=================================================================== RCS file: /cvs/nagios/check_openbgpd/README,v retrieving revision 1.2 retrieving revision 1.3 diff -u -r1.2 -r1.3 --- nagios/check_openbgpd/README 2009/11/19 18:25:58 1.2 +++ nagios/check_openbgpd/README 2009/11/19 21:43:51 1.3 @@ -1,21 +1,16 @@ check_openbgpd - checks status of OpenBGPd peers -The only real caveat is that bgpctl needs rw permission to /var/run/bgpd.sock. -One way to allow for that is by adding an entry to /etc/sudoers and then -making the check run sudo check_openbgpd. +check_openbgpd needs access to run "bgpctl show", this can be accomplished +with a restricted socket set up for bgpd(8). -This is an example of a setup for NRPE. For checks on the machine running -Nagios, use the _nagios user in /etc/sudoers instead of _nrpe, and of course, -no ${SYSCONFDIR}/nrpe.cfg. +/etc/rc.conf.local: +bgpd_flags="-r /var/www/logs/bgpd.rsock" -/etc/sudoers: -_nrpe ALL=NOPASSWD:${PREFIX}/libexec/nagios/check_openbgpd -w 1000\:300000 -c 100\:500000 -n peer1 peer2 peer3 - ${SYSCONFDIR}/nrpe.cfg: -command[check_openbgpd]=/usr/bin/sudo ${PREFIX}/libexec/nagios/check_openbgpd -w 1000:300000 -c 100:500000 -n peer1 peer2 peer3 +command[check_openbgpd]=${PREFIX}/libexec/nagios/check_openbgpd -s /var/www/logs/bgpd.rsock -w 1000:300000 -c 100:500000 -n peer1 peer2 peer3 For more information on bgpd(8) see the OpenBSD man page. http://www.openbsd.org -$RedRiver: README,v 1.1 2009/11/13 17:55:47 andrew Exp $ +$RedRiver: README,v 1.2 2009/11/19 18:25:58 andrew Exp $