[Freeipa-users] Monitoring FreeIPA with SNMP

[Dimitar Georgievski]

Problem resolved. I completely forgot to check the access privileges in
/etc/snmp/snmpd.conf. By default NET-SNMP configures the agent to provide
access to .iso.org.dod.internet.mgmt. sub-tree only.
The redhat sub-tree is under .iso.org.dod.internet.private.enterprises. I
had to add a view on this three and the appropriate security privileges to
access the new community.

The sub-tree could be traversed now with:
*snmpwalk -v 2c  -c mycommunity -mALL   localhost  rhds*

> RHDS-MIB::dsAnonymousBinds.389 = Counter64: 1187
> RHDS-MIB::dsUnAuthBinds.389 = Counter64: 1187
> RHDS-MIB::dsSimpleAuthBinds.389 = Counter64: 1213
> RHDS-MIB::dsStrongAuthBinds.389 = Counter64: 227103
> RHDS-MIB::dsBindSecurityErrors.389 = Counter64: 5
> RHDS-MIB::dsInOps.389 = Counter64: 6590347
> RHDS-MIB::dsReadOps.389 = Counter64: 0
> RHDS-MIB::dsCompareOps.389 = Counter64: 6
> RHDS-MIB::dsAddEntryOps.389 = Counter64: 17
> RHDS-MIB::dsRemoveEntryOps.389 = Counter64: 203
> RHDS-MIB::dsModifyEntryOps.389 = Counter64: 70101
> RHDS-MIB::dsModifyRDNOps.389 = Counter64: 0
> RHDS-MIB::dsListOps.389 = Counter64: 0
> RHDS-MIB::dsSearchOps.389 = Counter64: 5959375
> RHDS-MIB::dsOneLevelSearchOps.389 = Counter64: 39
> RHDS-MIB::dsWholeSubtreeSearchOps.389 = Counter64: 5342418
> RHDS-MIB::dsReferrals.389 = Counter64: 0
> RHDS-MIB::dsChainings.389 = Counter64: 0
> RHDS-MIB::dsSecurityErrors.389 = Counter64: 7
> RHDS-MIB::dsErrors.389 = Counter64: 240831
> RHDS-MIB::dsMasterEntries.389 = Counter64: 0
> RHDS-MIB::dsCopyEntries.389 = Counter64: 0
> RHDS-MIB::dsCacheEntries.389 = Counter64: 0
> RHDS-MIB::dsCacheHits.389 = Counter64: 0
> RHDS-MIB::dsSlaveHits.389 = Counter64: 0
> RHDS-MIB::dsEntityDescr.389 = STRING:
> RHDS-MIB::dsEntityVers.389 = STRING: 389-Directory/1.2.11.15
> RHDS-MIB::dsEntityOrg.389 = STRING:
> RHDS-MIB::dsEntityLocation.389 = STRING:
> RHDS-MIB::dsEntityContact.389 = STRING:
> RHDS-MIB::dsEntityName.389 = STRING:




On Tue, Aug 26, 2014 at 12:43 PM, Dimitar Georgievski <mitkany at gmail.com>
wrote:

>
> I have successfully enabled SNMP monitoring of FreeIPA server following
> the instructions available at RedHat's portal:
>
> https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Monitoring_DS_Using_SNMP.html
>
> The problem is I cannot retrieve any metrics from the monitored server:
>
> Examples:
> Try to walk the whole rhds sub-tree
>
>> snmpwalk -v 2c  -c public -mALL   localhost rhds
>> RHDS-MIB::rhds = No more variables left in this MIB View (It is past the
>> end of the MIB tree)
>
>
> I was expecting the redhat sub-tree would be instantiated under
> private/enterprises(2312)
>
>
> Judging from the snmpwalk output the RHDS sub-tree is missing in the MIB
> view.  My understanding is that beside configuring the SNMP agents for
> monitoring I don't need to configure the LDAP/FreeIPA server for
> monitoring,
> Is there anything else I need to configure, that is maybe not mentioned in
> the documentation?
>
> We are using
> - FreeIPA -3.0.0
> - CentOS release 6.5 x86_64
> - NET-SNMP version 5.5
>
> dirsrv-snmp agent configuration
>  /etc/dirsrv/config/ldap-agent.conf
>
>>   agentx-master /var/agentx/master
>>   agent-logdir /var/log/dirsrv
>>   server slapd-EXAMPLE-COM
>
>
> and log output
>
>> 2014-08-26 10:58:48 Starting ldap-agent...
>> 2014-08-26 10:58:48 Started ldap-agent as pid 27008
>
>
> snmpd AgentX log output
>
>> Aug 26 10:43:48 106 snmpd[26607]: Turning on AgentX master support.
>> Aug 26 10:43:48 106 snmpd[26609]: NET-SNMP version 5.5
>
>
>  Thanks
>
> Dimitar
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140826/5406afaa/attachment.htm>