Cacti 1.2.6 - Permissions English/German

Post support questions that directly relate to Linux/Unix operating systems.

Moderators: Moderators, Developers

Post Reply
Author
Message
FiSiGer
Posts: 3
Joined: Fri Dec 13, 2019 3:59 am

Cacti 1.2.6 - Permissions English/German

#1 Post by FiSiGer » Fri Dec 13, 2019 5:32 am

German version below. Thanks for your help!
Deutsche Version unten angehängt. Danke für eure Hilfe!


English:

Hello guys,

I have a problem with my cacti installation on my CentOS 8 machine.
It is a virtual machine on a proxmox host. (both firewalls are complety diabled for testing)

The problem is, that it is not possible for spine to create the RRDs for other systems.
I think it is a permission problem to create the RRDs in the rra-folder?
1.PNG
1.PNG (22.05 KiB) Viewed 142 times
3.PNG
3.PNG (21.24 KiB) Viewed 142 times

The problem I don't get why it's working for the local machine?
2.PNG
2.PNG (476.73 KiB) Viewed 142 times

I installed cacti and spine both as packages from repository links.
The systems that I want to pull are perfect accessible with ping and SNMP from cacti and the system itself.
4.PNG
4.PNG (5.79 KiB) Viewed 142 times
In the moment I'm stucking on this problem, I tried to give the apache user the rights, but it didn't work.
5.PNG
5.PNG (60.88 KiB) Viewed 142 times
Thanks for your help!

Best regards
Johannes


---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------


German:

Hallo Leute,

Ich habe ein Problem mit meiner Cacti Installation auf meinem CentOS 8 System.
Es handelt sich dabei um eine virtuelle Maschine, die auf einem Proxmox Host läuft. (Zum Testen wurden auf beiden Systemen die Firewalls abgeschaltet)

Das Problem ist, dass es für Cacti nicht möglich ist für andere Systeme die RRDs und Grafiken zuerstellen.
Ich denke es handelt sich hier um ein Rechteproblem für das Erstellen von RRDs im rra-Ordner?
1.PNG
1.PNG (22.05 KiB) Viewed 142 times
3.PNG
3.PNG (21.24 KiB) Viewed 142 times

Was ich aber nicht verstehe ist, das Spine problemlos mit der lokalen Maschine funktioniert?
2.PNG
2.PNG (476.73 KiB) Viewed 142 times
Ich habe Spine und Cacti beide als Pakete mittels Repositorys installiert.
Das System was ich erreichen möchte, kann problemlos per ping und SNMP von cacti oder System erreicht werden.
4.PNG
4.PNG (5.79 KiB) Viewed 142 times
Im Moment bin ich bei diesem Problem gefangen. Ich habe versucht dem apache-user die nötigen Rechte zugeben, aber das hat nicht funktioniert.
5.PNG
5.PNG (60.88 KiB) Viewed 142 times
Vielen Dank für Eure Hilfe!

Beste Grüße
Johannes

cigamit
Developer
Posts: 2831
Joined: Thu Apr 07, 2005 3:29 pm
Location: B/CS Texas
Contact:

Re: Cacti 1.2.6 - Permissions English/German

#2 Post by cigamit » Fri Dec 13, 2019 9:38 am

You might try to run it through the Data Source troubleshooter first. Its pretty good at catching exactly what is wrong.
Screenshot_6.jpg
Screenshot_6.jpg (12.01 KiB) Viewed 134 times

FiSiGer
Posts: 3
Joined: Fri Dec 13, 2019 3:59 am

Re: Cacti 1.2.6 - Permissions English/German

#3 Post by FiSiGer » Fri Dec 13, 2019 11:43 am

Hey cigamit,

thanks for the fast reply!

This are the results of the troubleshooting:
6.PNG
6.PNG (82.21 KiB) Viewed 133 times
The issues in detail shows this:
Total Poller Items:
15.PNG
15.PNG (27.63 KiB) Viewed 133 times
Thold Runtime:
8.PNG
8.PNG (24.69 KiB) Viewed 133 times
User Stats:
9.PNG
9.PNG (33.61 KiB) Viewed 133 times


The functioning local machine shows this:
11.PNG
11.PNG (23.06 KiB) Viewed 133 times


Do you know what I have to add to fix the issues?

Thanks & best regards!

Johannes

netniV
Cacti Guru User
Posts: 3132
Joined: Sun Aug 27, 2017 12:05 am

Re: Cacti 1.2.6 - Permissions English/German

#4 Post by netniV » Fri Dec 13, 2019 6:10 pm

I would say that it sounds like you don't have a cron job to run the poller.

cigamit
Developer
Posts: 2831
Joined: Thu Apr 07, 2005 3:29 pm
Location: B/CS Texas
Contact:

Re: Cacti 1.2.6 - Permissions English/German

#5 Post by cigamit » Sat Dec 14, 2019 12:29 am

The log shows that the poller is running, so your cron is fine.
The Troubleshooter shows that the poller is able to write to the rra folders, so its not permissions. It might be an SELINUX issue though, so try temporarily disabling that if its not already.
It seems that you are trying to use the Cacti Stats template, you might want to try using something else (any of the host mib ones should do).
You can also change the logging mode to MEDIUM to see what results you are actually getting back from the devices.

The warning "failing back to udp ping due to setuid issues" may be the real culprit though. Kinda wierd since the poller runs as root. Can you do a "ls -al" on your spine binary.
Are the devices show as down? If that ping is failing, depending on device down settings, it will not try to poll the device.

netniV
Cacti Guru User
Posts: 3132
Joined: Sun Aug 27, 2017 12:05 am

Re: Cacti 1.2.6 - Permissions English/German

#6 Post by netniV » Mon Dec 16, 2019 9:29 am

I think cigamit is right, try a different graph. Or are you problems only with these special Cacti Stats graph templates?

FiSiGer
Posts: 3
Joined: Fri Dec 13, 2019 3:59 am

Re: Cacti 1.2.6 - Permissions English/German

#7 Post by FiSiGer » Wed Dec 18, 2019 9:55 am

Hello netniV, hello cigamit,

SELINUX is disabled from the beginning, so it can't be the issue. But thanks for the advice!
I think it isn't a graph problem, because I tried it with a few different graph templates, but none of them worked.
Even graph templates didn't work, which we using in our current productive cacti machine.

CPU-Avaya: (running perfect in our machine)
18.PNG
18.PNG (24.14 KiB) Viewed 88 times

NET-SNMP:
19.PNG
19.PNG (24.78 KiB) Viewed 88 times

Here is a screenshot of /bin/spine:
20.PNG
20.PNG (7.68 KiB) Viewed 88 times

The thing is that the spine poller works complete fine for the Local-Linux-Machine and every ICMP-Ping and SNMP request works perfect from the machine and cacti.

Best regards
Johannes

netniV
Cacti Guru User
Posts: 3132
Joined: Sun Aug 27, 2017 12:05 am

Re: Cacti 1.2.6 - Permissions English/German

#8 Post by netniV » Fri Dec 20, 2019 5:47 am

Spine should be owned by root and SetUID flag should be marked. That way, when the poller runs, it is switches from the polling user which cron has defined, to root (which allows us to use ICMP ping packets) and then drop back to the polling user's effective level. That said, if the polling user does not have access to the RRD folders, it will never update them.

Post Reply