=================================================================== RCS file: /cvs/nagios/check_openbgpd/README,v retrieving revision 1.1 retrieving revision 1.5 diff -u -r1.1 -r1.5 --- nagios/check_openbgpd/README 2009/11/13 17:55:47 1.1 +++ nagios/check_openbgpd/README 2021/01/31 21:07:26 1.5 @@ -1,21 +1,18 @@ check_openbgpd - checks status of OpenBGPd peers -The only real caveat with it is that bgpctl needs rw permission to -/var/run/bgpd.sock. One way to allow for that is by adding an entry to -/etc/sudoers and then making the check run sudo check_openbgpd. +check_openbgpd needs access to run "bgpctl show", this can be accomplished +with a restricted socket set up for bgpd(8). -This is an example of a setup for NRPE. For checks on the machine running -Nagios, use the _nagios user in /etc/sudoers instead of _nrpe, and of course, -no ${SYSCONFDIR}/nrpe.cfg. - -/etc/sudoers: -_nrpe ALL=NOPASSWD:${PREFIX}/libexec/nagios/check_openbgpd -w 1000\:300000 -c 100\:500000 -n peer1 peer2 peer3 - +/etc/bgpd.conf: +socket "/var/run/rbgpd.sock" restricted + + For more information on bgpd(8) see the OpenBSD man page. + ${SYSCONFDIR}/nrpe.cfg: -command[check_openbgpd]=/usr/bin/sudo ${PREFIX}/libexec/nagios/check_openbgpd -w 1000:300000 -c 100:500000 -n peer1 peer2 peer3 +command[check_openbgpd]=/usr/local/libexec/nagios/check_openbgpd -s /var/run/rbgpd.sock -w 1000:300000 -c 100:500000 -n peer1 peer2 peer3 For more information on bgpd(8) see the OpenBSD man page. http://www.openbsd.org -$RedRiver$ +$AFresh1: README,v 1.4 2015/03/25 02:23:07 andrew Exp $