hymie's questions

I have this construct in my puppet module to add a line in /etc/sudoers after the last "Defaults" line:

  augeas { "sudoers.ssh_auth_sock" :
    lens => "Sudoers.lns",
    incl => "/etc/sudoers",
    onlyif  => "match Defaults/env_keep/var[. = 'SSH_AUTH_SOCK'] size==0",
    changes => [
       # Create a new Defaults line for the two variables
       "ins Defaults after Defaults[last()]",
       # Make this Defaults line a += type
       "clear Defaults[last()]/env_keep/append",
       # assign values to the two variables
       "set Defaults[last()]/env_keep/var[1] SSH_AUTH_SOCK",
    ],
  }

It works perfectly on my RedHat 6 machines

Notice: Augeas[sudoers.ssh_auth_sock](provider=augeas):
--- /etc/sudoers        2021-10-12 13:30:52.880901115 +0000
+++ /etc/sudoers.augnew 2021-10-12 13:31:28.697931561 +0000
@@ -77,6 +77,7 @@
 # Defaults   env_keep += "HOME"

 Defaults    secure_path = /sbin:/bin:/usr/sbin:/usr/bin
+Defaults env_keep += SSH_AUTH_SOCK

 ## Next comes the main part: which users can run what software on

Notice: /Stage[main]/Sudoers/Augeas[sudoers.ssh_auth_sock]/returns: executed successfully

But it fails on my RedHat 7 machines:

Warning: Augeas[sudoers.ssh_auth_sock](provider=augeas): Loading failed for one or more files, see debug for /augeas//error output
Error: /Stage[main]/Sudoers/Augeas[sudoers.ssh_auth_sock]: Could not evaluate: Error sending command 'ins' with params ["Defaults", "after", "/files/etc/sudoers/Defaults[last()]"]/Error sending command 'ins' with params ["Defaults", "after", "/files/etc/sudoers/Defaults[last()]"]

Can somebody help me understand what changed, or what I did wrong, so that I can get this snippet to work in both environments?

I've just installed netdata for testing as a replacement (or augment) for nagios. I have it installed on one machine and it's great.

However, I'm trying to install netdata on a second machine ("cougar"), with the intent of using the first machine ("rolls-royce") as my sole dashboard/viewing host.

I believe I have followed the directions correctly from https://docs.netdata.cloud/streaming/ for setting up a "headless collector", where "cougar" is my "slave" instance and "rolls-royce" is my "master" instance.

Update: I also figured out that I need to have my own "registry"

cougar netdata.conf

 [global]
     memory mode = none

 [web]
     mode = none

[registry]
    # enabled = no
    registry to announce = http://rolls-royce:19999

cougar stream.conf

[stream]
    enabled = yes
    destination = rolls-royce:19999
    api key = 9447dae1-0830-4edd-9e70-1cd125844b65
    timeout seconds = 60
    default port = 19999

rolls-royce netdata.conf

[registry]
    enabled = yes
    registry to announce = http://rolls-royce:19999

rolls-royce stream.conf

[stream]
    enabled = no


[9447dae1-0830-4edd-9e70-1cd125844b65]
    enabled = yes
    allow from = *
    default history = 3600
    default memory mode = save
    health enabled by default = auto
    multiple connections = allow

And I think I see data being collected in the logs, and cache files being created.

However, I cannot figure out how to view my "cougar" data from my "rolls-royce" dashboard.

The documentation refers to a "my-netdata" menu. I don't have a "my-netdata" menu. I have a menu entitled "rolls-royce", with only a single entry for "rolls-royce http://rolls-royce:19999/" but no entry for "cougar".

Can anybody help me figure out what I am missing?

