Bug 50319 – Nagios reports false positive about nscd

Bug 50319 - Nagios reports false positive about nscd


Summary:	Nagios reports false positive about nscd

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Monitoring (Prometheus or Nagios)
Version:	UCS 4.3
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.3-5-errata
Assigned To:	Philipp Hahn
QA Contact:	Jürn Brodersen

URL:
Keywords:

Depends on:	49967
Blocks:
	Show dependency tree / graph

Reported:	2019-10-04 09:22 CEST by Nico Stöckigt
Modified:	2019-10-16 17:36 CEST (History)
CC List:	10 users (show)

See Also:	48617 48422
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	4: Will affect most installed domains
How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.274
Enterprise Customer affected?:	Yes
School Customer affected?:	Yes
ISV affected?:
Waiting Support:	Yes
Flags outvoted (downgraded) after PO Review:
Ticket number:	2019062821000381, 2019082021000696, 2019082821000351, 2019082921000331
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Nico Stöckigt

2019-10-04 09:22:50 CEST

Please backport for 4.3.

+++ This bug was initially created as a clone of Bug #49967 +++

When Nagios checks 'nscd' the following might occur

/usr/lib/nagios/plugins/check_univention_nscd_suidwrapper
CRITICAL: no instance of nscd bound to nscd socket. nscd might have crashed.

This is wrong and seems to happen due to a bug in 'fuser', however when using 'lsof' everything is fine.

PH already has a fix for that.

Comment 1 Philipp Hahn

2019-10-08 19:07:07 CEST

[4.3-5] eeefb922c7 Bug #50319 nagios: Fix SUID wrapper
 .../lib/nagios/plugins/check_univention_joinstatus_suidwrapper.c    | 4 +++-
 .../usr/lib/nagios/plugins/check_univention_nscd_suidwrapper.c      | 4 +++-
 .../nagios/plugins/check_univention_slapd_mdb_maxsize_suidwrapper.c | 6 +++++-
 3 files changed, 11 insertions(+), 3 deletions(-)

[4.3-5] 13c01f67ad Bug #50319 test: Add minimal Nagios SUID wrapper test
 test/ucs-test/debian/changelog                |  6 ++++
 test/ucs-test/tests/22_nagios/01removedconfig |  1 -
 test/ucs-test/tests/22_nagios/07suidwrapper   | 41 +++++++++++++++++++++++++++
 3 files changed, 47 insertions(+), 1 deletion(-)

[4.3-5] 23187ded67 Bug #50319 nagios: Set PATH in SUID wrappers
 nagios/univention-nagios/Makefile                  | 36 ++++++++++++++++++++++
 nagios/univention-nagios/debian/control            |  7 +++--
 nagios/univention-nagios/debian/rules              | 20 ++----------
 .../check_univention_joinstatus_suidwrapper.c      | 24 ++++++++++-----
 .../plugins/check_univention_ldap_suidwrapper.c    |  3 +-
 .../plugins/check_univention_nscd_suidwrapper.c    | 24 ++++++++++-----
 ...heck_univention_slapd_mdb_maxsize_suidwrapper.c | 26 +++++++++++-----
 .../plugins/check_univention_winbind_suidwrapper.c | 20 +++++++++---
 8 files changed, 110 insertions(+), 50 deletions(-)

[4.3-5] f82e522d72 Bug #50319 nagios: Check for running nscd only
 doc/errata/staging/univention-nagios.yaml          |  11 +++
 nagios/univention-nagios/debian/changelog          |   6 ++
 .../usr/lib/nagios/plugins/check_univention_nscd   | 106 +++++----------------
 3 files changed, 41 insertions(+), 82 deletions(-)

Package: univention-nagios
Version: 11.0.1-9A~4.3.0.201910081855
Branch: ucs_4.3-0
Scope: errata4.3-5

[4.3-5] 32341bb22e Bug #50319: univention-nagios 11.0.1-9A~4.3.0.201910081855
 doc/errata/staging/univention-nagios.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comment 2 Jürn Brodersen

2019-10-09 12:05:30 CEST

What I tested:
Merge -> OK
ucs-test -s nagios -E dangerous -> OK
nscd2 check on nagios webinterface -> OK
/usr/lib/nagios/plugins/check_univention_nscd_suidwrapper -> OK
stop nscd -> /usr/lib/nagios/plugins/check_univention_nscd_suidwrapper: fails -> OK
yaml -> OK

Comment 3 Arvid Requate

2019-10-16 17:36:27 CEST

<http://errata.software-univention.de/ucs/4.3/601.html>