magad Trainee

  • Member since Jun 8th 2017
  • Last Activity:
Posts
24
Points
160
Profile Hits
26
  • magad

    Post
    Sorry for the delay, the issue is still there. I just tried a simple setup. Master --> Satellite --> Client without any SSH tunnels involved. Still the checks are executed on the satellite and not on the client. To further investigate this issue, I…
  • Of course I have read the documentation, but I am not 100% if I understood the differences correctly.

    TDCE:

    Parent triggers command execution on it's children as defined by the zone-file. The child needs to know about the CheckCommand object definitions.…
  • magad

    Post
    Thank you Michi, I have to move on for now, but will investigate further tomorrow and post the results here.
  • magad

    Post
    checks ARE executed on the satellite and not on the clients. Processes, Disc Usage etc. equal to the satellite although show within the client in the web API
  • magad

    Post
    I actually don't know, might be. Even when I specify a host by IP address (and not via SSH Tunnel), the checks are executed locally on the satellite and not forwarded to the client. I did what was explained here
  • magad

    Thread
    Since my clients are behind a firewall, I have to go through an exisiting SSH tunnel to connect to the clients. I am synching the clients' config from master to satellite, which should then execute it on the clients. On the web API of the master,…
  • magad

    Post
    Forget about it, I am an Idiot. I forgot to put the ".conf" extension to the client config files... Hard to debug :()
  • magad

    Thread
    I have a Master in our local office, a Webserver Satellite in the Internet and a Client in our Clients network behind a firewall. I use the top-down approach. The config is A) pushed the from master to the satellite and B) should then be executed on the…
  • magad

    Replied to the thread Connect to Client Via SSH Tunnel.
    Post
    Thank you so much for taking time. I will try the satellite setup then. Will the satellite then be able to forward all the information to the master and forward checks/configs from the master to the leafs . If that's true, an intermediate node (without…
  • magad

    Replied to the thread Connect to Client Via SSH Tunnel.
    Post
    Good Morning, no the Server is just a relay node that is used to punch holes into the firewall since both sides prohibit incoming connections. (On that server, Icinga is running, too, but not used as an intermediate node. We use different Ports for the…
  • magad

    Replied to the thread Connect to Client Via SSH Tunnel.
    Post
    It turns out that the connection works when I answer "Do you want to establish a connection to the master from this node? [Y/n]:" with Y. But I want to answer this with no since I only want to push the configs/checks from master to client. I don't want…
  • magad

    Thread
    Good Morning,

    I want to monitor a client node that's behind a firewall. For the purpose, we make it's Icinga port available on some Server via a Reverse SSH Tunnel:

    (Code, 1 line)


    So for the initial negotiation I created some extra rules that make PKI…