So for years we've been using the idracadm7 command to manage a couple of DRAC account passwords (for example, sam):

INDEX=`idracadm7 -r dracIP -u root -p rootpasswd getconfig -u sam | grep Index | cut -d= -f2`
idracadm7 -r dracIP -u root -p rootpassword config -i $INDEX -g cfgUserAdmin -o cfgUserAdminPassword sampassword

And it works, but I get these warnings:

RAC1168: The RACADM "getconfig" command will be deprecated in a
future version of iDRAC firmware. Run the RACADM
"racadm get" command to retrieve the iDRAC configuration parameters.
For more information on the get command, run the RACADM command
"racadm help get".

RAC1169: The RACADM "config" command will be deprecated in a
future version of iDRAC firmware. Run the RACADM
"racadm set" command to configure the iDRAC configuration parameters.
For more information on the set command, run the RACADM command
"racadm help set".

So I'm trying to figure out how to use the get subcommand to replace the getconfig subcommand. And while I can see how to find a user by index number

idracadm7 -r dracIP -u root -p rootpassword get iDRAC.Users.3.UserName | grep UserName=
UserName=sam

I cannot find any way to find the index number of the user named sam like I can with the getconfig -u command.

Am I missing it somewhere?

I'm installing Dell OpenManage Essentials on my new computer. Everything worked correctly on my old computer -- 16 servers, inventoried, with health status, server tags, model numbers, etc.

On my new computer, I can see the 16 servers, but they are all listed as "Unclassified" and unknown health status.

My old computer was Windows 7 and my new computer is Windows 10. Other than that, I can't find any major differences between the two computers. I have the same IP address as before with the same SSH tunnels; I can connect to port 443 on all of the servers; Windows Firewall appears to be set up the same (although I haven't checked it line by line). I don't think it's a network problem because I'm having the issue across multiple servers on multiple networks. My co-worker can still see all of the servers and all of their statuses.

If anybody can give me a suggestion as to how I can troubleshoot further, I would appreciate it.

BackupPC has two configuration variables:

$Conf{PingPath} = '/bin/ping';
Full path to the ping command.

$Conf{PingCmd} = '$pingPath -c 1 $host';
Ping command. The following variables are substituted at run-time:
  $pingPath      path to ping ($Conf{PingPath})
  $host          host name

I'm just trying to understand why there are two separate variables. That is, what benefit does this setup provide as opposed to just a single variable

$Conf{PingCmd} = '/bin/ping -c 1 $host';

I was in the middle of an amanda backup, and after about 60GB, it exited with this error:

  localhost /home lev 0  FAILED [data write: Connection reset by peer]
  localhost /home lev 0  partial taper: No space left on device: No space left on device
  localhost /home lev 0  FAILED [data write: Connection reset by peer]
  localhost /home lev 0  partial taper: No space left on device: No space left on device

But it doesn't tell me which device. And I can't find any device that is full.

My backup ended after 60GB

-rw------- 1 amanda backup 36616372224 2016-11-02 23:42 00001.localhost._home.0
-rw------- 1 amanda backup 22800531456 2016-11-03 00:03 00002.localhost._home.0

My amanda.conf says

tapetype "HARD-DISK"
define tapetype HARD-DISK {
    comment "Dump onto hard disk"
    length 150 gbytes
}

My backup drive has space

Filesystem            Size  Used Avail Use% Mounted on
/dev/sdc1             2.7T  2.3T  277G  90% /storage

The disk being backed up has space

Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/HermanGroup-Home
                       74G   57G   14G  81% /home

But now everything I try to do with amanda fails:

FAILURE DUMP SUMMARY:
  newlaptop.local.net /home lev 9  FAILED [too many taper retries]
  newlaptop.local.net /home lev 9  partial taper: No space left on device: No space left on device
  newlaptop.local.net /home lev 9  partial taper: No space left on device: No space left on device

How do I find out what happened?

