gmane.network.shinken.devel

Re: [shinken] add webui option processing for bindAddress and umask (#825)

nap — 2013-05-18T13:32:49

Arg, can be an option only available for some bottle backends. From now you
can just remove the "** self.options", I'll try to add this only for
backend that manage it.


Jean


On Sat, May 18, 2013 at 1:30 PM, Jean-François BUTKIEWICZ <
jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org> wrote:

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: New issue on the devel branch using web-ui umask on windows platform...

nap — 2013-05-18T13:31:07

On Sat, May 18, 2013 at 2:11 PM, Jean-François BUTKIEWICZ <
jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org> wrote:

Great :)

No problem. Git is not so easy when we start using it (even after in fact
:p ).



Jean

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Change on modules into the devel branch

nap — 2013-05-18T13:29:54

Hi all,

I just commit a quite big change into the dvel branch. Now the modules are
not .py or directory, but directory/modules.py. I already chagne all the
one in the core repository. If you got others modules, look at the commit
to see how to easily manage this change into your own module.

This change will allow an easier automatic management for modules (like
list, add or remove).

I think the tests won't love this change, but I successully launched a
WebUI with this new layout, so should be ok. I'll try to fix the tests now
:)

Please give a try wih this branch with your classic modules configuration,
and let me know if something is broken now :p


Jean
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: New issue on the devel branch using web-ui umask on windows platform...

Jean-François BUTKIEWICZ — 2013-05-18T12:11:44

Ok, yes, it's fixed. I was updating from my own repo ....... :-( 
Now all is working fine for me. I will finish the windows scripted installation to submit a pull from my repo. 
It also validate the bug Issue #681 is solved on a fresh install of the devel branch (also on the 1.4 RC) 

Sorry for the waste of time. 
Regards, 


Jean-François BUTKIEWICZ 
Consultant VEOSOFT (groupe VEONERGIE) 

----- Mail original -----

De: "Jean-François BUTKIEWICZ" <jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org> 
À: shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org 
Envoyé: Samedi 18 Mai 2013 13:44:06 
Objet: Re: [Shinken-devel] New issue on the devel branch using web-ui umask on windows platform... 


Oh, seems that my repository not really updated (i compare the commit with my file) 
I will see exactly to retreive the same code. 

Sorry, 


Jean-François BUTKIEWICZ 
Consultant VEOSOFT (groupe VEONERGIE) 

----- Mail original -----

De: "nap" <naparuba-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> 
À: shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org 
Envoyé: Samedi 18 Mai 2013 11:57:42 
Objet: Re: [Shinken-devel] New issue on the devel branch using web-ui umask on windows platform... 







On Sat, May 18, 2013 at 10:46 AM, Jean-François BUTKIEWICZ < jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org > wrote: 

Hi, 


I push a fix on the devel branch, can you give a try? The options where missing default values if not in the configuration file. Was not just windows related in fact :) 




Jean 


------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: New issue on the devel branch using web-ui umask on windows platform...

Jean-François BUTKIEWICZ — 2013-05-18T11:44:06

Oh, seems that my repository not really updated (i compare the commit with my file) 
I will see exactly to retreive the same code. 

Sorry, 


Jean-François BUTKIEWICZ 
Consultant VEOSOFT (groupe VEONERGIE) 

----- Mail original -----

De: "nap" <naparuba-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> 
À: shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org 
Envoyé: Samedi 18 Mai 2013 11:57:42 
Objet: Re: [Shinken-devel] New issue on the devel branch using web-ui umask on windows platform... 







On Sat, May 18, 2013 at 10:46 AM, Jean-François BUTKIEWICZ < jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org > wrote: 

Hi, 


I push a fix on the devel branch, can you give a try? The options where missing default values if not in the configuration file. Was not just windows related in fact :) 




Jean 

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: [shinken] add webui option processing for bindAddress and umask (#825)

Jean-François BUTKIEWICZ — 2013-05-18T11:30:56

No changes. 

When i change the shinken-specific-windows.cfg in the web-ui conf, i can workaround the umask, but i have the same on bindaddress (same commit). It is looking for specific options, in the web-ui part of the conf file, but not documented it seems. 

