Solved - Cacti 1.2.6 - Permissions English/German

FiSiGer · Post by **FiSiGer** » Fri Dec 13, 2019 5:32 am

German version below. Thanks for your help!
Deutsche Version unten angehängt. Danke für eure Hilfe!

English:

Hello guys,

I have a problem with my cacti installation on my CentOS 8 machine.
It is a virtual machine on a proxmox host. (both firewalls are complety diabled for testing)

The problem is, that it is not possible for spine to create the RRDs for other systems.
I think it is a permission problem to create the RRDs in the rra-folder?

: 1.PNG (22.05 KiB) Viewed 1381 times

: 3.PNG (21.24 KiB) Viewed 1381 times

The problem I don't get why it's working for the local machine?

: 2.PNG (476.73 KiB) Viewed 1381 times

I installed cacti and spine both as packages from repository links.
The systems that I want to pull are perfect accessible with ping and SNMP from cacti and the system itself.

: 4.PNG (5.79 KiB) Viewed 1381 times

In the moment I'm stucking on this problem, I tried to give the apache user the rights, but it didn't work.

: 5.PNG (60.88 KiB) Viewed 1381 times

Thanks for your help!

Best regards
Johannes

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

German:

Hallo Leute,

Ich habe ein Problem mit meiner Cacti Installation auf meinem CentOS 8 System.
Es handelt sich dabei um eine virtuelle Maschine, die auf einem Proxmox Host läuft. (Zum Testen wurden auf beiden Systemen die Firewalls abgeschaltet)

Das Problem ist, dass es für Cacti nicht möglich ist für andere Systeme die RRDs und Grafiken zuerstellen.
Ich denke es handelt sich hier um ein Rechteproblem für das Erstellen von RRDs im rra-Ordner?

: 1.PNG (22.05 KiB) Viewed 1381 times

: 3.PNG (21.24 KiB) Viewed 1381 times

Was ich aber nicht verstehe ist, das Spine problemlos mit der lokalen Maschine funktioniert?

: 2.PNG (476.73 KiB) Viewed 1381 times

Ich habe Spine und Cacti beide als Pakete mittels Repositorys installiert.
Das System was ich erreichen möchte, kann problemlos per ping und SNMP von cacti oder System erreicht werden.

: 4.PNG (5.79 KiB) Viewed 1381 times

Im Moment bin ich bei diesem Problem gefangen. Ich habe versucht dem apache-user die nötigen Rechte zugeben, aber das hat nicht funktioniert.

: 5.PNG (60.88 KiB) Viewed 1381 times

Vielen Dank für Eure Hilfe!

Beste Grüße
Johannes

cigamit · Post by **cigamit** » Fri Dec 13, 2019 9:38 am

You might try to run it through the Data Source troubleshooter first. Its pretty good at catching exactly what is wrong.

: Screenshot_6.jpg (12.01 KiB) Viewed 1373 times

FiSiGer · Post by **FiSiGer** » Fri Dec 13, 2019 11:43 am

Hey cigamit,

thanks for the fast reply!

This are the results of the troubleshooting:

: 6.PNG (82.21 KiB) Viewed 1372 times

The issues in detail shows this:
Total Poller Items:

: 15.PNG (27.63 KiB) Viewed 1372 times

Thold Runtime:

: 8.PNG (24.69 KiB) Viewed 1372 times

User Stats:

: 9.PNG (33.61 KiB) Viewed 1372 times

The functioning local machine shows this:

: 11.PNG (23.06 KiB) Viewed 1372 times

Do you know what I have to add to fix the issues?

Thanks & best regards!

Johannes

netniV · Post by **netniV** » Fri Dec 13, 2019 6:10 pm

I would say that it sounds like you don't have a cron job to run the poller.

cigamit · Post by **cigamit** » Sat Dec 14, 2019 12:29 am

The log shows that the poller is running, so your cron is fine.
The Troubleshooter shows that the poller is able to write to the rra folders, so its not permissions. It might be an SELINUX issue though, so try temporarily disabling that if its not already.
It seems that you are trying to use the Cacti Stats template, you might want to try using something else (any of the host mib ones should do).
You can also change the logging mode to MEDIUM to see what results you are actually getting back from the devices.

The warning "failing back to udp ping due to setuid issues" may be the real culprit though. Kinda wierd since the poller runs as root. Can you do a "ls -al" on your spine binary.
Are the devices show as down? If that ping is failing, depending on device down settings, it will not try to poll the device.

netniV · Post by **netniV** » Mon Dec 16, 2019 9:29 am

I think cigamit is right, try a different graph. Or are you problems only with these special Cacti Stats graph templates?

FiSiGer · Post by **FiSiGer** » Wed Dec 18, 2019 9:55 am

Hello netniV, hello cigamit,

SELINUX is disabled from the beginning, so it can't be the issue. But thanks for the advice!
I think it isn't a graph problem, because I tried it with a few different graph templates, but none of them worked.
Even graph templates didn't work, which we using in our current productive cacti machine.

CPU-Avaya: (running perfect in our machine)

: 18.PNG (24.14 KiB) Viewed 1327 times

NET-SNMP:

: 19.PNG (24.78 KiB) Viewed 1327 times

Here is a screenshot of /bin/spine:

: 20.PNG (7.68 KiB) Viewed 1327 times

The thing is that the spine poller works complete fine for the Local-Linux-Machine and every ICMP-Ping and SNMP request works perfect from the machine and cacti.

Best regards
Johannes

netniV · Post by **netniV** » Fri Dec 20, 2019 5:47 am

Spine should be owned by root and SetUID flag should be marked. That way, when the poller runs, it is switches from the polling user which cron has defined, to root (which allows us to use ICMP ping packets) and then drop back to the polling user's effective level. That said, if the polling user does not have access to the RRD folders, it will never update them.

FiSiGer · Post by **FiSiGer** » Mon May 11, 2020 8:06 am

It was a permission issue, I changed the RRD folder rights. Than cacti was able to write files in it.

Thanks for your help guys!

Cacti