| 1 | This page discusses the script agent for monitoring IAM services. |
| 2 | |
| 3 | Script description in administrator's manual, with additional info [[http://www.foglight.org/Blog/tabid/55/EntryID/117/Default.aspx|here]]. |
| 4 | |
| 5 | The script will write to stdout something that looks like this: |
| 6 | |
| 7 | {{{ |
| 8 | TABLE LDAPServers |
| 9 | START_SAMPLE_PERIOD |
| 10 | Host.String.id = idmp-0 |
| 11 | ResponseTime = .31 seconds |
| 12 | Queries = 172 |
| 13 | END_SAMPLE_PERIOD |
| 14 | END_TABLE |
| 15 | }}} |
| 16 | |
| 17 | Information sources for tables: |
| 18 | * LDAP servers |
| 19 | 1. hostname |
| 20 | 2. response time: this would involve remote execution of queries from ??? to server, do several (say, three) and take average |
| 21 | 3. queries: snmpget dsApplIfSearchOps (see rfc2605 MIB) |
| 22 | 4. load average: uptime |
| 23 | * RADIUS servers |
| 24 | 1. hostname |
| 25 | 2. response time: this would involve remote execution of queries from ??? to server, do several (say, three) and take average |
| 26 | 3. queries: snmpget radiusAuthServTotalAccessRequests (see rfc2619 MIB) |
| 27 | 4. load average: uptime |
| 28 | * Shibboleth servers |
| 29 | 1. hostname |
| 30 | 2. response time: this would involve remote execution of queries from ??? to server, do several (say, three) and take average |
| 31 | 3. queries: we'd need to parse the shibboleth logs - there is no standard MIB for SAML servers and no MIB for Shibboleth |
| 32 | 4. load average: uptime |
| 33 | |
| 34 | |
| 35 | Clearly we'd need to enable and secure SNMP services on those servers for which it's available |