Health Monitoring

3/14/2006
Eric Low

Health monitoring uses OpenWBEM to let you view and/or monitor the health of Linux or Netware operating systems. It sounds like these services are still under development and that only data collection and analysis currently work (no system alerts or thresholds yet, etc.). Nonetheless, it is standard in NW 65.

Here is the Health Monitoring Services Administration Guide.

Here is the OpenWBEM Services Administration Guide.

Here are the components:

Health Monitor Services Plugins Provides the schema extension for Novell eDirectory, provides the interface for iManager, and populates the CIM, HMS, and Server List objects in the eDirectory tree.

It is installed with preconfigured server patterns that install iManager.

libNHMSNetworkDevice.nlm Provides system information for the owcimomd.nlm when monitoring server health on NetWare.
owcimomd.nlm Contains the providers necessary for Robust health monitoring on a NetWare server.

There are two types of monitoring - Robust Health Monitoring, which tells you things about Memory, OS, processes, network, and CPU. The other is Simple Server Status, which simply tries to connect to a port (there are ten preconfigured ports to choose from) on a remote server and tells you if it's up or not.

Robust Monitoring is only reported by a Netware or Linux server, since the owcimomd module must be running. Otherwise you can only report a Simple Server Status.

You must first install OpenWBEM if it is not already. If you upgraded from NW65 SP2 or earlier, it may not be. Here is the install guide. I originally installed from the SP4 CD's, so I did not have to worry. You must also be running iManger 2.5.

First you must add at least one server. I wanted to start with our actual Netware server computer (the one running all this stuff), so I logged into iManager with the Admin account, clicked Servers -> Monitor Servers from the left-hand menu, and then clicked Add. I used S3 for the Server Name and then typed in the DNS Name (it was recommended that they match, but the server name is purely descriptive), then a brief description including operating system version. I made sure Robust Health was checked, then clicked Next.

For some reason, I think it thought that this was a Linux server, because I got an Authentication Failed error and it then told me about Linux User Management. Hhhmmm... I clicked on Monitor Servers again, and the servers were listed - but when I clicked on them, I got the authentication error once again!

Perhaps I needed to set up the destination server first. Here is the guide for that. I went into eDirectory and checked that the proper objects were created. The CIM container was there, HMS container under that, and then ServerList1 under that. Under Properties -> Other ->lasServers, I saw everything that I had entered from the iManager screen. Hhhmmm.. I checked that the port was open by going to the Server Console and typing telnet -p 5989 localhost, and it connected (but did not say anything). I also tried the OpenWBEM unsecured port, 5988, and the connection was refused. So, the port was open.. now what was wrong??

The configuration file that specifies the location for these ServerList Objects Health Monitoring Service Objects is SYS:/tomcat/4/webapps/nps/WEB-INF/config/lasMonitorServers.xml. It is stored in the following format:

<setting> <name><![CDATA[location.cimserver1]]>></name> <value><![CDATA[dc=cim,o=novell]]>></value> </setting>

I checked that file on our system and it was correct. I noticed the following error on the Logger Screen at the console:

iManagerLoggerInst....-1 HMS Business Logic: Get System Health failed.
iManagerLoggerInst....-1 CIM_ERR_ACCESS_DENIED

I tried disabling authentication by modifying the openwbem conf file (SYS:\SYSTEM\cimom\etc\openwbem\openwbem.conf) and setting the following line:

owcimomd.allow_anonymous = true

I then restart Openwbem by typing unload owcimomd followed by openwbem. I went into iManager again to check the server stats, and voila! At least now I knew it was working. I just had to figure out how to do it without allowing anonymous access!

What I ended up doing, at least temporarily, was to turn on anonymous access again, but tell OpenWBEM to only listen on the localhost IP (127.0.0.1). I did this by changing the following lines and then restarting openwbem:

owcimomd.allow_anonymous = true
http_server.listen_addresses = 127.0.0.1

I checked, and I could still access the stats through iManager. However, I could no longer telnet to the OpenWBEM port from another computer. Done!

 

 

 


To configure the monitoring, you must have these rights to the HMS Object (.HMS.CIM.CONTAINERNAME) (see Delegating Monitoring Tasks):

* [All Attributes Rights] Compare / Read / Write
* [Entry Rights] Browse / Create / Rename / Delete

Note that this account will not exist until you first configure a server for HMS through iManager.


To monitor a Linux server, the following conditions must be met:

Novell-life and OpenWBEM packages installed.
The owcimomd module is running. This module is started by default when the OES software selection is selected during the installation. If it is not, enter the following command at a console shell as a user with root privileges: /etc/init.d/owcimomd start
TCP port 5989 must be open.


To start owcimomd, type openwbem at the server. To stop it, type unload owcimomd.

Required settings for OpenWBEM and LDAP
can be found here. I did not use this at all. It appears to allow anonymous LDAP connections?

 

 

 

 

 

 

 

 

*** OpenWBEM can be configured to require secure access. Read here.