File "C:\temp\GIT-SH~1.4-W\shinken\shinken\webui\bottle.py", line 1913, in run 
srv = make_server(self.host, self.port, handler, **self.options) 
TypeError: make_server() got an unexpected keyword argument 'bindAddress' 

Can you tell me what values shinken is waiting for ? Even if it will not fix my issue, i can see if the web-ui starts. 
And thanks for the help, it is helping us to understand a lot of the mecanism of shinken. 


Jean-François BUTKIEWICZ 
Consultant VEOSOFT (groupe VEONERGIE) 

----- Mail original -----

De: "Gabès Jean" <notifications-9UaJU3cA/F/QT0dZR+AlfA< at >public.gmane.org> 
À: "naparuba/shinken" <shinken-NrzT4B82aKj1RolTdwD8X9BPR1lH4CV8< at >public.gmane.org> 
Cc: "jfbutkiewicz" <jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org> 
Envoyé: Samedi 18 Mai 2013 13:21:42 
Objet: Re: [shinken] add webui option processing for bindAddress and umask (#825) 

That's git pull 

Git checkout will put you in the branch, but in the current version of your 
PC. git pull will update your branch from the distant version. 


Jean 


On Sat, May 18, 2013 at 1:07 PM, jfbutkiewicz <notifications-9UaJU3cA/F/QT0dZR+AlfA< at >public.gmane.org>wrote: 


Reply to this email directly or view it on GitHub . 

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: [shinken] add webui option processing for bindAddress and umask (#825)

Jean-François BUTKIEWICZ — 2013-05-18T10:15:53

Hi, same issue. 

I saw the issue on specific values (like the log_archive_path in the config.py, so i add the following line to workaround : 
log_archive_path=< at >< at >INSTALLDIR< at >< at >\\var\\archives -- < at >< at >installdir< at >< at > is replaced with the right path in the windows installation script) 

but i always have the error : 
2013-05-18 12:55:37,062 [1368874537] Info : [broker-1] [Livestatus Broker] Get a Livestatus instance for plugin Livestatus 
2013-05-18 12:55:37,390 [1368874537] Error : [broker-1] The module WebUI raised an exception 'Module' object has no attribute 'umask', I remove it! 
2013-05-18 12:55:37,390 [1368874537] Error : [broker-1] Back trace of this remove: Traceback (most recent call last): 
File "C:\temp\git-shinken1.4 - work\shinken\shinken\modulesmanager.py", line 161, in get_instances 
inst = module.get_instance(mod_conf) 
File "C:\temp\git-shinken1.4 - work\shinken\shinken\modules\webui_broker\__init__.py", line 45, in get_instance 
instance = Webui_broker(plugin) 
File "C:\temp\git-shinken1.4 - work\shinken\shinken\modules\webui_broker\webui_broker.py", line 77, in __init__ 
umask = getattr(modconf, 'umask') 
AttributeError: 'Module' object has no attribute 'umask' 

I made a checkout on the devel to update the folder, maybe i make a mistake on the command to update ? Or is there a other method to update the local repository ? I am not very familiar with these dev tools. 

regards, 


Jean-François BUTKIEWICZ 
Consultant VEOSOFT (groupe VEONERGIE) 

----- Mail original -----

De: "Gabès Jean" <notifications-9UaJU3cA/F/QT0dZR+AlfA< at >public.gmane.org> 
À: "naparuba/shinken" <shinken-NrzT4B82aKj1RolTdwD8X9BPR1lH4CV8< at >public.gmane.org> 
Cc: "jfbutkiewicz" <jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org> 
Envoyé: Samedi 18 Mai 2013 11:56:44 
Objet: Re: [shinken] add webui option processing for bindAddress and umask (#825) 

I add a fix about it. Can you give a try? 

Thanks :) 


jean 


On Sat, May 18, 2013 at 11:13 AM, jfbutkiewicz <notifications-9UaJU3cA/F/QT0dZR+AlfA< at >public.gmane.org>wrote: 


Reply to this email directly or view it on GitHub . 

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: New issue on the devel branch using web-ui umask on windows platform...

nap — 2013-05-18T09:57:42

On Sat, May 18, 2013 at 10:46 AM, Jean-François BUTKIEWICZ <
jean-francois.butkiewicz-FKNca9vCVGbR7s880joybQ< at >public.gmane.org> wrote:


I push a fix on the devel branch, can you give a try? The options where
missing default values if not in the configuration file. Was not just
windows related in fact :)


Jean
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

New issue on the devel branch using web-ui umask on windows platform...

