NAV supports plaintext passwords in the database (for "legacy" reasons), as long as the password doesn't begin with the string "md5". So UPDATE account SET password='XXX' WHERE login='admin'; should be good enough :) > I will refer you to Morten Vold who is our expert on this part of > NAV. He is on vacation until the end of the month, however. When it comes to the actual problem Aditya reports (submitting unchanged user details clears the password), I can confirm that this is a bug, which must have been reintroduced into the system (I don't know when). This was a bug maybe two years ago, and I fixed it then. I'll be getting a new fix into the next release. - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFueLXxIl0kpcOkQRAn1+AJ431HKLOCpdSkQvadF+pGFf1zAIKQCgq4F8 X2pva/1Ydr4DNXxgjMWtjuA= =/70V -----END PGP SIGNATURE----- >From morten.vold at ntnu.no Thu Sep 1 14:51:30 2005 From: morten.vold at ntnu.no (Morten Vold) Date: Thu Sep 1 13:51:36 2005 Subject: [Nav-users] Partitioning user logons so they only see their devices? In-Reply-To: <20050819165523.3E5C7336D4(a)signal.itea.ntnu.no> References: <20050819165523.3E5C7336D4(a)signal.itea.ntnu.no> Message-ID: <4316EB42.3090104(a)ntnu.no> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 19/08/2005 18:55, Joshua Sidwell uttered: > I am currently trying to create unique user logons to allow read only > access to those devices that individual departments are responsible > for monitoring. My problem is that I am not sufficiently clear on how > to go about doing this. It seems that you should be able to do this > in the "Privileges" section on the group creation page. Is this > correct? If not, is there some other way to limit users ability to > see all devices? Unfortunately, this feature does not exist at this time. This is, however, scheduled for version 3.1, in the currently running development project funded by Uninett. It was always the plan to have the privilege system be this flexible, but we never had the time to implement it fully. The only way to limit users' access to information in the current version of NAV is to make use of the web_access privilege to grant access to URL patterns. The example groups that come with a NAV installation will have some web_access privileges set to demonstrate their usage. Already, you can enter a hierarchical organization structure of department names (preferably using abbreviations) in EditDB, and user accounts can be made members of these departments. The department/orgid that "owns" a piece of network equipment will be derived from the information that NAV collects from the equipment. The idea is that improvements to the privilege system will allow administrators to use the accounts' organizational memberships to limit users' access to information. An account that is a member of the "svt" department might only be allowed to see the status of equipment owned by the "svt" department, or use the machine tracker to track only computers on the subnets that have been delegated to the "svt" department. - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFutCXxIl0kpcOkQRAqw8AJ90MXrYsmj9K4Osbx3bOn+k1EQajQCggdPY b0O2RpGfCvnf/BjIdkpTvZA= =EMgc -----END PGP SIGNATURE----- >From morten.vold at ntnu.no Thu Sep 1 14:55:21 2005 From: morten.vold at ntnu.no (Morten Vold) Date: Thu Sep 1 13:55:27 2005 Subject: [Nav-users] add type - what is this? In-Reply-To: <20050823202536.E64049(a)duke.cc.uit.no> References: <E04174B5A513E542AD2CB6C1E18D9C7D4DD5AC(a)Exchange.admin.khio.no> <20050823202536.E64049(a)duke.cc.uit.no> Message-ID: <4316EC29.2020702(a)ntnu.no> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 23/08/2005 20:27, Borge Brunes uttered: >> How do i know what types there are? > http://metanav.ntnu.no/moin.cgi/EquipmentTypes Or, if you wish to see the types that have been registered in your own NAV installation, go to: http://nav.admin.khio.no/editdb/type/list - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFuwpXxIl0kpcOkQRAi/tAJ4tRJnyEQ4Qjqm/nxkvJLYF9NlSegCeMsMD jMVUmnEtzV9LVFSwv5abzyw= =h29W -----END PGP SIGNATURE----- >From morten.vold at ntnu.no Fri Sep 2 14:40:13 2005 From: morten.vold at ntnu.no (Morten Vold) Date: Fri Sep 2 13:40:20 2005 Subject: [Nav-users] Bugs? In-Reply-To: <Pine.SOL.4.63-L.0508291254150.26636(a)saruman.uio.no> References: <Pine.SOL.4.63-L.0508291254150.26636(a)saruman.uio.no> Message-ID: <43183A1D.608(a)ntnu.no> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 29/08/2005 13:11, Asbj?rn Pr?is uttered: > 4) LDAP auth > I'm trying to get authentication through LDAP to work. Login fails > with error message "unable to make contact with the DLAP server". > Logs on the LDAP server doest show anything (seems like the NAV box > doesnt make any contact at all), and since I'm no python coder I > havent been able to reverse-engeneer the code to figure things out. > Are there any documentation on the LDAP auth part somewhere? I assume you've entered the correct LDAP configuration in etc/webfront/webfront.conf, and that your LDAP server is in fact reachable from your NAV server? Does your LDAP server run on a non-standard port? In retrospect, it's also clear that the LDAP authentication should be even more configurable, as the code makes a few assumptions about which attributes to use when binding to the LDAP server and to retrieve from the LDAP user objects. - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDGDodXxIl0kpcOkQRAhWzAKDHJseVoFA/lvh4y+9H9LFusEbTPwCgrV69 JbRhxS0M43KSuA27rl2zwH0= =KSS/ -----END PGP SIGNATURE----- >From morten.vold at ntnu.no Fri Sep 2 14:44:30 2005 From: morten.vold at ntnu.no (Morten Vold) Date: Fri Sep 2 13:44:38 2005 Subject: [Nav-users] Bugs? In-Reply-To: <43183A1D.608(a)ntnu.no> References: <Pine.SOL.4.63-L.0508291254150.26636(a)saruman.uio.no> <43183A1D.608(a)ntnu.no> Message-ID: <43183B1E.8050908(a)ntnu.no> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 02/09/2005 13:40, Morten Vold uttered: > I assume you've entered the correct LDAP configuration in > etc/webfront/webfront.conf, and that your LDAP server is in fact > reachable from your NAV server? Does your LDAP server run on a > non-standard port? Just remembered: Also, check your Apache error log, as NAV may spit out more detailed error information there. - -- Morten Vold NTNU ITEA Integrasjonsgruppen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDGDseXxIl0kpcOkQRAkHGAKDGa19KjvOdWwc6oI9ecPP0gFCWzACg6t2m DArVtL29Kp6Z+CaWVGB1/+A= =TBOK -----END PGP SIGNATURE----- >From Pete.Hoffswell at davenport.edu Thu Sep 8 16:38:38 2005 From: Pete.Hoffswell at davenport.edu (Pete Hoffswell) Date: Thu Sep 8 21:39:11 2005 Subject: [Nav-users] Suse 9.1 apache/conf.d/nav.conf ? Message-ID: <s3205b13.025(a)dugwia1.davenport.edu> Hello? I'm working on a new installation to SuSE 9.1, following the InstallingOnSLES recipe. Does anyone have an example apache config snippet for nav? http://svn.nav.ntnu.no/nav/navme/trunk/doc/apache/httpd2.conf.example is no longer available On SuSE,this would install to /etc/apache/conf.d/nav.conf I have tried to make one, but I think it's wrong. Right now a visit to mysever.com/nav looks to redirect to http://myserver.com/index/login?origin=/nav and a 404 error. Thanks! Pete Hoffswell 616-732-1101 (Grand Rapids, x1101) University LAN/WAN Coordinator 616-510-1198 (Mobile) IT Services pete.hoffswell(a)davenport.edu Davenport University http://www.davenport.edu Davenport University. It's working.