UPDATE:

(in response to suggestion)

$ df -i
Filesystem            Inodes   IUsed   IFree IUse% Mounted on
/dev/root             262944   25713  237231   10% /
/dev/mapper/HermanGroup-Usr
                      655360  282687  372673   44% /usr
/dev/mapper/HermanGroup-Tmp
                      262144    2595  259549    1% /tmp
tmpfs                 219740       1  219739    1% /dev/shm
/dev/sdc1            183148544   28045 183120499    1% /storage
/dev/mapper/HermanGroup-Herman
                     3276800  298420 2978380   10% /herman
/dev/mapper/HermanGroup-Mysql
                      131072     191  130881    1% /var/lib/mysql
/dev/mapper/HermanGroup-UsrX11
                      393216   68534  324682   18% /usr/X11
/dev/mapper/HermanGroup-Home
                     4915200 1148476 3766724   24% /home
/dev/mapper/HermanGroup-WinGCC
                       65536    3536   62000    6% /usr/local/wingcc
/dev/mapper/HermanGroup-AmandaHolding
                      720896      11  720885    1% /storage/amanda/holding
192.168.42.10:/var/spool/mail
                      655360      17  655343    1% /var/spool/mail

(I suspect the answer is "No", but I'll ask anyway.)

I have puppet installed on my systems, and puppet runs every half hour. Nagios is checking those puppet logs, also running every half hour, and returns something like this:

OK: Puppet agent "2.7.26" running catalogversion 1474549502, and last executed at Fri 23 Sep 2016 18:04:17 GMT

The problem is, if puppet checks this service at (let's say) 18:25, and returns the above response, then I won't see any reference to the expected 18:34 puppet run until nagios checks again at 18:55.

I would really like it if nagios could look at the status info, see that this machine ran puppet at 18:04, and reschedule its next check to occur, say, five minutes after the expected next-run.

Is there a way to accomplish this?

I have a secure network firewalled from the Internet. I have about 25 linux machines running Symantec Endpoint Protection on this network, connected by a small (2Mb/s) link to my company's "central" network that includes a Symantec Endpoint Protection Manager.

On a day-to-day basis, we use Symantec LiveUpdate to update the virus definitions on those machines. This works well; it takes about 4 minutes per machine.

However, when a new version of SEP is released, or when I create/install a new machine, the machine(s) will contact my SEP Mgr and download a fresh full set of virus definitions. This takes about 25 minutes, and I would rather it didn't.

So I'm trying to find out if there is a file or a set of files that I can download once to a machine on my private network, and have my new machines download the full virus definitions from there, and then begin using the SEP Mgr for the daily updates.

The only thing I have found so far is the Symantec "Intelligent Update" https://www.symantec.com/security_response/definitions/download/detail.jsp?gid=sep . Intelligent Update will let me store the full virus definition locally, but it is not compatible with LiveUpdate. That is, you cannot follow an Intelligent Update with a LiveUpdate. You can only follow Intelligent Update with another (full) Intelligent Update, or replace it completely with a fresh full LiveUpdate.

Is it possible to do what I want?

So I have a weird problem that I'm running out of ideas to troubleshoot.

My RedHat machines are using audisp-remote to send syslog messages to a central server. audisp-remote will respond to the USR1 signal by dumping a line of status info into /var/log/messages, like this:

$ sudo kill -USR1 `pidof audisp-remote`

Oct 16 13:17:19 hostname audisp-remote: suspend=no, transport_ok=yes, queue_size=0

This works great on all of my machines except one. On this one machine, I get this:

$ sudo kill -USR1 `pidof audisp-remote`

Oct 16 13:22:20 hostname audisp-remote: read from server.fq.dn failed

Oct 16 13:22:20 hostname audisp-remote: Error connecting to server.fq.dn: Cannot assign requested address

But on the other hand, if I do this:

$ sudo su
# kill -USR1 `pidof audisp-remote`

Then it works correctly

Oct 16 13:25:29 hostname audisp-remote: suspend=no, transport_ok=yes, queue_size=0

I can't figure out why the problem only affects this one machine -- the only reason I can think of is that this machine is on a remote network in a remote location -- but that doesn't explain why it works as root but not under sudo .