Hello all,
Please someone tell me how i can monitor freeradius server
Thank u
Please someone tell me how i can monitor freeradius server
Thank u
-
-
There are different levels of "monitor", so it might help if you're more specific about what you're trying to do.
Do you just want to see if the 'radiusd' process is running? That's a 'proc.num' item plus a trigger if the value isn't what you expect. Alternately, if you're using the zabbix-agent2 on the system running radiusd, you might be able to use its systemd service monitor. That would be the basic level of monitoring.
Just knowing that the process is running is helpful, but it doesn't really tell you if the process is working correctly. To do that, you need to know if it's correctly responding to authentication requests. For that, one approach would be to use a 'logrt' (Active) item to watch for certain log messages (like "Login OK:" or perhaps "Login incorrect") in the log file, and then use triggers if you're seeing too few "Login OK:" or too many "Login incorrect", etc. That would be slightly more advanced monitoring than just the basic level of checking that the service is running.
If you want to do something a little more advanced, you can write a script or small program that actually does a test RADIUS authentication with a test user and password. If you install this on your Zabbix server and configure it as an External Check, you've created a custom item for checking that a specific RADIUS user can authenticate.
There are probably other things you can do to monitor radius too, but it all depends on what level of "monitoring" you're interested in.-
thank u tim for ur reply , really very important notes,
for my case , i wanna to do something advanced , but am beginner can u plz help :me and advise me
regards , have a good day -
If you're a beginner with Zabbix then I don't recommend you try jump right to doing something advanced. Start with the easy stuff and as you learn how to do more things with Zabbix, then improve your monitoring with more advanced techniques.
One of the challenges of being responsible for monitoring services is that we often have to understand at least a little bit about how the service functions and what some of the failure cases are. If you're not the person at your organization that is responsible for FreeRADIUS, maybe talk to that person and find out what he or she thinks you should monitor. If they can guide you for what some of the failures are that they think should be detected, that can sometimes help you decide what you need to do with Zabbix to accomplish that.
Using a pre-defined template is a good way to learn, but there are lots of examples out there that are either very outdated or that are just bad examples. As isaqueprofeta said, if you're going to use someone else's template, you should carefully evaluate it in a test environment before importing it into your production environment. That template you mentioned in your comment to his post is more than 5 years old, so I'm not surprised that it doesn't work very well "out of the box" on a modern Zabbix install.
However, if you read the Readme for the template, it talks about the general strategy that it's using: enable a special "server-status" endpoint in FreeRADIUS and then connect to that periodically. Even if the template itself is outdated and doesn't work, the idea might be something you can implement yourself.
Even when you find really good templates (like the new official templates that come with Zabbix 5.x), you still have to understand some of what the templates are doing and what you must configure for the template to work.
-
-
1) Try searching arround for freeradius templates on https://share.zabbix.com/ and https://monitoringartist.github.io/zabbix-searcher/
2) Evaluate anything you find testing the templates in a controlled environment outside your production.
3) Make your own template based on what you find in your tests and then go for production.Comment
-
thank u sir,
but i tried with this template and nothing happend , i guess i have problem of configuration
in the git the owner of this template told us to change the secret password :
"Import zabbix-freeradius-template Change macros {$RADIUS_SECRET} for password . (default adminsecret)"
i dont know which secret i will write
this is the link of the template
regards
-
-
About the template that you find, you gonna need to understand and try yourself, I can't help you with that.thank u sir,
but i tried with this template and nothing happend , i guess i have problem of configuration
in the git the owner of this template told us to change the secret password :
"Import zabbix-freeradius-template Change macros {$RADIUS_SECRET} for password . (default adminsecret)"
i dont know which secret i will write
this is the link of the template
regards 
https://github.com/roysbike/zabbix-freeradiusComment
-
Hello tim.mooney ,
please can u help me to monitor free radius authentification + accounting
thank uComment
Comment