wiki:IAMScript

Version 1 (modified by mshore2@…, 13 years ago) (diff)

--

This page discusses the script agent for monitoring IAM services.

Script description in administrator's manual, with additional info here.

The script will write to stdout something that looks like this:

TABLE LDAPServers
START_SAMPLE_PERIOD
Host.String.id = idmp-0
ResponseTime = .31 seconds
Queries = 172            
END_SAMPLE_PERIOD
END_TABLE

Information sources for tables:

  • LDAP servers
    1. hostname
    2. response time: this would involve remote execution of queries from ??? to server, do several (say, three) and take average
    3. queries: snmpget dsApplIfSearchOps (see rfc2605 MIB)
    4. load average: uptime
  • RADIUS servers
    1. hostname
    2. response time: this would involve remote execution of queries from ??? to server, do several (say, three) and take average
    3. queries: snmpget radiusAuthServTotalAccessRequests (see rfc2619 MIB)
    4. load average: uptime
  • Shibboleth servers
    1. hostname
    2. response time: this would involve remote execution of queries from ??? to server, do several (say, three) and take average
    3. queries: we'd need to parse the shibboleth logs - there is no standard MIB for SAML servers and no MIB for Shibboleth
    4. load average: uptime

Clearly we'd need to enable and secure SNMP services on those servers for which it's available