Administrator guide for latest release: SAM-Update-19 You can find the release notes at: https://tomtools.cern.ch/confluence/display/SAMDOC/Update-19.

Requirements

1. Disabled selinux. You must restart the box if you change this variable

   vi /etc/selinux/config
   SELINUX=disabled

2. Install host certificate to secure the Nagios web portal. Certificate should be placed on the standard location with 755 permission. The certificate must have SSL client attribute.

   ls -l /etc/grid-security/host*
   -rw-r--r-- 1 root root 2286 Oct 28 19:26 /etc/grid-security/hostcert.pem
   -r-------- 1 root root  887 Oct 28 19:25 /etc/grid-security/hostkey.pem

   openssl x509 -in /etc/grid-security/hostcert.pem -noout -purpose | grep "SSL client"
   SSL client : Yes

3. Install YUM

   yum-conf-5X-6.slc5.cern.noarch

4. Install yum-priorities package

   yum install yum-priorities

Installation

Configure Repositories

1. Remove the old lcg-CA repository, if installed:

   rm -f /etc/yum.repos.d/lcg-CA.repo

2. Configure the following repositories
   • RPMforge:
     • install rpm from rpmforge repo
     • copy rpmforge.repo
   • EGI CAs: copy egi-trustanchors.repo
   • gLite BDII: copy glite-BDII.repo
   • gLite UI: copy glite-UI.repo
   • DAG: copy dag.repo
   • SAM:
     • install rpm from sam repo
     • EGI sites should use this repository instead: egi-sam.repo
   • egee-sa1: copy egee-sa1.repo
   • slc5-os: copy slc5-os.repo
   • slc5-extras: copy slc5-extras.repo
   • slc5-updates: copy slc5-updates.repo

Install Packages

1. Install dependencies

   yum install lcg-CA
   yum install httpd
   yum install nagios.x86_64

2. Make sure that nagios from EGI SAM repository is installed

   yum --exclude=\*saga\* --exclude=\*SAGA\* groupinstall 'glite-UI (production - x86_64)'

3. Install SAM-Nagios

   yum install sam-nagios

If you plan to use ARC probes to monitor ARC-CE services some additional steps are required. If you plan to use UNICORE probes to monitor UNICORE services some additional steps are required.

Configuration

A SAM-Nagios node type can be configured in three different way in order to monitor different sets of sites/services:

• NGI SAM-Nagios : to monitor all sites/services belonging to a given region
• VO SAM-Nagios : to monitor all sites/services that support a given VOs (list of services can be based on VO feed or not)
• Site SAM-Nagios : to monitor all sites/services made available by one site

Default Configuration

1. Edit the YAIM configuration file according to the SAM Configuration via YAIM page and the Release Notes of the latest production release.

   vi site-info.def

2. Run YAIM

   /opt/glite/yaim/bin/yaim -s site-info.def -c -n glite-UI -n glite-NAGIOS

3. Generate myproxy certificate

   ls -l .globus/
   total 16
   -rw-r--r-- 1 root root 4908 Sep 18 14:44 usercert.pem
   -rw------- 1 root root 4836 Sep 18 14:44 userkey.pem
   
   /opt/globus/bin/myproxy-init -c 4320 -k NagiosRetrieve-$H-$V -s MYPROXY -l nagios -x -Z $HDN
   with: HDN=<HOST DN>, H=<HOSTNAME> and V=<VONAME>
   
   e.g. /opt/globus/bin/myproxy-init -l nagios -s myproxy.cern.ch -k NagiosRetrieve-dev-sam-nagios.cern.ch-ops -c 4320 -x -Z "/DC=ch/DC=cern/OU=computers/CN=dev-sam-nagios.cern.ch"

Additional Configuration

1. Check for additional configuration in the Release Notes of the latest production release.
2. Check other possible configurations are available in the FAQs page.

Known Issues

1. Check for known issues in the Release Notes of the latest production release.

Validation

1. Access SAM-Nagios web interfaces at https://NAGIOS_SERVER/nagios and https://NAGIOS_SERVER/myegi.
2. For local probes make sure that MyProxy credential works.

   nagios-run-check NAGIOS_SERVER hr.srce.GridProxy-Get-VO