Hi!
I neither use SELinux nor AppArmor.
STrace output (pasting the relevant lines only):
# strace -p `pidof nsca` -o /tmp/nsca.trc
...
sendto(3, "<27>Mar 28 13:07:16 nsca[29721]:"..., 94, MSG_NOSIGNAL, NULL, 0)
= 94
sendto(3, "<29>Mar 28 13:07:16 nsca[29721]:"..., 176, MSG_NOSIGNAL, NULL,
0) = 176
sendto(3, "<27>Mar 28 13:07:16 nsca[29721]:"..., 75, MSG_NOSIGNAL, NULL, 0)
= 75
stat("/var/run/icinga/icinga.cmd", {st_mode=S_IFIFO|0660, st_size=0, ...})
= 0
open("/var/run/icinga/icinga.cmd", O_WRONLY|O_CREAT|O_TRUNC, 0666) = -1
EACCES (Permission denied)
sendto(3, "<27>Mar 28 13:07:16 nsca[29721]:"..., 101, MSG_NOSIGNAL, NULL,
0) = 101
poll([{fd=4, events=POLLIN}, {fd=5, events=POLLIN}], 2, -1) = 1 ([{fd=5,
revents=POLLIN}])
recvfrom(5, "", 4304, 0, NULL, NULL) = 0
sendto(3, "<27>Mar 28 13:07:16 nsca[29721]:"..., 53, MSG_NOSIGNAL, NULL, 0)
= 53
munlock(0x611600, 8) = 0
munlock(0x60fad0, 6272) = 0
munlock(0x60f210, 24) = 0
close(5) = 0
...
On Thu, Mar 27, 2014 at 3:10 PM, Brian O'Neill <one...@oinc.net> wrote:
> First thought is that you might have something like SELinux or apparmor
> (not sure what SLES uses) that needs to allow permission beyond the file
> permissions.
>
>
>
> On 3/27/2014 9:22 AM, Ferenc Stelcz wrote:
>
>> Hi!
>>
>> I've just upgraded my DRBD backed 2 node Icinga pacemaker cluster on
>> SLES11SP3 to the most recent Icinga version.
>>
>> I have a third node which is (was... :P) sending passive service check
>> results from a remote site. After the upgrade I get the following in
>> /var/log/messages:
>>
>> Mar 27 14:11:21 icingacl-nodea nsca[5701]: SERVICE CHECK -> Host Name:
>> 'test_host', Service Description: 'Current Load NRPE', Return Code: '0',
>> Output: 'OK - load average: 0.24, 0.17, 0.15|load1=0.240;5.000;10.000;0;
>> load5=0.170;4.000;6.000;0; load15=0.150;3.000;4.000;0;'
>> Mar 27 14:11:21 icingacl-nodea nsca[5701]: Attempting to write to nagios
>> command pipe
>> Mar 27 14:11:21 icingacl-nodea nsca[5701]: Could not open command file
>> '/var/run/icinga/icinga.cmd' for writing
>> Mar 27 14:11:21 icingacl-nodea nsca[5701]: End of connection...
>>
>> NSCA on the cluster is running as icinga.icingacmd
>>
>> Permissions of /var/run/icinga/icinga.cmd are OK. rw-rw-rw, owned by
>> icinga.icingacmd
>>
>> I've tried to change the location of icinga.cmd to /tmp/icinga.cmd,
>> restarted everything, rebooted both nodes, still the same.
>>
>> The command pipe can be written by any user at any time as far as I can
>> tell:
>>
>> su - user
>> echo "TEST" >/var/run/icinga/icinga.cmd
>>
>> tail /var/log/messages:
>> Mar 27 14:16:37 icingacl-nodea icinga: External command error: Malformed
>> command
>>
>> Which is the expected behavior.
>>
>> Tried running nsca as root, still the same.
>>
>> lsof | grep icinga.cmd
>> icinga 5626 icinga 7u FIFO 8,6 0t0
>> 23 /var/run/icinga/icinga.cmd
>>
>> Does anyone have any clue how to go further or any solution?
>>
>> Thank you in advance,
>>
>> Ferenc STELCZ
>>
>>
>> _______________________________________________
>> icinga-users mailing list
>> icinga-users@lists.icinga.org
>> https://lists.icinga.org/mailman/listinfo/icinga-users
>>
>> _______________________________________________
> icinga-users mailing list
> icinga-users@lists.icinga.org
> https://lists.icinga.org/mailman/listinfo/icinga-users
>
_______________________________________________
icinga-users mailing list
icinga-users@lists.icinga.org
https://lists.icinga.org/mailman/listinfo/icinga-users