Jean-François BUTKIEWICZ — 2013-05-18T08:46:57

Hi all, I am working on the windows part of shinken, and i found an issue on the devel branch (not in the RC1 release) :

A commit was done for the web-ui umask option. This is not working on windows (i thing looking on umask that is normal ;-) and the web-ui is never displayed.

add webui option processing for bindAddress and umask 

Of course, removing that in webui-broker.py solves the issue on windows (tested on my windows port using the commit informations), but it's not a good fix ! Can someone more stuffed on python will help me on this, because with that, web-ui cannot start on windows :

brokerd.log:
2013-05-18 11:32:06,483 [1368869526] Error :   [broker-1] The module WebUI raised an exception 'Module' object has no attribute 'umask', I remove it!
2013-05-18 11:32:06,483 [1368869526] Error :   [broker-1] Back trace of this remove: Traceback (most recent call last):
  File "C:\temp\git-shinken1.4 - Copy\shinken\shinken\modulesmanager.py", line 161, in get_instances
    inst = module.get_instance(mod_conf)
  File "C:\temp\git-shinken1.4 - Copy\shinken\shinken\modules\webui_broker\__init__.py", line 45, in get_instance
    instance = Webui_broker(plugin)
  File "C:\temp\git-shinken1.4 - Copy\shinken\shinken\modules\webui_broker\webui_broker.py", line 77, in __init__
    umask = getattr(modconf, 'umask')
AttributeError: 'Module' object has no attribute 'umask'

Jean-François BUTKIEWICZ 
Consultant VEOSOFT (groupe VEONERGIE) 

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Shinken-devel mailing list
Shinken-devel< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: "tactical overview" in WebUI

Frescha — 2013-05-16T18:39:45

Hi,
If you like, you can open a feature request on https://github.com/naparuba/shinken/issues for that.



Am 16.05.2013 um 19:19 schrieb David GUENAULT <david.guenault-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>:


------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: "tactical overview" in WebUI

David GUENAULT — 2013-05-16T17:19:31

i do not think it is a big deal to make the same
just a plugin page in the webui with a template.
take a look at the source code of webui plugins pages it is fairly easy to
code
or you could code some widget and make a dashboard with the widgets


2013/5/16 Riccardo Murri <riccardo.murri-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

"tactical overview" in WebUI

Riccardo Murri — 2013-05-16T16:15:56

Hello,

Is there a way to small statistics page (like the "tactical overview"
in Nagios) with the number of critical, down, warning services/hosts
in the WebUI?

It would be extra nice if one could the select only a few or a group
to get details.

Thanks,
Riccardo

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d

Re: Here is the 1.4RC1 :)

Riccardo Murri — 2013-05-16T15:49:08

Hello,

On 14 May 2013 10:22, nap <naparuba-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

I'm not sure whether this is a regression or if I'm doing something
wrong, but I just installed 1.4rc1 to try it out and could only log in once.

After restarting Shinken, I am no longer allowed past the initial
`/user/login` URL after using `install -a` to install some add-ons
(mongodb, nagvis, and nconf).

I have restarted the broker several times and I am sure that the
`htpasswd.users` has admin/admin as the password:

    root< at >shinken-1:/usr/local/shinken# htpasswd -bd
/usr/local/shinken/etc/htpasswd.users admin admin
    Updating password for user admin

    root< at >shinken-1:/usr/local/shinken# cat etc/htpasswd.users
    #is admin/admin
    admin:wpBiDEoypGXUo

The broker code logs that authentication is successfull:

    2013-05-16 15:38:50,651 Added task (0 tasks queued)
    2013-05-16 15:38:50,654 [1368718730] Debug :   PASSWD: admin
wpBiDEoypGXUo wp
    2013-05-16 15:38:50,656 [1368718730] Info :    Authentication success
    2013-05-16 15:38:50,666 Added task (0 tasks queued)