1 0

Syslog setup
by jsidwell＠perisys.net 31 Aug '05

31 Aug '05

I am currently trying to setup the syslog functionality in NAV v3 Beta, and have edited the logger.conf to select specific devices and escalate their errors/warnings. I have also changed where the log file is expected to be so that NAV can find the syslog messages from the device, but I am still not getting any data even though I see info getting dumped into the log. I have looked for documentation on this feature set, but I am unable to find anything. Can anybody point me in the right direction for this?

1 0

Bugs?
by stian.soiland＠ntnu.no 31 Aug '05

31 Aug '05

On 29. aug. 2005, at 12:11, Asbj?rn Pr?is wrote: > 1) service ftp on a ip-device (SRV) > servicemon.log says : > abstractChecker.py:__init__:104 [Info] New checker instance for x:http > abstractChecker.py:__init__:104 [Info] New checker instance for > x:https > abstractChecker.py:__init__:104 [Info] New checker instance for x:ssh > abstractChecker.py:__init__:104 [Info] New checker instance for y:ssh > db.py:getCheckers:225 [Critical] no such checker: ftp > Unfortunaly the FTP checker has not been tested in a long time. Try this patch to FtpChecker.py: : stain@isbre ~/navme/subsystem/statemon/nav/statemon/checker;svn diff Index: FtpChecker.py =================================================================== --- FtpChecker.py (revision 3231) +++ FtpChecker.py (working copy) @@ -22,8 +22,10 @@ # Authors: Magnus Nordseth <magnun(a)itea.ntnu.no> # -from nav.statemon.abstractChecker import AbstractChecker, Event -import ftplib, Socket +from nav.statemon.abstractChecker import AbstractChecker +from nav.statemon.event import Event +from nav.statemon import Socket +import ftplib class FTP(ftplib.FTP): def __init__(self,timeout,host='',user='',passwd='',acct=''): ftplib.FTP.__init__(self) Please report back if this works as I unfortunately don't have time to check this now.. I think this bug also effects PostgresqlChecker and DummyChecker as they also try to import Event from abstractChecker.py instead of event.py -- Stian S?iland People who enjoy meetings should not Birmingham, UK be in charge of anything. [Sowell] http://soiland.no/ =/\=

