Ad Widget

Collapse

Zabbix 5.0 on Ubuntu 20.04

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • RSA
    Junior Member
    • Dec 2018
    • 7

    #1

    Zabbix 5.0 on Ubuntu 20.04

    Click image for larger version

Name:	zab_ping.png
Views:	1250
Size:	10.6 KB
ID:	436313After install and start Zabbiz-sever i have some problem with ping hosts in zabbix web:
    ping from server
    HTML Code:
    root@Zabbix:/home/rsa# ping 10.17.111.249
    PING 10.17.111.249 (10.17.111.249) 56(84) bytes of data.
    64 bytes from 10.17.111.249: icmp_seq=1 ttl=62 time=3.73 ms
    64 bytes from 10.17.111.249: icmp_seq=2 ttl=62 time=3.20 ms
    ping from web:
    • ping -c 3 10.17.111.249; case $? in [01]) true;; *) false;; esac
  • tim.mooney
    Senior Member
    • Dec 2012
    • 1427

    #2
    You ran the command line test as root. On most Linux systems, 'root' has no restrictions and can do things a normal account can't.

    The Zabbix web interface runs as a non-privileged user. That's good, and it's what you want, but it means that some commands or operations will be restricted.

    The "socket: Operation not permitted" likely means that "ping" is restricted. Different distros treat the "should a nonprivileged account be able to run ping?" question differently, so it may be that there's something specific to Ubuntu that needs to be configured or set, to make ping available to the web user. It might be using the "setcap" command, to add the appropriate network capabilities(7) to the ping command, or it might be adding the web user's "group" to some sysctl config file, to indicate that the web user is allowed to use the ping command. If you find documentation recommending you just make "ping" set-uid root, that's probably outdated, and these days I would continue looking to see if there's some other recommendation for your particular distro to make ping available to a normal user account.

    Comment

    • RSA
      Junior Member
      • Dec 2018
      • 7

      #3
      resolved
      i changed SUID for ping
      При выполнении команды ping - ошибка такого вида: $ ping ya.ru ping: icmp open socket: Operation not permitted Проблема заключается в неверно (или намеренно) установленных правах на исполняемый файл ping: $ i=`which ping` && ls -l $i -rwxr-xr-x 1 root root 38464 2011-04-15 16:09 /bin/ping Тогда как в "правильном" варианте: # i=`which ping` && ls

      Comment

      Working...