Still, I get redirected to an "invalid login" page:

    root< at >shinken-1:/usr/local/shinken# netstat -ltp | fgrep 7767
    tcp        0      0 *:7767                  *:*
 LISTEN      9542/python
    root< at >shinken-1:/usr/local/shinken# strace -f -p 9542 -s 1024
    [pid  9565] open("/usr/local/shinken/etc/htpasswd.users", O_RDONLY) = 12
    [pid  9565] fstat(12, {st_mode=S_IFREG|0664, st_size=36, ...}) = 0
    [pid  9565] fstat(12, {st_mode=S_IFREG|0664, st_size=36, ...}) = 0
    [pid  9565] mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdce5f01000
    [pid  9565] read(12, "#is admin/admin\nadmin:wpBiDEoypGXUo\n", 8192) = 36
    [pid  9565] read(12, "", 4096)          = 0
    ...
    [pid  9565] write(5, "2013-05-16 15:40:49,396 [1368718849] Debug :
PASSWD: admin wpBiDEoypGXUo wp\n", 78) = 78
    ...
    [pid  9565] write(5, "2013-05-16 15:40:49,398 [1368718849] Info :
  Authentication success\n", 70) = 70
    [pid  9565] close(12)                   = 0
    ...
    [pid  9565] write(2, "130.60.10.230 - - [16/May/2013:15:40:49
+0000] \"POST /user/auth HTTP/1.1\" 303 0
\"http://130.60.24.36:7767/user/login\" \"Mozilla/5.0 (X11; Linux
x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63
Safari/537.31\"\n", 225) = 225
    [pid  9565] sendto(15, "HTTP/1.0 303 See Other\r\n", 24, 0, NULL, 0) = 24
    [pid  9565] sendto(15, "Server: PasteWSGIServer/0.5
Python/2.7.3\r\n", 42, 0, NULL, 0) = 42
    [pid  9565] gettimeofday({1368718849, 400606}, NULL) = 0
    [pid  9565] sendto(15, "Date: Thu, 16 May 2013 15:40:49 GMT\r\n",
37, 0, NULL, 0) = 37
    [pid  9565] sendto(15, "Content-Length: 0\r\n", 19, 0, NULL, 0) = 19
    [pid  9565] sendto(15, "Content-Type: text/html;
charset=UTF-8\r\n", 40, 0, NULL, 0) = 40
    [pid  9565] sendto(15, "Location:
http://130.60.24.36:7767/user/login?error=Invalid user or
Password\r\n", 78, 0, NULL, 0) = 78

   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Am I doing something wrong?

Thanks,
Riccardo

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d

Re: distributed arch: security and bandwith ?

Adrien Grellier — 2013-05-16T12:20:39

Le jeudi 16 mai 2013 10:19:54, nap a écrit :

OK


OK, so we will definitely make some test to use shinken for this remote site.

Thank you for the answers, and for your work on shinken.


OK, next time I will subscribe on the right list.

Regards,

Adrien

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d

Re: Here is the 1.4RC1 :)

nap — 2013-05-16T08:22:58


nothing from scheduler nor broker, but remember that you must
enable broker_complete_links to 1 in your realms ;)


Jean
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: distributed arch: security and bandwith ?

nap — 2013-05-16T08:19:54

On Tue, May 14, 2013 at 4:57 PM, Adrien Grellier <
adrien.grellier-be2bQWTIkeNvynnTyRI/EA< at >public.gmane.org> wrote:

Remember that the call for reference is still open :)
http://www.shinken-monitoring.org/news/you-are-using-shinken-let-the-world-know-you-like-it/



You VPN is encrypted?

If you are using Pyro3 you can enable native SSL, but it won't work for
pyro4 (we are looking for fix this in the next release).


For 10 distant servers, won't be a problem at all. I think you won't even
notice it on the brandwith.


from sourcefoge because someone is sending without subscribe. Please
register, and unregister as soon as your problem is solved if you want.


Jean
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: Here is the 1.4RC1 :)

Imrane DESSAI — 2013-05-15T10:18:56

Hi,

Fresh install done ! All seems good for now :D

I just need some help about multi broker

To have a world webui and two realm specific webui, I must something like
that ?

Nothing particular about scheduler ?

define module {
  modules Apache_passwd, ActiveDir_UI, Cfg_password, PNP_UI, Mongodb,
Glances_UI
  manage_acl 1
  play_sound 0
  host 0.0.0.0
  module_type webui
  allow_html_output 0
  max_output_length 100
  module_name WebUI
  auth_secret CHANGE_ME
  port 7767
}

define broker{
    broker_name         broker-master
    address             node1
    port                7772
    realm               All
    manage_sub_realms   1
    #manage_arbiters     1 : No need here, I think
    modules        WebUI
}


define broker{
    broker_name         broker-client-1
    address             node2
    port                7772
    realm               Client1
    manage_sub_realms   1
    #manage_arbiters     1 : No need here, I think
   modules        WebUI
}

define broker{
    broker_name         broker-client-2
    address             node3
    port                7772
    realm               Client2
    manage_sub_realms   1
    #manage_arbiters     1 : No need here, I think
   modules        WebUI
}





2013/5/14 nap <naparuba-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Re: Road to 1.6

Imrane DESSAI — 2013-05-15T05:16:45

Hi,

It would be easier to manage each packs/modules separately. Each in its own
repo.
They could evolve at different speed from core with ease.