1 0

add type - what is this?
by BuleSari＠khio.no 23 Aug '05

23 Aug '05

Hi, I got this when I tried to add new router to the database. Got SNMP response, but can't find type in database. You must add the type <http://nav.admin.khio.no/editdb/type/edit/?sysobjectid=1.3.6.1.4.1.9.1. 50> before proceeding (a new window will open, when the new type is added, press Continue to proceed Add type Typename * Description * Vendor * Sysobjectid * 3com alcatel allied avaya breezecom cisco dlink hp symbol cdp tftp frequency ________________________________ How do i know what types there are? Mvh Bulent Sarinc khio

1 0

SV: [Nav-users] Some problems after upgrade
by Jan.Susegg＠hint.no 23 Aug '05

23 Aug '05

In the GetDeviceData.log file I get a lot of the following messages from all my switches in NAV: getDeviceData UPDATE_DATA-6-UPDATE_NETBOXES No OIDs found for netbox: I used snmpwalk to test snmp connectivity and it works fine. What might the problem be? In the eventEngine-stderr.log I get this error message. What might the problem be? SQLException for update statement: INSERT INTO alertq (alertqid,source,deviceid,netboxid,time,eventtypeid,alerttypeid,state,va lue,severity) VALUES ('8012','getDeviceData','54','21','2005-08-23 10:03:49','info',(SELECT alerttypeid FROM alerttype WHERE eventtypeid='info' AND alerttype='dnsMismatch'),'x','0','0') java.sql.SQLException: ERROR: More than one tuple returned by a subselect used as an expression. PS! I use NAV RC2

1 0

[Nav-users] Python RegEx for segmenting user access to unique devices?
by jsidwell＠perisys.net 22 Aug '05

22 Aug '05

Hello again, I am currently trying to create unique user logons to allow read only access to those devices that individual departments are responsible for monitoring. My problem is that I am not sufficiently clear on how to go about doing this. It seems that you should be able to do this in the "Privileges" section on the group creation page. Is this correct? If not, is there some other way to limit users ability to see all devices? Thank you in advance for any/all help. If possible, could somebody please send an example pytho regex for creating a demo group that can only see objects in the "demo" container?

1 0

SW vs GSW
by bertove＠gmail.com 19 Aug '05

19 Aug '05

Hello, Could someone explain to me how NAV interprets SW and GSW categories. It is not making sense to me. For example, a Cisco Catalyst 6513 has three cards: 1 for switching and 3 for MSFC routing. So I suppose that the first one should be set to SW and the MSFCs to GW. Then, the Catalyst 4006 switches that we use, NAV did not get data when I entered them as SW. It gets all the data when I change them to GSW. However, these 4006 are only doing switching on layer 2. SImilarly for Catalyst 3500 series switches. I could not find anything in the NAV wiki, any information will be appreciated. Thanks!

2 1

vlanPlot - Looks very messy
by kreide＠gmail.com 19 Aug '05

19 Aug '05

> I am in fact logged in as admin in the screenshots, but as you can see > the buttons are not there. I tried again after logging out, same result. > What could it be? I've just looked at the code, and what should happen is that if you are logged in as a valid NAV user the buttons should appear. We have occasionally had some problems with this, however, which could be due to the version of Apache/Tomcat in use as well as the Java VM. I see that you are using Linux; have you tried this on Windows? > Also, I have another little problem which you may want to fix; I went to > the user admin to check if 'admin' has all the privileges. Then I > clicked on "Submit Changes" without providing a new password. But now > the old password does not work!! Leaving the password blank doesn't work > either. It's like being locked out. Can you tell me the database command > to reset the password? This seems like an unfortunate oversight. and should be fixed. Morten? In the mean time you could connect to the navprofiles database and try something like this: UPDATE account SET password='md5'||md5('password') WHERE login='login' Also, please CC the nav-users list when you reply (unless you are including sensitive info you don't want archived). -- Kristian

2 1

[Nav-users]
by kreide＠gmail.com 19 Aug '05

19 Aug '05

> Here is the SNMPwalk output for the OID: And what ports do you get listed if you go to the swport report? And what is the output from snmpwalk of 1.3.6.1.2.1.2.2.1.5? There might be an issue of some ports being listed, but the OID for the octet counts not existing, which confuses Cricket. -- Kristian

1 0