Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-25 Thread Miguel C.
Sorry I should have mentioned he did this with ezjails. I have a FreeBSD 9.1 at home with ezjails but I can only test this tomorrow. Valeri Galtsev wrote: >Mine was FreeBSD 9.1, amd64, and "per jail" config didn't work for me. >I >configure jails in /etc/rc.conf and start them on boot by ena

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-24 Thread Valeri Galtsev
Mine was FreeBSD 9.1, amd64, and "per jail" config didn't work for me. I configure jails in /etc/rc.conf and start them on boot by enabling them in /etc/rc.conf (jail_enable="YES"), or start, stop, restart using /etc/rc.d/jail [start|stop|restart] For those who didn't see previous discussion, it

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-24 Thread Mike C.
This host is Freebsd 8, and the config "per" jail doesn't work! However, I friend of mine confirmed me it does work on FreeBSD 9 hosts! -- Melhores Cumprimentos // Best Regards Miguel Clara *nix Sys Admin Freelance http:

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Mike C.
On 08/23/13 17:27, Valeri Galtsev wrote: > > On Fri, August 23, 2013 1:13 pm, Mike C. wrote: >> On 08/23/13 16:35, Valeri Galtsev wrote: >>> >>> On Fri, August 23, 2013 11:31 am, Josh Beard wrote: On Fri, Aug 23, 2013 at 10:41 AM, Mike C. wrote: > > On 08/23/13 16:34, Mike

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Valeri Galtsev
On Fri, August 23, 2013 1:13 pm, Mike C. wrote: > On 08/23/13 16:35, Valeri Galtsev wrote: >> >> On Fri, August 23, 2013 11:31 am, Josh Beard wrote: >>> On Fri, Aug 23, 2013 at 10:41 AM, Mike C. >>> wrote: >>> On 08/23/13 16:34, Mike C. wrote: > Yes I know about > >> securit

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Mike C.
On 08/23/13 16:35, Valeri Galtsev wrote: > > On Fri, August 23, 2013 11:31 am, Josh Beard wrote: >> On Fri, Aug 23, 2013 at 10:41 AM, Mike C. wrote: >> >>> >>> On 08/23/13 16:34, Mike C. wrote: Yes I know about > security.jail.allow_raw_sockets=1 Like I said I can do this

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Valeri Galtsev
On Fri, August 23, 2013 11:31 am, Josh Beard wrote: > On Fri, Aug 23, 2013 at 10:41 AM, Mike C. wrote: > >> >> On 08/23/13 16:34, Mike C. wrote: >> > Yes I know about >> > >> >> security.jail.allow_raw_sockets=1 >> > >> > Like I said I can do this with "root" just not with the user nagios, I >> g

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Josh Beard
On Fri, Aug 23, 2013 at 10:41 AM, Mike C. wrote: > > On 08/23/13 16:34, Mike C. wrote: > > Yes I know about > > > >> security.jail.allow_raw_sockets=1 > > > > Like I said I can do this with "root" just not with the user nagios, I > guess If raw_sockets was set to 0 on the host, I would have probl

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Mike C.
On 08/23/13 16:34, Mike C. wrote: > Yes I know about > >> security.jail.allow_raw_sockets=1 > > Like I said I can do this with "root" just not with the user nagios, I guess > If raw_sockets was set to 0 on the host, I would have problems with any user! > > > > > Putting this in /etc/rc.

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Mike C.
Yes I know about > security.jail.allow_raw_sockets=1 Like I said I can do this with "root" just not with the user nagios, I guess If raw_sockets was set to 0 on the host, I would have problems with any user! Putting this in /etc/rc.conf: jail_${JailName}_parameters="allow.raw_sockets=1"

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Scott Lambert
On Fri, Aug 23, 2013 at 09:35:43AM -0500, Valeri Galtsev wrote: > To the best of my knowledge, raw sockets are not allowed inside jail by > default. This might be your problem (as far as I know how nagios works). > > To allow raw sockets you can do > > sysctl security.jail.allow_raw_sockets=1 >

Re: connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Valeri Galtsev
To the best of my knowledge, raw sockets are not allowed inside jail by default. This might be your problem (as far as I know how nagios works). To allow raw sockets you can do sysctl security.jail.allow_raw_sockets=1 then you need to restart at least the jail inside which your nagios instance l

connect -1 errno 1 Operation not permitted with specific user (nagios)

2013-08-23 Thread Mike C.
I'm having a problem with nagios under a jail... commands works has root and another normal user I created (its not even in the wheel group) running commands such has "check_http" get me a Operation not permited, with ktrace I was able to confirm the probelm: connect -1 errno 1 Operation not perm