I think it would decrease load on core dev team so that they can focus on
core dev :p


PS : There's a typo in your link : https://npmjs.org/



2013/5/14 nap <naparuba-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

distributed arch: security and bandwith ?

Adrien Grellier — 2013-05-14T14:57:42

Hi,

I am in charge of the IT in a french research laboratory. I would like to set up a distributed architecture with shinken.

Here is the situation:
We have a main site (Nantes), monitored by shinken, thanks for you work :)

But we also have a remote site (le Croisic), behind a SDSL connexion. We want to monitor some servers (about 10) on this site too, as shinken works well on Nantes.

Between these sites, The network is full of obstacles (VLAN, Firewall, etc.) :
Nantes <--> Firewall <--> Internet <--> Firewall <--> le Croisic

The solution may be to create two realm for Nantes and le Croisic, with a poller+scheduler at le Croisic. The connexions Arbiter --> poller and scheduler --> broker could be encapsulated into a VPN connexion between the two monitoring servers.

And my questions :
– how these connexions are secured (Arbiter --> poller and scheduler --> broker) ? Is it safe to use it directly on internet, or must we secure them ?
– Do the connexions between scheduler and broker put an heavy load on the Bandwith ? Le Croisic hasn't a good internet connexion unfortunatelly, so we don't want to overcharge it.

I am open to any suggestion to improve my system :)

Regards,

Adrien

PS: please keep me in CC, I do not subscribe to the list.

---- 

Adrien Grellier <adrien.grellier< at >ec-nantes.fr> (02 40 37 15 55)
Resp. informatique du LHEEA (anciennement LMF)
CNRS – École Centrale de Nantes

------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Shinken-devel mailing list
Shinken-devel< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Road to 1.6

nap — 2013-05-14T09:21:58

Hi all,

now the 1.4 is on RC, it's time to talk about the next one, the 1.6.

If we take a look back since the 1.0 version, there are more and more
contributors, that's great, thanks to all of you :D

If we take a closer look, we can see that the major part of the
contributions are about bug fix and module/packs enhancements, and it's
quite normal in fact. But there are fewer new packs or modules. I saw
enhancements that were far more complex than creating a simple module or
pack, so why no "new" things there?

I think there is one main reason why there is no "new" things : it's in the
core. First, it's not easy to find them. Ok for packs it's just etc/packs,
but for modules it's inside the python lib. What if a user code a new one
and upgrade? He will have to "reinstall" the module. That's not good.

Packs are also hard to manage when updating. Currently, we just don't touch
them as the other user configuration in fact. But maybe the user change a
pack files, but want others packs to be updated.

As it's on the core, modules and packs are seems to be managed by the core
team (quite logic), and so don't see that they can also add new ones,
especially if they need to ask us for inclusion on the core (if you are
shy, it can be hard to ask for it).

That's why I think we should "export" modules and packs from the shinken
core repository, and give them their own, one repository by module/pack.
This will make them look as they are : small if you take one by one. So
eveyone will saw that it's quite easy to code a new module or a new pack.

We only need to provide a simple tool for listing and installing the. I
already get the shinken.io URL, so this can be the place of a new exchange
place, a bit like what npm.org is for the nodejs tool.

Every one will be able to send a pack or a module there, there won't be
need to get my aproval for posting there (just moderation to remove things
taht should not be there, like illegal things).

What do you think of this? Do you think you wil be more attract by such a
platform than commit in the core repository?

If you got other ideas for the 1.6 release, it's time to share :)


Jean
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel

Here is the 1.4RC1 :)

nap — 2013-05-14T08:22:12

Hi all,

It's time for testing the new 1.4RC1 version. You can grab it from
www.shinken-monitoring.org/pub/shinken-1.4rc1.tar.gz

Please test it and look if you don't find any regressions.

Good test! :)


Jean
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d_______________________________________________
Shinken-devel mailing list
Shinken-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/shinken-devel